Privacy

Flisters.com is owned and operated by Inventivelabs LTD (RC 9758742), a registered Data Controller/Processor of Major Importance under the Nigeria Data Protection Commission (NDPC). INVENTIVELABS LTD — NDPC registration ID: NDPC/DCP/14152. In this policy, “Flisters”, “we”, “us”, and “our” mean that company. This policy covers the Flisters website, property-management portals, and related support and communications.

Flisters belongs to the Inventivelabs family of brands, alongside NaijaProperty and NaijaPlace. Each brand has its own services and privacy information. Using Flisters does not, by itself, authorize sharing your tenancy records with those brands or subscribing you to their marketing.

We explain our processing under the Nigeria Data Protection Act 2023 and applicable data-protection requirements. This notice provides information; reading it or using the service is not blanket consent to every use of personal data.

We act as a data controller when we decide why and how to use information for Flisters accounts, our subscriptions, service security, enquiries, and our own communications.

A property manager or landlord generally determines the purposes of processing tenancy records they enter or manage. For those activities, they act as a controller and we provide the platform as their data processor, under the Data Processing Agreement. Their own privacy notice and lawful obligations also apply.

If your question concerns rent, lease terms, an emergency contact, or information entered by a manager, contact that manager as well. You can still contact us about your Flisters account or our processing. We will help direct a request to the responsible party where appropriate.

• Account details: name, email, phone number, profile image, role, preferences, and authentication records. Password accounts use password hashes. If you choose Google sign-in, we receive the account information provided for that sign-in, such as your name, email, and profile image.
• Property and tenancy records: property addresses, units, landlord and tenant contacts, invitations, emergency contacts, rent amounts, occupancy, lease dates, agreements, uploaded documents, and signing records.
• Financial records: invoices, balances, payment status and references, receipts, proof-of-payment uploads, refunds, subscription details, and bank or recipient details supplied for payment instructions. Details entered into a provider-hosted payment interface are handled by that provider. Our Stripe and OPay integrations do not store full card numbers or card security codes.
• Communications: messages, reminders, maintenance requests and attachments, support enquiries, newsletter subscriptions, and related delivery records.
• Technical information: authentication activity, IP addresses and user-agent information in relevant security or audit records, requests and errors, and the cookies and preferences described in our Cookie Policy.

Information may come from you, your property manager or landlord, authorized users, and connected service providers. A manager may invite you or enter tenancy details before you register. Please provide only relevant information and ensure you have a lawful basis to supply someone else’s details. Avoid unnecessary identity documents, medical information, or other sensitive information in free-text fields and uploads.

• Providing the service: creating accounts, enabling authorized portals, managing our subscriptions, and responding to service requests where necessary to perform a contract with you or take steps you request before one.
• Customer-directed property management: hosting tenancy records, invoices, payments, maintenance, documents, and communications on the relevant controller’s instructions. That controller must establish its own lawful basis; a contract with a manager is not automatically a contract with every tenant.
• Security and operation: preventing misuse, investigating errors, administering the service, and handling disputes, where necessary for legitimate interests and balanced against your rights.
• Legal obligations: retaining required records, responding to lawful requests, and meeting applicable regulatory duties.
• Choices requiring consent: optional newsletter marketing and any processing for which applicable law requires consent. You may withdraw consent without affecting processing lawfully carried out before withdrawal.

We do not treat an account or a tenant invitation as consent to unrelated advertising. Essential account, invoice, security, and tenancy messages are separate from optional marketing. You can unsubscribe from newsletters using the email’s unsubscribe link.

When AI assistance is requested, or a property manager enables AI-generated reminders, the relevant information is sent to the configured AI provider. Flisters integrates Google Gemini, with OpenAI as a fallback. Depending on the feature, prompts can contain tenant names, property or unit details, rent balances and due dates, maintenance descriptions, or report information.

Managers must ensure this use is appropriate and lawful for the information involved, limit unnecessary personal data, and review generated content. Provider processing may occur outside Nigeria. Do not submit confidential information that is unnecessary for the requested task. AI-generated messages, analysis, and suggestions may be inaccurate; they should not be treated as a legal determination, an eviction decision, or a definitive assessment of a person.

