Domorang Privacy Policy

This policy applies to anyone who uses Domorang, including:

• Property seekers browsing or searching listings
• Property owners/landlords posting listings
• Agents creating profiles and managing listings
• Anyone who saves listings, leaves reviews, or submits reports

Account & profile data

• Name, email address, phone number
• Password (stored securely, never in plain text)
• Profile bio and role (seeker, agent, landlord)

Agent-specific data

• Business/agent bio
• Social media and website links (e.g. Instagram)
• Verification status (currently based on profile completeness and platform review — we do not yet collect government ID documents; this may change as our verification process develops, and this policy will be updated if so)

Listing data

• Property details, description, price, and category
• Property location, including map coordinates (latitude/longitude)
• Photos and video links submitted for listings

Usage & interaction data

• Saved listings
• Reviews and ratings submitted
• Reports filed against listings or agents (including the content of the report, to allow us to investigate)

Technical data

• IP address, browser type, device information, and basic analytics collected automatically when you use the site

We do not currently collect payment information. If Domorang introduces paid features, fees, or in-platform payments in the future, this policy will be updated before that data collection begins, and you will be notified.

We process personal data on the following grounds under the NDPA:

• Consent — for account creation, marketing communications, and optional profile information
• Contract/legitimate interest — to provide the core service: matching seekers with listings, enabling agents to manage listings, facilitating reviews and reports
• Legal obligation — where required to respond to lawful requests from regulators or authorities

Specifically, we use your data to:

• Create and manage your account
• Display listings and agent profiles to other users
• Power search, map, and filtering features
• Investigate reports and moderate content to maintain listing/agent trust
• Communicate with you about your account or activity
• Improve the platform based on usage patterns

We do not sell your personal data. We share data only with:

• Service providers who help us run Domorang, under their own security and confidentiality obligations:
  • Supabase (database hosting and authentication)
  • Vercel (application hosting/deployment)
  • Zoho Mail (email communication)
  • Cloudflare (DNS and security)
• Other users, where the platform is designed to show it — e.g. your listing details and agent profile are visible to seekers by design; reviews you post are visible publicly
• Regulators or law enforcement, only where legally required

Your data is stored in Supabase, with row-level security (RLS) policies restricting access based on account role and ownership. We take reasonable technical and organizational measures to protect your data against loss, misuse, and unauthorized access, proportionate to our current size and the sensitivity of the data involved.

We retain your data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we're required to retain it (e.g. to resolve an open report or dispute, or to meet a legal obligation).

Under the NDPA, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your data, subject to legal or legitimate retention needs
• Object to or restrict certain processing
• Withdraw consent at any time, where processing is based on consent
• Request a copy of your data in a portable format

To exercise any of these rights, email hello@domorang.com. We will respond within a reasonable timeframe.

Domorang may use cookies or similar technologies for basic site functionality and analytics.

Domorang is not directed at children, and we do not knowingly collect data from anyone under 18. If we learn we've collected data from a minor without appropriate consent, we will delete it.

In the event of a data breach that poses a risk to your rights, we will notify affected users and, where required, the Nigeria Data Protection Commission (NDPC), in line with NDPA requirements.

We may update this policy as Domorang grows and our data practices evolve (for example, if we introduce ID verification or payments). We'll update the "Last updated" date above and, for material changes, notify users directly.

Questions, requests, or concerns about your data: hello@domorang.com