Privacy Policy

Keyda Technologies Limited is incorporated in Nigeria (RC: 0000000000). Our Data Protection Officer can be reached at privacy@keyda.ng.

We collect the following categories of personal data:

• Identity data: first name, last name, email address, phone number, date of birth, photograph, nationality.
• Verification data: NIN (National Identification Number) and BVN (Bank Verification Number) — stored as one-way cryptographic hashes only. Raw values are never stored.
• Location data: rental address, city, state, GPS coordinates (with explicit consent for mobile).
• Financial data: payment card tokens (via Paystack PCI-DSS Level 1), transaction history, RNPL repayment records.
• Tenancy data: lease agreements, maintenance requests, dispute records, communication history.
• Behavioural data: platform usage, search history, session logs (used to compute TrueScore).
• Device data: IP address, device type, OS version, push notification token.

Your data is used to:

• Verify your identity and comply with KYC/AML obligations.
• Match tenants with suitable properties and facilitate lease execution.
• Process rent payments and RNPL instalments.
• Compute and update your TrueScore.
• Resolve disputes and enforce lease terms.
• Send transactional notifications (rent due, lease updates, maintenance status).
• Comply with Nigerian regulatory requirements (FIRS, CBN, EFCC, NIN).
• Improve platform security and detect fraud.

We do not sell your personal data to third parties for marketing purposes.

We process your data under the following NDPR lawful bases:

• Contract performance: processing necessary to execute or fulfil a lease agreement.
• Legal obligation: KYC/AML checks, regulatory reporting.
• Legitimate interest: fraud prevention, platform security, TrueScore computation.
• Consent: marketing communications, GPS access, optional profile data.

We share data only as necessary:

• Counterparties: landlords/tenants see each other's verified display name, role, and TrueScore tier only.
• Payment processors: Paystack (PCI-DSS Level 1) — tokenised card data only.
• Identity verification: Smile Identity — for NIN/BVN validation. They receive your NIN/BVN hash and return a match result. They do not store biometric data on our behalf.
• Blockchain: Lease hashes are published to the Polygon blockchain (public). No PII is included.
• Regulators: We comply with lawful requests from Nigerian regulatory authorities.

We retain your data for as long as your account is active and for a minimum of 7 years after account closure (in line with FIRS tax record requirements). Anonymised analytics data may be retained indefinitely.

Under the NDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of data (subject to legal retention obligations).
• Object to or restrict certain processing activities.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time (without affecting prior lawful processing).

To exercise your rights, email privacy@keyda.ng. We will respond within 30 days.

We implement industry-standard technical and organisational measures including:

• TLS 1.3 for all data in transit.
• AES-256 encryption for data at rest.
• NIN/BVN stored only as bcrypt-hashed values.
• Redis-based rate limiting on all auth endpoints.
• Regular penetration testing and OWASP Top 10 audits.

Our web platform uses essential cookies for authentication (JWT stored in httpOnly cookies) and optional analytics cookies (with your consent). You can manage cookie preferences in your browser settings.

We may update this policy from time to time. We will notify you by email or in-app notification for material changes. Continued use of the platform after such notification constitutes acceptance.

Keyda Technologies Limited
Data Protection Officer
privacy@keyda.ng
Lagos, Nigeria