DRAFT. Fill in the [brackets] and have a Nigerian lawyer review this before launch. It is a starting template, not legal advice.
Mainta is operated by Mainta Vortex Systems Limited, [registered address], Nigeria ("we", "us"). Contact: [privacy email]. Last updated: [date].
For account and billing information of estate managers and businesses, we are the data controller. For resident, tenant and vendor records that an estate, landlord or business enters or collects through Mainta, that organisation is the controller and we process the data on its behalf and on its instructions.
Name, email, phone number and password (stored hashed); property, unit and tenancy details; maintenance reports, photos and costs; levy and payment records and payment references; WhatsApp messages sent to the estate's Mainta number; and basic usage and device logs. We do not store card numbers. Card and bank payments are handled by Paystack.
To run the service (tickets, vendor dispatch, levy tracking, scheduled maintenance, notifications), to process payments, to keep the service secure, to provide support, and to meet legal obligations. Our legal bases under the Nigeria Data Protection Act 2023 are contract, consent where required, legitimate interests and legal obligation.
Within the same estate or organisation according to role (managers, residents, vendors); service providers such as hosting, Paystack, Meta (WhatsApp) and email delivery; and authorities where the law requires. We do not sell personal data.
Data may be stored on servers outside Nigeria, with appropriate safeguards. We keep data while an account is active and for [period] afterwards unless the law requires longer. Managers can request deletion of their estate's data.
You may ask to access, correct, delete, restrict or move your data, object to processing, and withdraw consent. For resident data, contact your estate manager first, or us at [privacy email]. You may complain to the Nigeria Data Protection Commission.
Passwords are hashed, access is role-based, and traffic is encrypted over HTTPS. No system is perfectly secure; we will notify affected parties and the regulator of breaches as the law requires.
Mainta is not intended for children under 18.
We will post updates here and notify account holders of material changes.