Privacy policy

Last updated 19 October 2026

Hostvale helps shortlet hosts in Nigeria manage bookings, payments and guests. This policy explains what we collect, why, and the choices you have. It is written to follow the Nigeria Data Protection Act 2023.

Who is responsible for what

Hosts who use Hostvale decide what guest information to collect and why. For guest data, the host is the data controller and Hostvale processes it on the host's behalf. For a host's own account details, Hostvale is the data controller.

What we collect

  • Host accounts: email, business name, phone number, bank details you choose to add, logo, and the apartments, bookings, payments, expenses and staff you record.
  • Guests (through a host's check-in or booking page): name, phone, email if given, number of guests, arrival time, ID type and number if given, a photo of the ID, a signature, car plate and emergency contact if given, and booking requests and reviews.
  • Technical: basic sign-in records kept by our database provider.

Why we use it

  • To run the service: show calendars, record payments, send the messages you choose to send, and let guests check in online.
  • To keep stays safe: hosts use ID photos to confirm who is staying.
  • To support you and keep the service secure.

We do not sell personal data. We do not use guest data for advertising.

Guest ID photos

ID photos are stored in a private store that only the host and the host's managers can open, through links that expire after 10 minutes. ID photos and ID numbers are deleted automatically 30 days after check-out.

Where data is stored

Data is stored with Supabase, our database and storage provider, which may keep it on servers outside Nigeria. Data is encrypted in transit. Every host's data is separated at database level so no host can see another host's data.

How long we keep it

Host account data is kept while the account is active. Hosts can delete apartments, bookings, guests and payments at any time. When a host closes their account, we delete their data within 30 days, unless the law requires us to keep it longer.

Your rights

You can ask to see, correct, export or delete your personal data, or object to how it is used. Guests should first contact the host they stayed with; you can also contact us and we will help. You may complain to the Nigeria Data Protection Commission.

Children

Hostvale is for adults running a business. We do not knowingly collect data from children, except where a host records a minor travelling with an adult guest.

Changes

We will update this page when our practices change and show the new date at the top.

Questions? Message Hostvale on WhatsApp: 0906 532 3916