Last updated: 25 September 2026
This Privacy Policy explains what personal data THINPLEX LIMITED (“Thinplex”, “we”, “us”) collects when you use the Thinplex app and website (thinplex.com), why we collect it, who we share it with, how long we keep it, and the rights you have under the Nigeria Data Protection Act 2023 (NDPA). Thinplex is the data controller for that data. If anything here is unclear, contact us at privacy@thinplex.com.
Thinplex is a property and services marketplace operated by THINPLEX LIMITED, a company registered in Nigeria and based in Anambra, Nigeria. It connects tenants and guests with landlords, agencies and maintenance artisans, and provides the tools to run long-term tenancies, shortlet stays and repair jobs. We are the controller of the personal data described here. Our data-protection contact is privacy@thinplex.com.
Account and profile: your name, email address (this is your sign-in), phone number, the role(s) you use (tenant, guest, landlord, agency or artisan) and your profile photo. Identity and verification (KYC/KYB): identifiers you submit to verify yourself or your business — such as your National Identification Number (NIN), a bank account name, or a company’s CAC registration number — and, where a verification flow requires it, a live selfie or photo of an ID document, checked through our licensed verification provider. Payment and payout: to collect payments and send payouts we and our licensed payment processor handle transaction records and payout bank-account details (bank, account number and account name); card payments are entered on the processor’s own checkout and Thinplex stores only limited card details (card brand, last four digits, expiry and a re-use token), never your full card number or CVV. Listings and location: property addresses and the precise map location (latitude and longitude) owners set for a property, and access details for a confirmed booking (such as a door code or Wi-Fi name). Applications and screening (long-term rentals): the information a tenant chooses to provide to apply — employment status, occupation, monthly income, current address, reason for moving, number of occupants, a guarantor’s contact details, and any documents you upload such as a payslip or bank statement — together with your consent to screening. Tenancy, bookings and jobs: tenancy and lease records (including e-signature data), booking records and checkout photos, maintenance requests and photos, reviews and ratings. Messages: the content of messages you send other users and our support team through Thinplex. Device and usage: push-notification tokens, the app version and device type, support-session details, and basic logs used to run and secure the service.
We use your data to provide the service you ask for — creating and running tenancies, bookings and jobs, collecting and recording payments and payouts, sharing the details a counterparty needs, powering messaging and sending service notifications (legal basis: performance of our contract with you). We use identity and screening information you submit to verify you and, where you have given it, to run screening (legal basis: your consent, which you may withdraw). We use data to keep the marketplace trustworthy — verification, fraud and scam prevention, moderation and audit trails — and to fix, secure and improve Thinplex (legal basis: our legitimate interests, balanced against your rights). We use data to meet legal and regulatory obligations such as financial record-keeping, tax and responding to lawful requests (legal basis: legal obligation). We do not sell your personal data, and we do not use it for third-party advertising.
Some Thinplex features use artificial intelligence (currently Google’s Gemini models) to make the product more useful. These include: reviewing a new listing for quality and policy issues, helping write a listing description, turning a natural-language search into filters, triaging a maintenance request, reading an application document you upload to summarise it for the owner, flagging possible scam messages, answering questions in the support assistant, and grounding rent-price questions with public market data. AI helps our team and yours decide; it does not, by itself, make a decision that produces a legal or similarly significant effect on you without a person able to review it. You can ask for human review of, or object to, any automated processing that affects you by contacting privacy@thinplex.com. We do not use your personal data to train third-party AI models beyond what is needed to provide these features, and we minimise what is sent — for example, identity numbers and bank details are withheld from listing-review AI.
Other users, as the relationship requires: a landlord or agency sees their tenant’s name, contact and tenancy records; a tenant or guest sees the host or agency name and the property details, and a confirmed booking or tenancy reveals the exact address and access details; an artisan sees the job address and requester contact once they accept a job. Service providers who process data on our instructions under a data-processing agreement: Paystack (payments, payouts and refunds); our licensed identity-verification provider, QoreID (KYC and business checks); Google (the Gemini AI features above, and address autocomplete and mapping); our SMS providers (one-time codes and alerts); Expo and Google Firebase (push-notification delivery); our cloud hosting and object-storage provider (for the app and your uploaded photos and documents); and our email provider. We also disclose data where Nigerian law requires it, to enforce our terms, or to prevent harm or fraud. We do not sell your data.
Some of our providers — including Google (AI and maps) and our cloud hosting and storage — may store or process your data on servers outside Nigeria. Where data is transferred abroad, we rely on the transfer conditions the NDPA allows (such as adequate protection or contractual safeguards) so your data keeps equivalent protection.
On the website we use essential storage in your browser to keep you signed in and to remember basic preferences; these are necessary for the site to work. The Thinplex app does not carry third-party advertising or analytics trackers. We use limited first-party logs to run and secure the service.
We keep your data while your account is active. When you delete your account we immediately close it, hide your profile from other users, remove your stored card token and push tokens, and anonymise your sign-in and profile details. Records that other people rely on or that the law requires us to keep — such as tenancy and booking records and financial, payment and accounting records — are retained for as long as those obligations last and then deleted or anonymised. Photos that record a property’s condition — move-in and move-out photos, or the photo a guest takes as they leave — are kept as part of the booking or tenancy record and are visible to both the guest or tenant and the host or owner, so a caution claim is judged against the same evidence. Certain financial ledgers and audit logs are kept as long as the law requires.
You have the right to be informed about, and to access, a copy of your personal data; to have inaccurate data corrected; to have data deleted (subject to the retention rules above); to restrict or object to certain processing, including automated processing; to receive certain data in a portable form; and to withdraw a consent you gave (without affecting processing already carried out). You can edit your name, email and photo in Settings and delete your account from the app at any time. For any other request, contact privacy@thinplex.com; we respond within the time the NDPA allows. If you are not satisfied, you may complain to the Nigeria Data Protection Commission (NDPC).
Sign-in is passwordless — your email address plus a one-time code, with limited attempts and short-lived codes. Access to records is scoped so users only see data they are a party to, and staff access is role-based. Data is encrypted in transit, card numbers and CVV are never stored by Thinplex, and callbacks from our payment and verification providers are signature-checked. No system is perfectly secure, so please keep your email address current and your device protected — it is your sign-in.
Thinplex is for adults. We do not knowingly collect data from anyone under 18; if we learn that we have, we will delete it.
We may update this policy as Thinplex evolves. When we make a material change we will update the date and version at the top, notify you in the app, and — where the change needs it — ask you to accept the updated policy before you continue.
Questions or requests about your data: privacy@thinplex.com. General help: hello@thinplex.com or the Help & support chat in the app. THINPLEX LIMITED — Anambra, Nigeria.