Privacy Policy

Duvane is operated by {{LEGAL_ENTITY}} (RC {{RC_NUMBER}}), {{ADDRESS}}. Duvane provides software for managing residential estates and gated communities - visitor gate-passes, dues and billing, resident records, maintenance and security.

For the estate data you put into Duvane, the estate (our customer) is the data controller and Duvane acts as the data processor on its behalf. For this website and our own business contacts, Duvane is the data controller.

Depending on how you use Duvane, we may collect:

• Estate details - estate name, address and contact information.
• Account details - names, email addresses, phone numbers and roles of managers, security staff and residents.
• Resident and unit records - units, occupancy, and dues/billing status.
• Visitor and gate data - visitor names, gate-pass codes, and entry/exit logs.
• Payment data - transaction records and references. Full card numbers are handled by our payment provider and are never stored by Duvane.
• Website and demo enquiries - anything you send us through the "Book a demo" or contact forms.
• Technical data - device, browser and basic usage information needed to run and secure the service.

We use personal information to:

• Provide, operate and secure the Duvane platform for your estate.
• Process dues, generate gate-passes, and keep resident and visitor records.
• Respond to demo requests, support questions and other enquiries.
• Send service-related messages (for example, receipts, gate-pass notifications and security alerts).
• Improve reliability, performance and safety, and meet legal obligations.

We do not sell personal data, and we do not use resident data for advertising.

We rely on one or more of the following bases under the NDPA/GDPR: performance of a contract (running the service for your estate), our legitimate interests (securing and improving the service), consent (where you give it, such as marketing emails), and compliance with a legal obligation.

We share personal data only with providers that help us run Duvane, under contracts that require them to protect it:

• Cloud hosting and infrastructure providers.
• A payment gateway to process dues and subscriptions.
• Email and SMS providers for service and security notifications.

We may also disclose data where required by law or to protect the safety of residents and the public.

We protect data with encryption in transit, access controls, and role-based permissions so people only see what their role allows. No system is perfectly secure, but we work to protect your information and to respond quickly if something goes wrong.

We keep personal data only for as long as needed to provide the service and to meet legal, accounting or security obligations. When an estate leaves Duvane, we delete or return its data in line with our agreement with that estate, subject to any retention the law requires.

Subject to the NDPA and any limits set by your estate (the controller), you may:

• Request access to the personal data we hold about you.
• Ask us to correct data that is wrong or incomplete.
• Ask us to delete your data, where no legal obligation requires us to keep it.
• Object to, or ask us to restrict, certain processing.
• Withdraw consent at any time, where we relied on consent.

If Duvane holds your data on behalf of your estate, we may direct your request to that estate. To exercise any right, contact us at privacy@duvane.app.

Duvane is intended for estate managers, staff and adult residents. We do not knowingly collect data directly from children. Where a resident household includes minors, that information is provided and managed by the estate as controller.

We may update this policy as the service evolves or the law changes. We will post the new version here and update the "Last updated" date above. Significant changes will be communicated to estate administrators.

Questions about this policy or your data can be sent to privacy@duvane.app. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).