NoBroker Nigeria Ltd (“NoBroker”, “we”, “our”) operates nobroker.ng - a verified, zero-commission property marketplace for tenants and owners in Nigeria. This policy explains what personal data we collect, how we use it, who we share it with, and the rights you have over it. It applies to everyone who visits the site, creates an account, lists a property, or contacts an owner through our platform.
1. Information we collect
We collect only what we need to run the service:
- Account information - name, email, phone number, and a password hash when you sign up.
- KYC data - for owners listing a property, we collect BVN and/or NIN to confirm identity. These are never stored in raw form (see Section 5).
- Property listing data - photos, addresses, rent figures, amenities, and title-document metadata that you upload when listing.
- Communication data - messages exchanged between owners and tenants through our masked-number system; call metadata (time, duration) but not call audio.
- Usage analytics - aggregate data on which pages you visit, search filters you apply, and listings you save. We use Plausible for this - see Section 6.
2. How we use your information
We use personal data only to:
- Operate the marketplace - show listings, authenticate logins, deliver notifications.
- Physically verify properties - our inspection team uses listing data to visit the property.
- Connect owners and tenants through masked numbers and WhatsApp.
- Detect and prevent fraud, fake listings, and platform abuse.
- Improve the product - aggregated, non-identifying analytics only.
- Comply with legal obligations in Nigeria.
We do not build advertising profiles. We do not sell your data to any third party, ever.
3. Data sharing
The only time we share your data is when an owner and a tenant connect through the platform. Even then:
- Phone numbers are routed through masked-number middleware - neither party sees the other’s real digits by default.
- Messages stay within our in-app inbox or our WhatsApp integration.
- We disclose data to verification partners (BVN/NIN providers) only for identity confirmation and never for marketing.
- We may disclose data if compelled by a Nigerian court order or to prevent imminent harm. We will notify you where legally permitted.
We never sell personal data. We do not share your information with data brokers, advertisers, or listing aggregators.
4. Data retention
We keep account data for as long as your account is active, and up to 24 months after deletion for fraud-prevention and tax-record purposes. Listing data is kept for up to 36 months after the listing is taken down. Masked-number call metadata is retained for 12 months. You can request earlier deletion at any time under Section 7.
5. BVN and NIN handling
BVN and NIN are legally sensitive identifiers in Nigeria. We treat them accordingly:
- Raw BVN and NIN values are never stored on our servers.
- We hash them using SHA-256 with a server-side pepper before storage, so the stored value cannot be reversed or matched against another platform’s records.
- Verification calls to identity providers are made over TLS, and the raw values exist only in memory during the verification window.
- Access to the verification pipeline is restricted to a small group of engineers, logged, and audited.
6. Cookies and analytics
We use Plausible Analytics - a privacy-focused, cookie-free analytics tool hosted in the EU. We do not use Google Analytics, Facebook Pixel, or any advertising trackers. We set a small number of essential cookies for login sessions and CSRF protection; these are required for the site to work and cannot be disabled.
7. Your rights
Under Nigerian data-protection law (NDPR), you have the right to:
- Access - request a copy of the personal data we hold about you.
- Correction - ask us to fix inaccurate data.
- Deletion - request deletion of your account and associated data.
- Portability - request an export of your data in a common format.
- Objection - opt out of non-essential processing.
To exercise any of these rights, email privacy@nobroker.ng. We respond within 30 days.
8. Children
NoBroker is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it.
9. Changes to this policy
We may update this policy to reflect changes in the service or in law. Material changes will be emailed to registered users and posted at the top of this page at least 14 days before they take effect. Continued use of the service after changes take effect constitutes acceptance.
10. Contact
Questions, concerns, or data-rights requests go to privacy@nobroker.ng. For legal notices, write to NoBroker Nigeria Ltd, Lagos, Nigeria.