Privacy Policy
RentShield
Operated by Astor Stack Technologies (Pty) Ltd
Effective date: 6 July 2026
Last updated: 6 July 2026
1. Introduction
RentShield is a property management and tenant onboarding platform for Nigerian landlords, property agencies, and diaspora property owners. It is operated by Astor Stack Technologies (Pty) Ltd, a company registered in South Africa.
This Privacy Policy explains how we collect, use, store, share, and protect personal data when you use our platform at rentshield.ng. It applies to landlords, agents, tenants, prospective tenants, guarantors, and anyone else who interacts with RentShield.
We are committed to protecting your personal data in compliance with the Nigeria Data Protection Act 2023 (NDPA) and the General Application and Implementation Directive (GAID) 2025 issued by the Nigeria Data Protection Commission (NDPC).
By using RentShield, you confirm that you have read and understood this Privacy Policy.
2. Who we are
Data Controller:
Astor Stack Technologies (Pty) Ltd
Operating platform: rentshield.ng
Contact email: privacy@rentshield.ng
Contact email (general): hello@rentshield.ng
As the operator of RentShield, Astor Stack Technologies is the data controller responsible for personal data collected through the platform. Landlords and agencies using RentShield to manage their tenants act as independent data controllers for the personal data of their applicants and tenants, and are responsible for ensuring their own compliance with applicable data protection law.
3. Personal data we collect
We collect different categories of personal data depending on how you use RentShield.
3.1 Landlords and agents
When you create an account and manage properties on RentShield, we collect:
- Full name
- Email address
- Phone number
- Country of residence
- Organisation name and type
- Bank account details (for Paystack subaccount setup — bank name, account number, account name)
- IP address and browser information
- Login activity and session data
3.2 Prospective tenants (viewing requests)
When you request a viewing for a property, we collect:
- Full name
- Email address
- Phone number
- Preferred viewing times
3.3 Tenant applicants
When you submit a rental application, we collect:
- Full name, date of birth, gender, and marital status
- Email address and phone number (OTP-verified)
- Current residential address and state of origin
- Occupation, employer or business name, and monthly income range
- Reason for moving and intended move-in date
- Previous landlord contact details
- Emergency contact details
- Guarantor details (name, phone, address, occupation, relationship)
- National Identification Number (NIN)
- Selfie photograph
- Proof of income or business evidence
- Utility bill or address proof
- Guarantor identity documents and photograph
- Names, ages, and relationships of all intended occupants
3.4 Identity verification data
We use Prembly, a Nigerian identity verification service, to verify NIN numbers and match selfie photographs against NIN records. Prembly processes your NIN number and selfie image and returns a verification result. We store the verification result and confidence score against your application record. We do not store your raw NIN image beyond what is required for the verification process.
3.5 Payment data
We use Paystack to process rent payments and deposits. RentShield does not store your full card details or bank account credentials. Paystack processes payment transactions as a licensed payment service provider. We store payment records including amount, currency, date, provider reference, and status.
3.6 Property condition data
When a landlord creates a move-in or move-out condition report, we store:
- Room-by-room condition ratings and notes
- Photographs and video uploaded by the landlord
- Meter readings and inventory records
- Tenant acknowledgement and any dispute notes
3.7 Maintenance and communication data
- Maintenance requests submitted by tenants, including photographs and descriptions
- Messages and complaints exchanged between tenants and landlords through the platform
- Timestamps and IP addresses associated with all submissions
3.8 Technical data
- IP address and approximate location
- Browser type and version
- Device type and operating system
- Session and activity logs
- Cookies and local storage data
4. How we use your personal data
We process personal data for the following purposes and on the following legal bases under the NDPA 2023:
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Contract |
| Processing tenant applications and verifying identity | Contract and legitimate interests |
| Generating and managing tenancy agreements | Contract |
| Processing rent and deposit payments | Contract |
| Sending transactional emails and SMS notifications | Contract |
| Verifying NIN and identity via Prembly | Contract and legal obligation |
| Recording move-in condition reports as property evidence | Legitimate interests |
| Managing maintenance requests | Contract |
| Detecting fraud and preventing misuse | Legitimate interests |
| Complying with applicable law | Legal obligation |
| Improving the platform | Legitimate interests |
We do not use your personal data for unsolicited marketing. We do not sell your personal data to third parties.
5. Sensitive personal data
RentShield collects and processes the following categories of sensitive personal data:
- National Identification Number (NIN) — a government-issued identity number
- Biometric data — selfie photographs used for identity verification
- Financial information — income evidence and payment records
We collect this data solely for the purpose of tenant identity verification and tenancy administration. We process it on the basis of your explicit consent, provided when you submit your application, and on the basis of our legitimate interests in maintaining a safe and verified rental platform.
