Privacy policy

• Account data — name, email, phone, password hash, role, profile picture, locale and notification preferences.
• Profile data — for tenants: occupation, employer, income band, move-in preferences; for landlords and agents: company, licence and payout details.
• Identity documents — documents you upload for applications or KYC verification, and the result of verification checks.
• Property data — addresses, photos, ownership documents and listing details supplied by landlords and agents.
• Transaction data — applications, viewings, leases, signatures (typed name, timestamp, IP address, user agent), invoices, payment references and amounts. We never receive or store card numbers.
• Communications — messages between users, maintenance threads, disputes and support requests.
• Technical data — hashed IP address, device and browser information, pages viewed and listing views, used for security, rate limiting and analytics.

• To provide the service: publishing listings, matching applicants, generating leases, processing payments and maintenance requests (performance of a contract).
• To verify properties and identities and to prevent fraud and abuse (legitimate interests and legal obligations).
• To send transactional notifications — viewing confirmations, application decisions, rent reminders, security alerts — in-app, by email and, where you opt in, by SMS.
• To produce aggregate analytics for landlords about their own listings and for SpartHome to improve the platform.
• To comply with tax, accounting, anti-money-laundering and other legal duties.

We do not sell personal data and we do not use it for third-party advertising.

Other users: your name, photo and the content you submit are shown to the counterpart of a viewing, application, lease or conversation. Identity documents are visible only to the landlord or agent responsible for the specific property you applied to, and to SpartHome staff performing verification. Your exact address is shown to renters only after a confirmed viewing.

Processors: hosting and database providers, object-storage providers for files, payment providers (Paystack, Flutterwave or Stripe depending on your country), email and SMS delivery services, and map-tile providers. Each acts on our instructions under a data-processing agreement.

Authorities: where required by law or to protect the rights and safety of users.

• Account and profile data — for the life of the account and 30 days after deletion, then erased or anonymised.
• Applications and uploaded identity documents — 12 months after the application is closed, unless a lease results.
• Leases, invoices, payments and signatures — 7 years after the lease ends, to meet accounting and legal obligations.
• Messages and maintenance threads — for the life of the related property relationship plus 24 months.
• Audit and security logs — 24 months.

Passwords are hashed with bcrypt; sessions use signed, HTTP-only cookies; all traffic is encrypted in transit. Private files are stored in object storage without public access and served through short-lived signed links. Sensitive actions require re-verification of role and ownership on the server, are rate-limited and are recorded in an audit log. Access by staff is role-based and logged.

Subject to local law you may access, correct, export or delete your data, object to or restrict processing, and withdraw consent where processing is consent-based. Most of this can be done in Settings: update your profile, change notification channels, remove uploaded documents or request account deletion. For anything else, email contactsupport@sparthome.com; we respond within 30 days. You may also complain to your data-protection authority.

We use strictly necessary cookies only: a session cookie to keep you signed in, a CSRF token, and a preference cookie for light/dark theme. Listing-view analytics use a per-browser session identifier that is not linked to third parties. We do not use advertising or cross-site tracking cookies.

SpartHome serves users in several countries and our processors may be located outside your country. Where data leaves a jurisdiction with adequacy protections we rely on standard contractual clauses or equivalent safeguards.

The service is not directed at people under 18 and we do not knowingly collect their data. If you believe a minor has registered, contact us and we will remove the account.

We will notify you of material changes in-app or by email. Data-protection enquiries: contactsupport@sparthome.com.