1. Introduction
Estaton ("we," "our," or "us") operates the Estaton mobile application (the "App"), available on iOS and Android platforms. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.
By downloading, installing, or using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: Name, email address, phone number, and password when you create an account.
- Profile Information: Profile photograph, unit/house number, and estate membership details.
- Visitor Information: Names, phone numbers, email addresses, vehicle plate numbers, and identification details of visitors you invite through the App.
- Vehicle Information: Vehicle make, model, color, year, and registration plate number.
- Marketplace Content: Listing titles, descriptions, images, and pricing for items or services you post.
- Messages: Content of messages you send and receive through the in-app messaging system.
- Service Requests: Descriptions, images, and details of maintenance or service requests you submit.
- Payment Information: When you initiate a payment through the App, your payment details are collected and processed directly by our payment processor (Paystack). We do not store your full card number, CVV, or bank account credentials on our servers.
2.2 Information Collected Automatically
- Device Information: Device type, operating system version, unique device identifiers, and push notification tokens.
- Usage Data: Pages viewed, features used, actions taken within the App, timestamps, and session duration.
- Log Data: IP address, browser type, referring/exit pages, and crash reports.
2.3 Information Collected with Your Permission
- Location Data: Precise GPS location, collected only when you trigger the Emergency Alarm feature or use location-dependent features. Location access is requested at the time of use and is not tracked in the background.
- Biometric Data: Face ID or fingerprint authentication data is processed locally on your device by the operating system. We do not transmit or store biometric data on our servers. We only store a boolean preference indicating whether biometric login is enabled.
- Camera & Photo Library: Images you choose to upload for profile photos, marketplace listings, service requests, or avatar pictures.
- Push Notifications: Device push tokens for sending notifications about visitor arrivals, messages, announcements, and security alerts.
2.4 Information from Third Parties
Your estate administrator may provide us with your name, email, phone number, and unit assignment when registering you as a resident within the platform.
3. How We Use Your Information
We use the collected information for the following purposes:
| Purpose | Data Used |
|---|
| Account creation and authentication | Name, email, phone, password, biometric preference |
| Visitor access management (QR codes, check-in/out) | Visitor name, phone, email, vehicle plate, QR tokens |
| Estate gate access and digital ID | Resident profile, QR code, estate membership |
| In-app marketplace operation | Listing content, images, pricing, seller/buyer details |
| Payment processing | Transaction amounts, payment reference (via Paystack) |
| Emergency alerts to estate security | GPS location, resident identity, timestamp |
| Push notifications | Device tokens, notification preferences |
| In-app messaging | Message content, sender/recipient identity |
| Service request tracking | Request details, images, status updates |
| App improvement and analytics | Usage data, device info, crash reports |
4. How We Share Your Information
We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:
- Estate Administration: Your profile, visitor records, gate access logs, and service requests are visible to the administrators of your estate or residential community.
- Other Residents: Your name and basic profile may be visible to other verified residents within the same estate when using the marketplace, community announcements, or messaging features.
- Payment Processors: Payment details are shared with Paystack, our payment processor, to complete transactions. Paystack's privacy policy governs their use of your data.
- Visitors: When you share a visitor access pass (via WhatsApp, Email, or download), the visitor receives the estate name, QR code, and access code you chose to share.
- Service Providers: We may use cloud hosting, analytics, and notification delivery services that process data on our behalf under strict data protection agreements.
- Legal Requirements: We may disclose information if required by law, legal process, or governmental request, or to protect the rights, property, or safety of Estaton, our users, or others.
5. Data Storage & Security
We implement industry-standard security measures to protect your information:
- All data transmitted between the App and our servers is encrypted using HTTPS/TLS.
- Passwords are hashed and never stored in plain text.
- Biometric authentication data remains on your device and is never transmitted to our servers.
- Payment card data is processed by PCI DSS-compliant payment processors and is not stored on our servers.
- Access to personal data is restricted to authorized personnel on a need-to-know basis.
- Sensitive credentials (authentication tokens) are stored in the device's secure enclave using Expo SecureStore.
While we strive to use commercially acceptable means of protecting your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
- Account Data: Retained for as long as your account is active. Upon account deletion, your personal data is deleted or anonymized within 30 days, except where retention is required by law.
- Visitor Records: Retained for a period determined by your estate administration, typically up to 12 months, for security audit purposes.
- Gate Access Logs: Retained for up to 24 months for estate security records.
- Transaction Records: Retained for up to 7 years as required by applicable financial regulations.
- Messages: Retained for the duration of your account. Deleted messages may persist in backups for up to 90 days.
- Emergency Alarm Data: Location data from emergency alerts is retained for up to 12 months.
7. Your Rights & Choices
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete personal data.
- Deletion: Request deletion of your account and personal data. You can initiate this from Settings → Data & Privacy within the App.
- Portability: Request your data in a structured, machine-readable format.
- Withdraw Consent: Withdraw consent for location access, push notifications, or biometric authentication at any time through your device settings.
- Opt Out of Communications: Manage your notification preferences within the App's Settings.
To exercise these rights, contact us at support@estatonapp.com or use the in-app data management tools. We will respond to requests within 30 days.
8. Children's Privacy
The App is not directed at children under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@estatonapp.com and we will delete such information promptly.
9. Third-Party Services
The App integrates with the following third-party services, each governed by their own privacy policies:
We encourage you to review the privacy policies of these third-party services.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction. When we transfer data internationally, we implement appropriate safeguards in compliance with applicable data protection laws.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the App and updating the "Last Updated" date. Your continued use of the App after changes constitutes acceptance of the revised policy. We encourage you to review this policy periodically.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
View Terms & Conditions →
