Privacy Policy

1. Introduction

Casaas ("Casaas", "we", "our", or "us") is committed to protecting your privacy and safeguarding the personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you access or use the Casaas Platform, including our web portal, mobile applications, APIs, and related services.

Casaas processes personal data in accordance with the Nigeria Data Protection Act, 2023 (NDPA), applicable regulations issued by the Nigeria Data Protection Commission (NDPC), and other applicable laws.

By using the Platform, you consent to the collection and processing of your personal information as described in this Privacy Policy.

2. Information We Collect

We collect information directly from you, automatically through your use of the Platform, and from authorized third parties.

2.1 Information You Provide

Depending on your role on the Platform, we may collect:

·       Full name

·       Email address

·       Phone number

·       Residential address

·       Estate information

·       House or apartment details

·       Resident type (Owner, Tenant, Occupant)

·       Profile photograph (where applicable)

·       Vehicle information

·       Visitor information

·       Emergency contact information

·       Bank account details (Estate Administrators)

·       Wallet and payment information

·       Complaint submissions

·       Support requests

·       Communication preferences

2.2 Information We Collect Automatically

When you use Casaas, we may automatically collect:

·       IP Address

·       Device identifiers

·       Browser information

·       Operating system

·       Login history

·       Activity logs

·       Session information

·       App usage statistics

·       Access logs

·       Transaction history

·       Security audit logs

·       Approximate location information

·       Cookie and analytics information

2.3 Information Received from Third Parties

We may receive information from:

·       Estate Management Companies

·       Resident Associations

·       Payment Service Providers

·       Identity Verification Providers

·       Banks

·       Government Agencies

·       Security Service Providers

·       Law Enforcement Agencies (where legally required)

3. How We Use Your Information

We use your information to:

·       Create and manage user accounts.

·       Verify user identity.

·       Manage estates, residents, visitors, and security personnel.

·       Generate visitor access codes and QR codes.

·       Process wallet funding and payments.

·       Generate bills, invoices, and settlements.

·       Facilitate communication between estates and residents.

·       Process complaints and service requests.

·       Maintain audit trails and security logs.

·       Detect fraud and unauthorized activities.

·       Improve the Platform and user experience.

·       Provide customer support.

·       Comply with legal and regulatory obligations.

4. Wallet and Payment Information

Where payment services are available through Casaas:

·       Wallet funding transactions are processed through licensed third-party payment service providers.

·       Casaas does not store complete debit or credit card information.

·       Wallet funding, billing, payment, invoice, and settlement records are maintained for reconciliation, reporting, audit, and regulatory purposes.

·       Payment information is processed only for legitimate business purposes and in accordance with applicable financial regulations.

5. CCTV, Visitor and Security Records

To support community safety, Casaas may process information relating to:

·       Visitor registrations

·       Visitor photographs (where applicable)

·       Access codes

·       QR Codes

·       Entry and exit timestamps

·       Gate access records

·       Vehicle information

·       Security incident records

·       Security personnel activity logs

Such information is collected solely for estate security, access management, investigation of incidents, and audit purposes.

6. Cookies and Similar Technologies

Casaas uses cookies and similar technologies to:

·       Authenticate users.

·       Maintain secure sessions.

·       Remember user preferences.

·       Improve platform performance.

·       Analyse platform usage.

·       Prevent fraud and abuse.

Users may disable cookies through their browser settings, although certain Platform features may not function correctly.

7. Sharing of Information

Casaas does not sell personal information.

We may disclose personal information only where necessary to:

·       Estate Management Companies

·       Estate Administrators

·       Resident Associations

·       Payment Service Providers

·       Banks

·       Cloud Infrastructure Providers

·       Technology Vendors

·       Customer Support Providers

·       Auditors

·       Legal Advisers

·       Regulatory Authorities

·       Law Enforcement Agencies

·       Courts of competent jurisdiction

All third parties processing personal data on behalf of Casaas are required to implement appropriate confidentiality and security measures.

8. Information Security

Casaas implements appropriate technical and organizational measures to safeguard personal information against:

·       Unauthorized access

·       Loss

·       Alteration

·       Destruction

·       Disclosure

·       Misuse

These measures include:

·       Encryption

·       Secure authentication

·       Access controls

·       Role-based permissions

·       Audit logging

·       Secure cloud infrastructure

·       Firewall protection

·       Continuous monitoring

·       Regular security reviews

9. Data Retention

Casaas retains personal information only for as long as necessary to:

·       Provide the Platform;

·       Fulfil contractual obligations;

·       Process payments and settlements;

·       Resolve disputes;

·       Meet audit requirements;

·       Comply with legal and regulatory obligations.

Where retention is no longer required, personal information will be securely deleted, anonymized, or archived in accordance with applicable law.

10. International Transfers

Where personal information is processed outside Nigeria through cloud infrastructure or third-party service providers, Casaas shall ensure appropriate safeguards are implemented in accordance with applicable data protection laws.

11. Your Privacy Rights

Subject to applicable law, you have the right to:

·       Access your personal information.

·       Correct inaccurate information.

·       Request deletion of your personal information.

·       Withdraw consent where processing is based on consent.

·       Object to certain processing activities.

·       Restrict processing in certain circumstances.

·       Request portability of your information.

·       Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

Requests may be submitted to Casaas using the contact details provided below.

12. Children's Privacy

Casaas is intended for individuals aged eighteen (18) years and above.

We do not knowingly collect personal information from children without the consent of a parent or legal guardian where required by law.

13. Changes to this Privacy Policy

Casaas may update this Privacy Policy from time to time to reflect changes in law, technology, or business operations.

Where material changes are made, users will be notified through appropriate channels.

Continued use of the Platform following such updates constitutes acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions relating to this Privacy Policy or would like to find out more about exercising your data protection rights, please reach out to our DPO via email support@casaas.io