Privacy policy

Your estate decides what information it collects about its residents and why. For that information, your estate is the data controller and AccessPadi is the data processor — we hold and process it on their instructions.

For the account your estate holds with us, and for the running of the platform itself, we are the controller.

If you are a resident and want your information changed or removed, start with your estate administrator. They control the record.

When you are added to an estate

• Your name, email address and phone number
• Your house or flat number and address within the estate
• Any extra fields your estate chooses to record against your account, such as a car registration

When you use the app

• Visitor codes you create, including the visitor name and any note you add
• A record of each entry: which code was used, when, and which member of gate staff checked it
• Complaints you raise and any replies from the estate office
• Estate levies charged to you and payments you make against them

Technical information

• Your IP address and browser or device type, recorded with security-relevant actions
• A push notification subscription, only if you turn notifications on
• A sign-in token stored in your browser so you stay signed in

We do not collect location data, we do not track you across other websites, and we do not use advertising cookies.

Card payments are handled by Paystack. Your card number is entered on Paystack's own page and is never sent to or stored by AccessPadi. We keep only the amount, the date, what it paid for and a reference so the payment can be matched to your account.

• To let your gate confirm that a visitor is expected, which is the purpose of the product
• To let your estate keep an accurate record of who lives there
• To process levy payments and produce receipts
• To send you notices from your estate, and notifications you have asked for
• To keep the service secure, and to investigate misuse when it is reported
• To bill estates for their subscription

We do not sell your information. We share it only with:

• Your own estate — its administrators and gate staff see what they need to do their jobs
• Paystack, to process payments
• Our email and hosting providers, to deliver the service
• Anyone we are legally required to disclose it to, such as a lawful request from a court

One estate can never see another estate's residents, codes, complaints or payments. That separation is enforced by the software on every request.

Your estate holds your record for as long as you are a resident. Access records and payment history are kept while the estate needs them for its own accounting.

If an estate stops paying for AccessPadi, its data is not deleted — the estate simply loses the ability to add anything new until it subscribes again. If an estate closes its account and asks us to delete its data, we will do so within 30 days, except where we are required to keep records for legal or accounting reasons.

• Traffic between your device and our servers is encrypted in transit
• Passwords are stored hashed and are never readable by us or by your estate
• Payment credentials belonging to estates are encrypted at rest
• Invitation links are single-use, expire, and are stored only as a hash
• Administrative actions on the platform are recorded in an audit log

No system is perfectly secure. If we become aware of a breach affecting your information, we will notify the affected estates and, where required, the Nigeria Data Protection Commission.

Under the Nigeria Data Protection Act, you may ask to see the information held about you, have it corrected, have it deleted, or object to how it is used.

For anything held by your estate, ask your estate administrator first — they control that record and can act on it immediately. For anything else, or if your estate does not respond, write to privacy@accesspadi.com. We aim to respond within 30 days.

AccessPadi accounts are for adults. We do not knowingly create accounts for anyone under 18. If you believe a child has an account, tell us and we will remove it.

If we change how we handle information, we will update this page and change the date at the top. Significant changes will be notified to estate administrators by email.

Questions about this policy, or about information we hold: privacy@accesspadi.com

Before publishing: add your registered company name, registered address and, if you have appointed one, your data protection officer. This page describes what the software does accurately, but it has not been reviewed by a lawyer.