Privacy Policy

1. Who we are

This Privacy Policy explains how [company name] ("PropVeil", "we") handles personal data in the PropVeil app and website. We follow Cameroon Law No. 2024/017 of 23 December 2024 on personal data protection and its implementing rules.

For the personal data of your tenants and team that you enter into PropVeil, you (the landlord or agency) decide why and how it is used, and PropVeil processes it on your behalf. For your own account and for running the service, PropVeil is the data controller.

Contact for data protection: [data protection contact].

2. The data we handle

Account data: your name, email address, optional phone number, password (stored only in hashed form), profile photo, language, and the role you hold in a workspace. If you sign in with Google or GitHub, we receive your name, email and profile picture from that provider.

Workspace data you or your team enter: properties (name, address, city, optional map position and photos), units and rents, tenant records (name, phone number, email, lease dates, deposit, WhatsApp opt-in, optional photo), rent invoices and payment records, payment proofs (receipt photos you upload), maintenance requests with descriptions, comments and photos, documents such as leases and receipts, and team invitations.

Location data: caretakers can record the GPS position of a site visit when they check in. This is requested only while the app is open and only when the caretaker taps check in. Landlords can also store a property's map position.

Device and technical data: a push notification token with your device platform and language so we can send notifications you have allowed, and standard server logs (IP address, time, request details) for security and to prevent abuse.

Subscription data: your plan, billing period and payment status. Your mobile money number and PIN are handled by our payment provider and never stored by PropVeil.

Not collected: we do not use advertising or analytics trackers, and we do not sell personal data. Biometric unlock (fingerprint or face) and your PIN stay on your device.

3. Why we use it, and our legal basis

To provide the service you asked for, including accounts, workspaces, rent records, documents, notifications and support (performance of our contract with you).

To keep PropVeil secure, prevent fraud and abuse, and fix problems (our legitimate interest in running a safe service).

To send you messages about your account and what you have asked us to send, such as rent reminders and notifications (your consent and the contract).

To meet legal obligations, such as keeping financial records (legal obligation).

Where we rely on consent, you can withdraw it at any time without affecting what happened before.

4. Who we share it with

Within a workspace, data is visible only to people whose role allows it. A tenant sees only their own records, a caretaker or vendor does not see rent or payment figures, and so on.

We use service providers who process data for us under agreements: Cloudflare (hosting, database and file storage), Fapshi (subscription payments by mobile money), Twilio (WhatsApp message delivery), Resend (email delivery), Expo (push notifications), Google Maps (address lookup) and Google Gemini and OpenRouter (AI-assisted triage of maintenance requests, which receives the ticket text you submit).

We may disclose data when the law requires it, to a competent authority, or to protect rights and safety. We do not share personal data for advertising.

5. Transfers outside Cameroon

Our providers operate data centres in several countries, so your data may be processed outside Cameroon. We choose providers with appropriate security commitments and, where the law requires it, rely on the approvals and safeguards it provides for such transfers.

6. How long we keep it

We keep data while your account or workspace is active. When you delete your account, it is deactivated immediately and your personal data is erased after 30 days, apart from records we must keep by law, such as financial records, which we keep for the required period and then delete.

A workspace administrator can remove tenants and team members. Tenant records with payment history cannot be deleted, to protect the financial record; they can be ended instead, and their personal details are handled in line with this policy.

Server logs are kept for a short period for security. Older entries are deleted.

7. How we protect it

We use encryption in transit, access control by role, separate storage for sensitive files such as payment proofs, rate limits and audit logs. No system is perfectly secure, so we also limit who can reach data and review access.

If a personal data breach affects you, we will notify the competent authority and the people concerned as the law requires.

8. Your rights

You have the right to be informed, to access your data, to correct or complete it, to object to its use, to ask for restriction or deletion, to receive your data in a portable format, to withdraw consent, to give instructions about your data after your death, and to complain to the data protection authority.

You can edit your profile and delete your account in the app. For other requests, or if you are a tenant and want to use these rights, write to [data protection contact]. If your landlord controls your data, we will pass the request on to them where needed. We will answer within the time the law sets.

9. Children

PropVeil is for adults. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.

10. Changes

We may update this policy. We will tell you about important changes in the app or by email. The date at the top shows when it was last updated.