Privacy Policy

This policy explains how Acreden collects and uses personal data, in line with the Nigeria Data Protection Act 2023 (NDPA). Acreden (operated by [company legal name — PENDING registration details]) is the data controller.

1. What we collect

• Account data — name, email, phone, authentication identifiers (managed by our sign-in provider, Clerk).
• Identity verification — BVN/NIN checks run through licensed KYC providers. We store the verification result and provider reference, not your raw BVN/NIN, wherever avoidable.
• Listing and transaction data — property details, title documents you upload, offers, escrow milestones, and the audit trail of a transaction.
• Messages — chat on the platform is stored and screened automatically for fraud patterns (e.g. attempts to move payment off-platform).
• Technical data — device and usage information needed to run and secure the service.

2. Why we use it

• To verify identities and property listings — the core of the service.
• To process visits, offers, escrow payments, and ownership transfer.
• To detect and prevent fraud, including maintaining a blacklist of bad actors.
• To send service emails (verification results, offers, alerts you asked for).
• To meet legal obligations, including anti-money-laundering rules.

3. Sharing

We share data only with the service providers needed to run Acreden (identity/KYC, payments and escrow, hosting, email), with professional advisers, and with authorities where the law requires. We never sell personal data. Counterparties in a chat see your role, not your contact details, until a transaction stage requires disclosure.

4. Retention

Transaction and verification records are kept for as long as the law and fraud prevention require — property transactions have long legal tails. [PENDING LEGAL REVIEW — specific retention periods.]

5. Your rights

Under the NDPA you may request access to, correction of, or deletion of your personal data, object to certain processing, and complain to the Nigeria Data Protection Commission. Write to privacy@acreden.com — we respond within the statutory period. Deletion requests cannot erase records we must keep by law (e.g. completed transaction and anti-fraud records).

6. Security

Documents are stored in access-controlled storage with every access logged; payments run through licensed partners; admin actions are audited. No system is perfectly secure — report concerns to security@acreden.com.