This policy explains how prop.os collects, uses, shares, and protects personal data, and the rights you have. We handle personal data in line with the Nigeria Data Protection Act 2023 (NDPA).
prop.os (“prop.os”, “we”, “us”, or “our”) provides a property operating system for real estate businesses, operated in Nigeria and available at gopropos.com. This policy applies to our website, app, and related services.
Our role depends on the data:
Under the NDPA we rely on: performance of our contract with you; your consent (which you can withdraw); our legitimate interests in operating and securing the service; and compliance with legal obligations. Where you upload data about tenants and buyers, you are responsible for the lawful basis for that processing.
We do not sell your personal data. We share it with trusted service providers who process it on our behalf, only as needed to run the service:
| Provider | Purpose |
|---|---|
| Supabase | Database hosting, authentication, and file storage |
| Paystack | Subscription billing and rent/sale payment processing |
| Meta (WhatsApp Business Platform) | Sending WhatsApp reminders and messages |
| Resend | Sending transactional and notification emails |
| Anthropic | Powering the AI assistant over your records |
| Cloudflare (Turnstile) | Bot protection on sign-up and forms |
| Vercel | Application hosting and delivery |
We may also disclose data where required by law, to protect our rights or the safety of others, or in connection with a business transfer such as a merger or acquisition.
Much of the personal data in prop.os is about your tenants and buyers, which you provide. As the controller of that data, you must have a lawful basis to collect and upload it, obtain any consent needed to contact those individuals through the service, and honour their data-subject requests. We will assist you in responding to such requests as your processor.
Some of our providers process data outside Nigeria. Where personal data is transferred abroad, we rely on the transfer mechanisms permitted by the NDPA and take reasonable steps to ensure it remains protected.
We keep personal data for as long as your account is active and as needed to provide the service, then for any period required to meet legal, tax, or accounting obligations or to resolve disputes. When you close your account you may request an export within 30 days, after which we may delete or anonymise your data, subject to those obligations.
We use technical and organisational measures to protect personal data — including encryption in transit, access controls and row-level security in our database, hashed passwords, and signed, verified payment webhooks. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.
Subject to the NDPA, you have the right to access your personal data, to correct it, to request its deletion, to object to or restrict certain processing, to withdraw consent, and to data portability. To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).
We use cookies and similar browser storage (such as local and session storage) to keep you signed in, remember preferences, and secure the service. Essential storage is required for the app to function; you can control non-essential storage through your browser settings.
The service is intended for businesses and is not directed to anyone under 18. We do not knowingly collect personal data from children.
We may update this policy from time to time. If we make material changes we will provide reasonable notice, for example by email or in the app. The “last updated” date above shows the current version.
For any privacy question or request, contact us at [email protected].