The short version
- We never sell your data. We share it only when you ask us to (for example, when you enquire about a home) and only with the people involved.
- Today PropPay helps you work out a budget, find homes NISH has checked and see who lends. No money moves through PropPay, and we don't ask for your NIN, BVN, ID documents or bank details.
- Your quick budget on the homepage isn't saved to your name unless you choose to save it. We keep an anonymous copy of the figures (rounded, with no contact details) to count how many people use the calculator and what they can afford.
- If your cooperative adds you, nothing is shared with it until you accept. If you decline, or don't respond within 30 days, we delete what it sent us.
- You can see, download or delete your data at any time from Profile › Privacy & data.
01Who we are
PropPay is run by NISH Affordable Housing Ltd (RC 1513196), Plot 1131, Cadastral Zone B07, Katampe, Abuja. We decide how your personal data is used, which makes us the "data controller" under the Nigeria Data Protection Act 2023 (NDPA). Our founder, [Founder's full name], is our Data Protection Officer until NISH appoints a dedicated one. You can reach them at dpo@proppay.online.
02What we collect, why, and for how long
| Data | What | Why | How long |
|---|---|---|---|
| Account | Name, phone number, email, password (stored scrambled), the roles you use (buyer, seller, financier, investor, service provider), buyer type, state | To create and secure your account and show you the right workspace | Until you close your account, then deleted within 30 days (see 07) |
| Your budget | Take-home pay, a co-borrower's pay if you add it, existing repayments, age, years in work or business, savings for a deposit, currency if you earn abroad | To estimate what you can afford and which homes fit | Quick budget on the homepage: not saved to your name. Saved budgets: until you delete them or close your account |
| Calculator use without an account | Anonymous figures only: rounded amounts, the area you searched, the rules version and the date. No name, phone, email or account link | To count calculator use and show anonymous demand totals (see 06) | [3] years [proposed]. These records can't be linked back to you, so they can't be downloaded or deleted with your account |
| Homes and interest | Homes and searches you save, enquiries you send, interest you register on bulletin posts or financier products | To show your saved items, pass your enquiry to the seller, and tell NISH what people want | Until you delete them or close your account. Enquiries: 2 years after the last message |
| Messages | Messages between you and NISH, and enquiries between you and sellers | To answer you and settle disagreements | 2 years after the last message in the thread |
| Cooperative member record (if your cooperative added you) | Name, phone number, budget or monthly take-home pay, preferred area and home type, the cooperative's own member number if it gave one, and who uploaded it | To invite you to PropPay and, if you accept, link you to your cooperative | Not accepted within 30 days: deleted. Declined: deleted straight away. In both cases we keep only a scrambled code of your phone number for up to [2] years, so that cooperative can't re-upload you without your request and your STOP is respected. Accepted: becomes part of your account |
| Organisation and professional details (cooperatives, sellers, financiers, service providers) | Organisation or practice name, registration or CAC number, professional registration numbers, state, certificates, examples of past work a provider uploads, names and phone numbers of officers or staff contacts, listing documents such as title and approvals | To check the organisation is real before it is shown to anyone, and to keep a record of what NISH checked | While the account is open, then 6 years after it closes |
| Communication choices | Which channels you agreed to (SMS, email, in-app, and WhatsApp if we add it), opt-outs, and a log of messages we sent you | To respect your choices and prove we did | While your account is open, then 6 years |
| Device and usage | Device type, browser, IP address, pages used, cookies | To keep the service secure, fix problems and improve it | 12 months |
| Security log | Who signed in, and which NISH staff viewed or changed which record, and when | To protect your account and check staff access | 6 years |
What we don't collect in Phase 1: NIN, BVN, passport or ID photos, selfies, bank or card details, bank statements, payslips or credit reports. If PropPay adds features that need any of these, we will update this notice and tell you before we collect anything new.
03The legal reasons we use your data
We use your data:
- to provide the service you signed up for (your account, budgets, saved homes, enquiries and messages);
- because you agreed, for example to marketing messages, analytics, or sharing your match status with your cooperative after you accept its invite;
- because the law requires it, for example answering a court order or a regulator; and
- because we have a legitimate reason that doesn't override your rights, for example checking that sellers and cooperatives are real, preventing fraud, keeping the security log, and producing anonymous totals (see 06).
We confirm your email address or your phone number.
When your cooperative uploads your details, its officer must first confirm that you gave the cooperative permission to share them with PropPay. We use those details only to send you one invite (and one reminder) and to show the cooperative what it uploaded. You can withdraw your agreement at any time; this doesn't affect anything done before.
05Budgets, matches and automated decisions
Budgets, "fits your budget" markers and match statuses are worked out automatically from your answers and the calculator rules NISH publishes. They are estimates, not loan offers and not decisions. Lenders make their own decisions, outside PropPay. If you think an automatic result about you is wrong, you can ask a person at NISH to review it.
06Anonymous totals
We combine budgets into totals, for example "312 buyers want homes in Ikate, median budget ₦58M", and share these with sellers, lenders and partners. These totals come from saved budgets and anonymous calculator use, and can't identify you. Cooperative demand is shown the same way: sellers and financiers see how many members are interested and their combined budget, never names. We don't publish a total that covers fewer than 10 people.
07Your rights
You can ask to see your data, correct it, delete it, limit how we use it, object to how we use it, take a copy in a common format, and withdraw your agreement.
- Download your data: Profile › Privacy & data › Download my data. We send you a file of everything we hold about you within 7 days.
- Delete your account: Profile › Privacy & data › Delete my account. We confirm by email, and delete your data within 30 days. We keep only what we must: the security log, records of what NISH checked and decided, and anything needed for a legal claim. These are kept for the periods in section 02. Copies in our backups are overwritten within [35] days [backup cycle: to confirm with the Founding Engineer].
- Cooperative members: you can unlink from your cooperative at any time, in one tap. It then stops seeing your match status and any new interest.
- Anything else: email dpo@proppay.online.
We reply within 30 days. If you're not happy with our answer, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
08How we protect it
Data is encrypted in transit and at rest. Access is limited to staff who need it, staff must use two-step sign-in, and every staff view of personal records is logged. You can turn on two-step sign-in too. If a breach puts your data at risk, we will tell the Nigeria Data Protection Commission within 72 hours and tell you without delay.
09Data stored outside Nigeria
Some of our providers store data on servers outside Nigeria: Supabase stores our database in London (UK); Vercel runs the site from London, delivers pages through servers around the world, and keeps its site logs and analytics in the United States; and Sentry stores error reports in Germany (EU). When this happens we use the safeguards the NDPA requires.
10Children
PropPay is for adults aged 18 and over. We don't knowingly collect data from children, and cooperatives must not upload anyone under 18.
12Changes to this notice
If we make an important change, we'll tell you by email or in the app at least 30 days before it takes effect. Previous versions stay available on this page.
Contact our Data Protection Officer
[Founder's full name] (acting Data Protection Officer) · dpo@proppay.online · NISH Affordable Housing Ltd, Plot 1131, Cadastral Zone B07, Katampe, Abuja
Manage my data · Cookie settings