Privacy Policy

1. Introduction

Estora ("we," "our," or "us") is a property operations and compliance platform owned and operated by Herakon Lab, powered by the Korvia Core Engine. We are committed to protecting the privacy, security, and confidentiality of personal data collected from landlords, property managers, tenants, estate developers, and visitors to our website (getestora.com.ng) and mobile applications.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the Nigeria Data Protection Act (NDPA) 2023 and applicable international data privacy standards.

2. Information We Collect

We collect personal data that you voluntarily provide to us when registering for an account, onboarding properties, making payments, or submitting support tickets:

• Account Identification Data: Full name, email address, phone number, physical address, profile photo, and role (Landlord, Property Manager, Tenant, Lawyer, Developer).
• Property & Tenancy Records: Unit addresses, lease start/end dates, rental payment terms, security deposit details, and maintenance ticket logs.
• Financial & Transactional Information: Virtual bank account allocations, payment settlement records, transaction reference IDs, and billing preferences (processed via licensed PCI-DSS Level 1 partners).
• Identity Verification Data: Government-issued ID cards, NIN, utility bills, or business registration documents submitted for account verification.
• Device & Usage Data: IP address, browser type, device identifier, app crash logs, and navigation patterns collected automatically.

3. How We Use Your Information

We process your personal data for lawful purposes including:

• Provisioning dedicated virtual bank accounts and facilitating automated rent collections.
• Generating legally compliant rent receipts under Nigerian state tenancy laws.
• Sending automated rent due reminders, WhatsApp notifications, and payment alerts.
• Processing AI-assisted maintenance ticket triaging and contractor dispatching.
• Preventing fraud, money laundering, and illegal account activities.
• Fulfilling legal obligations under Nigerian property and financial regulations.

4. Data Sharing & Disclosure

We do not sell your personal data. We share your information only in the following limited circumstances:

• Licensed PSP & Banking Partners: Paystack, Moniepoint, and licensed commercial bank partners for payment processing and NIP settlements.
• Property Stakeholders: Sharing payment confirmation and maintenance updates between tenants, landlords, and assigned facility contractors.
• Legal & Regulatory Authorities: When required by Nigerian law, court orders, or law enforcement investigations.
• Service Providers: Cloud infrastructure providers (AWS/GCP), SMS/WhatsApp gateways, and analytics tools under strict data processing agreements.

5. Data Security & Storage

We implement industry-standard administrative, physical, and technical safeguards. All data in transit is encrypted using TLS 1.3 encryption, and data at rest is encrypted using AES-256 standards. Property records are backed up across secure servers operating with 99.9% uptime SLAs.

6. Your Data Rights under NDPA

Under the Nigeria Data Protection Act 2023, you have the right to:

• Access and request copies of your personal records stored on Estora.
• Request rectification of incomplete or inaccurate data.
• Request erasure ("right to be forgotten") subject to legal retention obligations.
• Object to automated decision-making or direct marketing messages.
• Withdraw consent at any time without affecting prior lawful processing.

7. Contact Us & Data Protection Officer

If you have questions, concerns, or data rights requests, please contact our Data Protection Officer: