Privacy Policy

Launch draft: a Nigerian privacy professional should confirm the operator identity, retention periods, international-transfer notices and required registrations before public release.

Stay Lagos uses personal information to authenticate accounts, verify Hosts, operate apartment discovery and booking services, protect users, provide support and meet legal obligations.

Information we collect

Depending on how you use Stay Lagos, this may include your name, email, phone number, authentication provider, saved apartments, booking details, support messages, account activity and device or security information.

Host verification

Host applicants may submit government identification and evidence of ownership or management authority. These files are kept in private storage and are available only to the applicant and authorised Stay Lagos administrators for verification, safety, fraud prevention and legal compliance.

Payments

Real payments are disabled until an approved provider is connected. When payments launch, card or bank credentials should be entered directly into the provider’s secure flow. Stay Lagos stores transaction references, amounts, status events, masked payout details, refund information and dispute records, but the v6.6 browser app is not designed to store full card numbers, CVVs or complete bank-account numbers.

How we use information

We use data to create and secure accounts, publish verified inventory, check availability, process booking requests, operate protected-payment and dispute workflows, communicate with users, prevent abuse, keep audit records and improve reliability.

Sharing and service providers

Information may be shared only as needed with infrastructure, authentication, email, storage, analytics, fraud-prevention, payment and professional-service providers, or with authorities where required by law. Hosts receive only the information reasonably necessary to fulfil an approved booking.

Retention and security

Records are kept only for operational, safety, accounting, dispute and legal purposes. Access controls, row-level database policies, signed private-document links and administrator audit records are used to reduce unauthorised access. No service can guarantee absolute security.

Your choices and deletion

You may request correction, access or deletion by contacting Stay Lagos. Signed-in non-administrator users can also start account deletion from Profile and cancel before secure processing begins. The account remains available during review so active stays can be managed. Once approved, Supabase login credentials are disabled and eligible profile information, verification documents and property media are deleted or anonymised. Transaction, safety, fraud, dispute and accounting records may be restricted and retained where required.

Contact

Privacy requests may be sent to staylagos.team@gmail.com.