Privacy Policy

SureKeys is a rental platform for Nigeria. Tenants find and inspect homes, agents list and manage them, and both keep their rental records in one place.

SureKeys is operated from Nigeria and decides how the information described below is used. The best way to reach us about anything on this page is support@surekeys.ng.

We collect what the product needs to work. In practice that is:

When you create an account

• Your email address and a password, which we store only as a one-way hash — we cannot read it.
• Your name and phone number.
• Whether you are using SureKeys as a tenant or an agent.
• Your business name, if you are an agent.
• A profile photo, if you upload one.

When you list a property (agents)

• The property's details, address, rent and fees, and the photos you upload.
• Records of tenants you manage: their name, phone, email, occupation, employer, lease terms, payments you record, and any documents or notes you add to their file.

When you apply or book an inspection (tenants)

• Your name, phone number, occupation, employer, intended move-in date and the message you write.
• Your inspection requests, preferred dates, and whether a visit happened.

When you use the community, reviews or the vault

• Posts, comments, likes and bookmarks. Posts and comments are visible to other signed-in users.
• Reviews and ratings you leave after an inspection, including any reply the agent writes.
• Documents you upload to your Property Vault — tenancy agreements, receipts, inspection reports and anything else you choose to store. These are private to your account.
• Rental records you add to the rent tracker, including landlord and agent names, amounts and payment dates.

Technical information

• A session cookie that tells us whether you are signed in, and a token stored in your browser that keeps you signed in.
• Standard server logs kept by our hosting providers, which include IP addresses, for security and troubleshooting.
• Records of actions our administrators take on accounts and listings, so moderation decisions can be reviewed.

• Card or bank details. SureKeys does not process payments. Rent is paid directly between you and your landlord or agent; the rent tracker only records that a payment happened.
• Advertising or tracking cookies. We run no analytics product, no advertising pixels and no third-party trackers on this site. If that changes, we will say so here first.
• Your BVN. We never ask for it, and no one from SureKeys will request it. Treat anyone who does as a fraudster.

• To provide the service — showing listings, passing an application to the agent, arranging inspections, keeping your documents. Lawful basis: performance of a contract with you.
• To keep the platform safe — verifying accounts, reviewing reports, detecting duplicate or fraudulent listings, suspending accounts that break the rules. Lawful basis: our legitimate interest in preventing fraud and protecting users.
• To contact you about your inspections, applications, rent reminders and account security. Lawful basis: performance of a contract, and your consent for anything promotional.
• To meet legal obligations, including responding to lawful requests from the Nigeria Data Protection Commission, law enforcement or a court.

We do not sell your personal data, and we do not share it with advertisers.

• Public to anyone: property listings, including photos, area and price. The exact street address is hidden from visitors who are not signed in.
• Visible to other signed-in users: your name on community posts, comments and reviews you write.
• Shared with an agent: the details in an application or inspection request you send them. Your phone number and email are released to the agent only once an inspection time is confirmed — and theirs to you at the same moment.
• Private to you: your Property Vault documents, your saved properties, and your rent records. Our administrators can access account records where they need to investigate a report or a safety issue, and every such action is logged.

We keep this list short on purpose. Today it is:

• Cloudinary — stores listing photos and vault documents. Documents are stored privately and served through links that expire.
• Brevo — sends our transactional email, such as verification and inspection updates.
• Our hosting and database providers — run the application and store its database.

We use each of these under their own terms and privacy policies, and only to run SureKeys. We will update this list when it changes.

• Your account and everything in it stays while your account is open.
• When you ask us to delete your account, we remove your personal details from the live service.
• We may keep records connected to a report, a suspension or suspected fraud for as long as they are needed to deal with the matter, or for as long as the law requires.
• Community posts are anonymised rather than deleted when an account closes, so conversations other people relied on stay readable.

• Passwords are hashed with bcrypt and never stored in readable form.
• Access requires a signed token, and sessions expire.
• Vault documents are stored privately and opened through short-lived links, so a copied link stops working.
• Uploads are checked by file content, not by the name or type the browser claims.
• Administrator actions are recorded in an audit log.
• Email addresses must be verified before an account can post, apply or book anything.

No system is perfectly secure. If a breach ever affects your personal data, we will tell affected users and follow the reporting steps the law requires of us.

Under the Nigeria Data Protection Act 2023, you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything that is wrong — most of it you can edit yourself in Settings.
• Delete your account and the personal data attached to it.
• Restrict or object to a particular use of your data.
• Withdraw consent you gave us, such as for marketing email, at any time.
• Receive your data in a portable format.

Email support@surekeys.ng and we will deal with your request as quickly as we reasonably can. If you are not satisfied, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.

We use the minimum needed to keep you signed in: a cookie that records whether you have a session, and a token kept in your browser's storage. Both are strictly necessary for the service to work, so we do not ask for consent to use them.

We set no advertising or analytics cookies. Clearing your browser storage will sign you out but will not affect your account.

SureKeys is for adults entering tenancy agreements. You must be at least 18 to create an account. If we learn that we hold data about a child, we delete it.

Some of the providers listed above store data on servers outside Nigeria. Where that happens, your data is handled under those providers' own security and privacy terms, which you can read on their websites.

When we change this policy we update the date at the top. If a change materially affects you — for example, if we begin using analytics — we will say so in the app rather than change this page quietly.

For anything about your data — a question, a correction, or a request to delete your account — email support@surekeys.ng. It reaches the person responsible for this at SureKeys.

Back to home