1. Who we are
Own2gether (“Own2gether”, “we”, “us”, or “our”) is a property co-ownership platform operating in Nigeria. We are the data controller responsible for the personal data you provide when you use our website at www.own2gether.com.
To contact our data team, write to: privacy@own2gether.com
2. Data we collect
We collect the following categories of personal data:
Account information
- ·Full name
- ·Email address
- ·Phone number
- ·Password (stored as a secure bcrypt hash — we never store your plain password)
Identity and KYC information
- ·Date of birth
- ·Nationality
- ·Occupation
- ·Residential address
- ·Government-issued identity document (type, number, expiry date, and scan)
- ·Proof of address document
Financial and transaction information
- ·Commitment amounts on specific properties
- ·Payment receipt documents (uploaded by you)
- ·Property stake percentages after allocation
Communication data
- ·Messages posted to co-owner message boards
- ·Any correspondence you send to us by email
Technical and usage data
- ·Session tokens stored in secure HTTP-only cookies
- ·IP address and browser information (collected by our infrastructure provider)
- ·Pages visited and platform features used
3. How we use your data
Account creation and authentication
We use your name, email, and password hash to create and secure your account.
Identity verification (KYC)
We review your identity documents and address proof to verify your identity before confirming any property allocation. This supports our internal compliance policy and the CAC registration of each property SPV.
Property co-ownership administration
We use your commitment data, stake percentages, and payment receipts to manage the co-ownership process and maintain accurate ownership records.
SPV company registration
Where a raise completes, we may share your verified identity information with the Corporate Affairs Commission (CAC) and our registered legal agents solely for the purpose of registering the property company in which you hold shares.
Notifications and updates
We send in-platform notifications about your commitments, KYC status, messages from co-owners, and platform updates.
Co-owner communications
Messages you post on a property message board are visible to all current co-owners of that property and to Own2gether staff.
Security and fraud prevention
We analyse usage patterns to detect and prevent fraudulent activity and protect the security of our platform.
Legal and regulatory compliance
We may process and retain data as required to comply with Nigerian law, including anti-money laundering (AML) and Know Your Customer (KYC) obligations.
4. Legal basis for processing
| Processing activity | Legal basis |
|---|---|
| Account registration and login | Contract performance |
| Processing commitments and allocations | Contract performance |
| Identity verification (KYC) | Legal obligation; contract performance |
| SPV registration with CAC | Legal obligation; contract performance |
| In-platform notifications | Legitimate interests |
| Fraud detection and security | Legitimate interests |
| Regulatory record-keeping | Legal obligation |
| Platform improvement and analytics | Legitimate interests |
5. Who we share your data with
We do not sell your personal data. We share it only where necessary and with the following parties:
Supabase Inc.
Database and infrastructure hosting. Your data is stored on Supabase-managed PostgreSQL servers.
Vercel Inc.
Web hosting and file storage. Uploaded documents (ID scans, payment receipts) are stored on Vercel Blob in access-controlled private storage.
Corporate Affairs Commission (CAC)
Upon successful completion of a property raise, verified shareholder identity information is submitted for SPV company registration as required by CAMA 2020.
Legal and professional advisers
We may share information with legal counsel, auditors, or regulatory bodies where required by law, regulatory order, or court order.
Other co-owners (limited)
Your name is visible to co-owners of the same property on the co-owner hub. Your email address and identity documents are never shared with other users.
6. How long we keep your data
Account data
For the duration of your account, and for 7 years after account closure.
KYC and identity documents
For the duration of your account, and for at least 5 years after your last transaction, as required for AML compliance.
Payment receipts and commitment records
For 7 years from the date of each transaction, in line with Nigerian financial record-keeping requirements.
Session tokens
Expire after 30 days of inactivity, or immediately on sign-out.
Co-owner messages
Retained for the lifetime of the associated property record on the platform.
7. Your rights
Under the Nigeria Data Protection Act 2023, you have the following rights:
Right of access
Request a copy of all personal data we hold about you.
Right to rectification
Ask us to correct inaccurate or incomplete data.
Right to erasure
Request deletion of your data, subject to legal retention obligations.
Right to restriction
Ask us to pause how we process your data in certain circumstances.
Right to data portability
Receive a copy of your data in a structured, machine-readable format.
Right to object
Object to processing based on our legitimate interests.
To exercise any of these rights, contact us at privacy@own2gether.com. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).
8. Security
We implement the following technical and organisational measures to protect your data:
- ·All data transmitted via HTTPS (TLS encryption in transit)
- ·Passwords stored as bcrypt hashes — we cannot read or recover your password
- ·Session tokens stored in HTTP-only, Secure, SameSite cookies — not accessible to JavaScript
- ·Database access restricted to server-side code only — no direct client access
- ·Uploaded documents stored in access-controlled private blob storage
- ·Admin access protected by a separate, independently authenticated session
No system is entirely immune to risk. If you believe your account has been compromised, please contact us immediately at privacy@own2gether.com.
9. Cookies
We use strictly necessary session cookies only — no advertising or tracking cookies. For full details, see our Cookie Policy.
10. Changes to this policy
We may update this Privacy Policy periodically. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email. Continued use of the platform after the updated effective date constitutes acceptance of the revised policy.
11. Contact
For any privacy-related questions, requests, or to exercise your rights:
privacy@own2gether.comYou may also write to us using the contact details on our About page.