• Authorized participants: property managers, landlords, tenants, and administrators receive information relevant to their permissions and workflows. Sending a message, sharing a document, or generating a report can make its contents available to the intended recipient.
• Service providers: hosting and database providers support the platform; AWS S3 supports file storage; Resend handles email delivery; Stripe handles supported payments and subscription billing; OPay supports online invoice payments where a manager connects it; Google supports optional sign-in; Google Gemini and OpenAI support enabled AI features. The providers involved depend on the feature and deployment configuration.
• Professional and lawful recipients: advisers, authorities, or other recipients where necessary for legal duties, protecting rights, investigating abuse, or a properly safeguarded business reorganization.
• Company support: authorized Inventivelabs personnel may access information to operate and support Flisters. Common ownership is not permission for unrestricted access by other brands.

Payment providers receive the information needed for a checkout and its verification, which can include your name, email, account identifier, invoice description, amount, currency, and transaction reference. The available provider depends on the payment option selected and the manager’s configuration.

We do not sell your personal information or provide tenancy records to advertising networks. Providers receive information relevant to their role. Some, such as payment or sign-in providers, also have independent responsibilities described in their own privacy notices.

Our providers may store or process information in other countries. We do not promise that all Flisters data remains in Nigeria. Where a transfer is subject to Nigerian data-protection law, we must establish an applicable lawful transfer basis and appropriate safeguards, such as recognized protection or suitable contractual protections, before making the transfer.

You may contact us for information about safeguards relevant to your data. A provider’s availability in another country does not remove our obligations under applicable law.

Retention depends on the type of record, the service being provided, the controller’s instructions, and legal or dispute-resolution needs. Account records support the account relationship; tenancy and financial records support lease administration, reconciliation, and applicable recordkeeping; support and security records support resolution and investigation.

Ending a tenancy, removing access, or cancelling a subscription does not automatically erase historical invoices, payments, agreements, or audit records. Where deletion is appropriate, we delete or anonymize the information, subject to required retention and controlled backup lifecycles. A request may therefore result in some records being deleted and others retained for a stated lawful purpose.

Ask us about a specific record or deletion request. We will explain the relevant retention criteria and any applicable requirement.

We use safeguards appropriate to the service, including password hashing, authenticated access, and role and ownership checks. Security also depends on deployment configuration, our providers, and how authorized users handle information. No system or transmission can be guaranteed completely secure.

Use a strong, unique password, protect your email account, sign out on shared devices, and report suspected unauthorized access promptly. Where a personal-data breach occurs, we assess it and provide notifications and assistance required by applicable law.

Subject to the conditions and exceptions in applicable law, you may request information about processing, access and a copy of your data, correction, erasure, restriction, portability, or object to processing. You can withdraw consent where we rely on it and raise concerns about decisions based solely on automated processing that significantly affect you.

Send a request to privacy@flisters.com. You do not need to delete an account to raise a concern. Some account details can also be updated in your portal. Deleting an account does not necessarily require a landlord to erase records they are legally entitled or required to retain.

You may complain to the Nigeria Data Protection Commission or another competent regulator. Contacting us first can help resolve the issue, but is not a condition of your right to complain.

Flisters accounts are intended for adults aged 18 or older. Managers should not upload children’s personal information unless necessary, lawful, and appropriately safeguarded. Tell us if information about a child has been submitted improperly.

We update this policy when the service or our processing changes. The date above identifies this version. We will bring material changes to your attention through an appropriate service notice or email and obtain fresh consent where required.

Contact Inventivelabs LTD (RC 9758742) at privacy@flisters.com for personal-data requests or legal@flisters.com for legal matters. You can also use our contact form. Identify Flisters and the issue or right you want to raise. For privacy requests, include the email address associated with your account or tenancy so we can locate the relevant records. Do not include passwords or full payment-card details.

We may request proportionate information to verify your identity or authority before disclosing or changing personal data. We respond within the period required by applicable law and explain any lawful refusal, extension, or information we must retain.