Introduction

Welcome to Upperoom Listings. Your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal information in line with the Nigeria Data Protection Regulation (NDPR) and other applicable data protection laws.

By using our platform, you agree to the collection and use of your data as described in this policy. For any questions or data requests, please contact us at privacy@upperoom.ng.

Information We Collect

1. Information You Provide or Authorize

When you create an account or complete identity verification (KYC) on Upperoom through our partner, Dojah, we collect and process the following information:

  • Full Name: Your first name, last name, and middle name as provided in your official records.
  • Email Address: Used to identify your account and communicate important updates.
  • Phone Number: Used for account verification, contact purposes, and two-factor authentication.
  • Gender: Collected for verification consistency and identity confirmation.
  • Date of Birth: Used to confirm your age and match your official record during verification.
  • State of Origin: Retrieved for demographic and verification purposes.
  • Selfie Photo: Captured during the Dojah liveness check to confirm that you are the real person performing the verification. This photo becomes your Upperoom profile image.
  • Verification Status: Indicates whether your KYC verification was successful or requires review.
  • ID Type: Specifies the document type used for verification (e.g., NIN, voter’s card, driver’s license). We do not store the ID number or the official government photo.
  • IP Address: Captured during verification to help detect and prevent fraudulent activity.

We use your National Identification Number (NIN) only for verification through authorized partners. Your NIN and the official government photo retrieved during that process are not stored on our servers. Only the verified information needed for your account and compliance is securely kept.

2. Automatically Collected Information

  • Device information, browser type, and operating system.
  • IP address and approximate geographic location.
  • Cookies and log data used to enhance security and user experience.

3. Information from Third Parties

  • Dojah: Our NDPR-compliant identity verification partner, used to perform liveness checks and confirm user identities.
  • Payment Providers (Paystack): Used to process transactions securely and prevent fraud.
  • Authentication Services: Such as Google, if you choose to sign up using social login.

How We Use Your Information

  • To verify your identity and ensure the authenticity of users on the platform.
  • To prevent fraud, impersonation, and other malicious activities.
  • To create and maintain your user profile, including your verified selfie image.
  • To provide, personalize, and improve our services.
  • To process secure payments and manage bookings.
  • To communicate important updates, verification results, and support responses.
  • To comply with legal and regulatory requirements.

Data Security and Retention

We apply strict technical and organizational measures to protect your information from unauthorized access, loss, or misuse. Sensitive data is handled as follows:

  • Encryption: All personal and verification data are encrypted both in transit and at rest.
  • Masking: Any sensitive identifiers may be stored only in partially masked form for internal tracking. Full NINs and official ID photos are never retained.
  • Access Control: Only authorized staff and systems can access personal data, under strict confidentiality obligations.

Your data is kept only for as long as necessary to maintain your account or to meet compliance, legal, or fraud-prevention obligations. Once your account is deleted, all personal and financial data are permanently removed from our systems.

Cookies Policy

We use cookies to improve platform performance and personalize your experience. You can manage or disable cookies in your browser settings:

Information Sharing

We do not sell or rent your personal information. Data may be shared only in the following situations:

  • With trusted third parties such as Dojah for identity verification.
  • With payment processors for secure financial transactions.
  • With law enforcement or regulators where legally required.
  • With your explicit consent when needed for additional services.

Changes to This Policy

We may update this Privacy Policy to reflect new practices or legal requirements. Updated versions will be posted on this page with the new effective date. Continued use of the platform after an update means you accept the revised terms.