You have the right to withdraw consent at any time. Withdrawing consent may affect your ability to complete the application process.
6. Third-party services we use
We share personal data with the following third-party service providers who process data on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and file storage | United States |
| Prembly | NIN verification and face match | Nigeria |
| Paystack | Payment processing | Nigeria |
| Stripe | International payment processing | United States |
| Resend | Transactional email delivery | United States |
| Termii | SMS notifications and OTP | Nigeria |
| Mocean | SMS fallback provider | Malaysia |
| Cloudflare | Web hosting and performance | United States |
Where personal data is transferred outside Nigeria, we rely on contractual safeguards including standard contractual clauses and the data protection commitments of each provider. Supabase, Resend, Stripe, and Cloudflare are bound by applicable international data protection frameworks including GDPR-equivalent standards.
We do not share your personal data with any third party beyond those listed above, except where required by law or court order.
7. Data retention
We retain personal data for as long as necessary to fulfil the purpose for which it was collected, and in accordance with applicable legal and regulatory requirements.
| Data category | Retention period |
|---|---|
| Landlord account data | Duration of account plus 7 years after closure |
| Tenant application data | 7 years from application date |
| Tenancy agreement and signed documents | 7 years from tenancy end date |
| Payment records and receipts | 7 years from payment date |
| Move-in and move-out condition reports | 7 years from tenancy end date |
| Maintenance records | 7 years from tenancy end date |
| Identity verification results (Prembly) | 7 years from verification date |
| Viewing request data | 2 years from request date |
| Activity logs | 2 years |
We retain records for 7 years to comply with Nigerian tenancy and financial record-keeping obligations. After the applicable retention period, we securely delete or anonymise personal data.
We do not hard-delete records during the retention period. All records are soft-deleted and remain in our database until the retention period expires.
8. Your rights under the NDPA 2023
As a data subject under the Nigeria Data Protection Act 2023, you have the following rights:
Right to information — You have the right to know what personal data we hold about you and how we use it.
Right of access — You may request a copy of the personal data we hold about you.
Right to rectification — You may request that we correct inaccurate or incomplete personal data.
Right to erasure — You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
Right to object — You may object to our processing of your personal data where we rely on legitimate interests as the legal basis.
Right to withdraw consent — Where we process your data based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
Right to lodge a complaint — You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng if you believe your data protection rights have been violated.
To exercise any of these rights, contact us at privacy@rentshield.ng. We will respond within 30 days of receiving your request.
9. Data security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- All data transmitted to and from RentShield is encrypted using HTTPS/TLS
- Database access is controlled by row-level security policies scoped to each organisation
- File uploads (documents, photos, condition reports) are stored in private Supabase Storage buckets accessible only via signed URLs
- Identity verification documents are uploaded via short-lived signed upload URLs — they are not publicly accessible
- All staff and system access is logged
- Passwords are hashed and never stored in plaintext
We do not guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you and the NDPC within 72 hours of becoming aware of the breach, as required by the NDPA 2023.
10. Cookies and tracking
RentShield uses cookies and local storage for the following purposes:
- Session cookies — to keep you logged in during your session
- Security cookies — to protect forms against cross-site request forgery
- Local storage — to save application form progress so you do not lose your work if you navigate away
We do not use advertising cookies, tracking pixels, or third-party analytics that profile your behaviour across other websites. We do not use Google Analytics or Facebook Pixel.
11. Children
RentShield is not intended for use by persons under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected personal data from a person under 18, please contact us at privacy@rentshield.ng and we will delete it promptly.
For tenancy records, we collect the names and ages of child occupants as part of the occupant register. This data is collected from the adult applicant (parent or guardian) and is used solely to maintain an accurate record of approved occupants in the tenancy.
12. Cross-border data transfers
RentShield is operated from South Africa and uses service providers located in Nigeria, the United States, and Malaysia. By using RentShield, you acknowledge that your personal data may be transferred to and processed in countries outside Nigeria.
We ensure that all cross-border transfers are made with appropriate safeguards in place, including standard contractual clauses and the data protection commitments of each provider, as permitted under Section 43 of the NDPA 2023.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the effective date at the top of this page. Continued use of RentShield after changes are published constitutes acceptance of the updated policy.
14. Contact us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, contact us at:
Email: privacy@rentshield.ng
General enquiries: hello@rentshield.ng
Platform: rentshield.ng
To lodge a complaint with the regulator:
Nigeria Data Protection Commission (NDPC)
Website: ndpc.gov.ng