Privacy Policy

This Privacy Policy applies to all information collected through our website at www.zeyntra.com (including the /ng and /ca market pages), our mobile applications, and any related services, sales, marketing, or events (collectively, the "Services").

Zeyntra operates in Canada (governed by PIPEDA and applicable provincial privacy legislation, including Quebec Law 25 where applicable) and Nigeria (governed by the Nigeria Data Protection Act and applicable regulations). We also maintain GDPR/UK GDPR readiness controls for future EU/UK processing.

By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Services.

Information you provide directly:

• Identity information — Full name, phone number, email address
• Financial profile — Income range, rent budget range, employment type, unit count for landlords, and exact income details when you start active income verification
• Location preferences — City, neighborhood, or province you wish to rent in
• Account credentials — Email and password if you create an account
• Communications — Messages you send through our AI concierge, support tickets, or email correspondence
• Landlord information — Property addresses, unit counts, rental amounts, and portfolio details (for landlord users)

Information collected automatically:

• Device data — Browser type, operating system, device identifiers
• Usage data — Pages visited, features used, time spent, click patterns
• Network data — IP address or IP hash, user-agent, referring URL, rate-limit and security signals
• Cookies — Session cookies for functionality; analytics cookies with your consent (see Section 8)

Information we do NOT collect:

• Bank account numbers, credit card details, or BVN (Bank Verification Number) at the waitlist stage
• Biometric data
• Government-issued ID numbers (until identity verification is required for active service)

We use your information for the following purposes:

• Waitlist management — To register your interest, pre-qualify you for our services, and notify you when we launch in your area
• Service delivery — To match tenants with available properties, process rent support requests, and facilitate landlord-tenant relationships
• Communication — To send you updates about your application status, service announcements, and promotional materials (with your consent)
• AI-powered features — To power our Zeyn AI concierge, ZeynScore/Rent Power calculations, personalized property recommendations, and consented conversation memory
• Identity and underwriting — To verify identity, assess eligibility, generate score explanations, support human review, and prevent fraud
• Analytics — To understand usage patterns, improve our services, and fix technical issues
• Legal compliance — To comply with applicable laws, regulations, and legal processes
• Fraud prevention — To detect, prevent, and address fraud, security breaches, and other harmful activities

For Canadian users, we identify purposes before or at collection and limit collection to what is necessary for those purposes. Waitlist and eligibility flows may collect your name, email, phone, city/province, role, rent range, income range or unit count, message content, consent record, IP hash, user-agent, and browser/local-storage signals.

For Quebec users, Zeyntra provides this notice when personal information is collected through technology. We disclose the purposes and means of collection, the categories of service providers that may receive information, the possibility that information may be communicated outside Quebec, your rights of access, rectification, withdrawal of consent, portability where applicable, and complaint rights.

If Zeyntra uses ZeynScore or another automated system to make or support a decision that materially affects you, we will disclose that automated processing no later than the decision communication, provide the main factors and information used on request, and offer a human-review/correction path where required.

For Canada-facing public web journeys, the dedicated notice is available at www.zeyntra.ca/privacy, with a French Quebec-facing notice at www.zeyntra.ca/fr/confidentialite.

We process your personal information based on the following legal grounds:

We do not sell your personal information. We may share your information with:

• Service providers — Cloud hosting, database/storage/authentication, Google Workspace/Sheets for early-access intake where used, email delivery, analytics, support, identity, payment, bank-linking, e-signature, fraud-prevention, and security providers under contractual safeguards
• Landlords/Tenants — When you use our matching service, relevant profile information is shared with the other party to facilitate the rental relationship
• Operational partners — When completing rent support, identity, bank-linking, income, payment, or e-signature checks, we may share limited information with verification and payment partners
• Legal authorities — When required by law, court order, or to protect the rights, property, or safety of Zeyntra, our users, or others
• Business transfers — In connection with a merger, acquisition, or sale of all or a portion of our assets

We implement industry-standard security measures to protect your data:

• Encryption — All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access controls — Role-based access control with audit logging for all data access
• Infrastructure — Data is stored on SOC 2 Type II certified infrastructure (Supabase/AWS)
• IP hashing — IP addresses are hashed before storage for privacy preservation
• Regular audits — We conduct regular security assessments and vulnerability scanning
• Incident response — We maintain an incident response plan. For PIPEDA, we report to the OPC and notify affected people as soon as feasible where a breach creates a real risk of significant harm. For Quebec, we assess serious-prejudice risk, notify the CAI and affected people promptly where required, and maintain a confidentiality-incident register.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Depending on your jurisdiction, you may have the following rights:

To exercise any of these rights, contact us at privacy@zeyntra.com. We will respond within 30 days.

Canada: You may contact the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.

Quebec: You may contact the Commission d'accès à l'information du Québec (CAI) at cai.gouv.qc.ca.

Nigeria: You may contact the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

We use the following types of cookies:

We do not use advertising cookies or share data with ad networks. Quebec identification, localization, or profiling technologies are not activated by default unless necessary for site operation or enabled by your choice. You can control cookies through your browser settings.

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@zeyntra.com and we will promptly delete such information.

Your data may be transferred to and processed in countries other than your country of residence, including Canada and the United States (where our infrastructure providers operate).

When we transfer data internationally, we ensure adequate safeguards are in place, including:

• Standard contractual clauses approved by applicable data protection authorities
• Data processing agreements with all service providers
• Compliance with PIPEDA's accountability and transparency requirements for Canadian users
• Quebec privacy impact assessment and contractual safeguards before out-of-Quebec communication where required
• Compliance with NDPR's data transfer provisions (for Nigerian users)

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

• Waitlist data — Retained until you are onboarded to the platform or request deletion, whichever comes first
• Canada landing waitlist data — Retained until launch/onboarding, withdrawal, or 24 months after last interaction unless law requires longer
• Account data — Retained for the duration of your account plus 30 days after deletion request
• Transaction records — Retained for 7 years as required by financial regulations
• Analytics data — Aggregated data retained indefinitely; individual-level data deleted after 26 months
• AI concierge memory — Short conversation summaries are retained for up to 30 days and consented user facts for up to 90 days unless you request erasure earlier
• ZeynScore decisions — Retained while your application, lease, guarantee, dispute, or statutory audit obligation remains active

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice (such as an email notification or in-app alert).

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us: