Privacy notice

1. Who we are

Core is a property operations platform run by Hart Infrastructure Limited, whose registered office is at 1610, Adeola Hopewell Street, Victoria Island, Lagos State ("Hart", "we", "us"). Core helps property owners, developers, their teams, sales agents, buyers, tenants and lenders manage property portfolios in one place. Access is by invitation only.

This notice explains what personal information Core holds, why, who can see it, and what choices you have. It follows the Nigeria Data Protection Act 2023.

2. What we collect

We hold the information needed to run a property portfolio and to let you sign in:

• Account details: your name, email address, role, and the portfolios you have been given access to. If you sign in with Google, we receive your name and email address from Google.
• Property records entered by the team that manages your portfolio: tenant, buyer, plot owner, agent and lender contact details, leases, sale agreements, invoices, payments, work orders, and documents such as agreements and identity documents that the team uploads.
• Records of activity in Core: who changed what and when, sign-in times, and the emails Core sends on your behalf.
• Information you give us directly, for example when you ask for access, report an issue or contact us.

Most records about tenants, buyers and agents are entered by the owner's or developer's team, not by the person the record is about.

3. How we use it

We use personal information to provide Core: to let you sign in and see only what your role allows, to record rent, sales, payments and maintenance, to send notices and reminders that your portfolio's team has set up, to keep a record of changes, to keep the service secure, and to meet our legal duties. We do not sell personal information. We do not use it for advertising.

4. Who sees it and who we share it with

Inside a portfolio, people see only what their role allows. An agent never sees another agent's information. Buyers and tenants see only their own records. Lenders see only the projects they finance.

We use service providers to run Core, such as hosting, database, sign-in and email delivery. They process information on our instructions and under their own security commitments. Some of these providers may process information outside Nigeria; where they do, we use safeguards required by the Nigeria Data Protection Act 2023. We may share information where the law requires it or to protect our rights. We do not share it for any other reason.

We keep information for as long as it is needed to run the portfolio and to meet legal and accounting duties, which is six years, and then delete or anonymise it.

We use only the cookies and similar storage Core needs to keep you signed in, to remember simple choices, and to keep your Ask Core conversations on your own device. We do not use advertising cookies.

5. Your rights and how to contact us

You can ask us whether we hold your personal information and for a copy of it, ask us to correct it, ask us to delete or restrict it where the law allows, object to how we use it, and withdraw consent where we rely on it. Because portfolio records are managed by the owner's or developer's team, we may pass your request to that team.

To use these rights, or to ask any question about this notice, write to privacy@coreapp.ng. If you are not satisfied with our answer, you can complain to the Nigeria Data Protection Commission.

We may update this notice. The date at the top shows the latest version.