Who we are
BAYH Solutions Ltd (“BAYH”, “we”) is a company registered in Nigeria, RC 9724054, based in Akure, Ondo State, Nigeria. You can reach us about your data at privacy@bayhsolutions.com.
Our role
EstateFlowis used by building owners and management companies (our “customers”) to run their buildings. For the information about tenants that a building puts into EstateFlow, the building’s management decides what is collected and why; we store and process it on their behalf, under our Data Processing Agreement. For our customers’ account details and for visitors to this website, we decide, and we are responsible directly.
If you are a tenant, your building’s management is your first contact about your data. You can also write to us, and we will pass your request on and help them answer it.
What we collect
| Who | What |
|---|---|
| Tenants | Name, email, phone number, date of birth, nationality, passport or ID number, a photo of the passport or ID page, and an emergency contact (name, relationship, phone) |
| Tenants | Apartment condition photos taken at move-in and during the tenancy |
| Tenants | Rent, maintenance and deposit payments, receipts, promises to pay, and building charges |
| Tenants | Payments reported through the portal, with the photo of the transfer receipt uploaded |
| Tenants | Emails the service sends them, and notices from their building |
| Building staff and owners | Name, email, role, and a signature image used on receipts |
| Everyone who signs in | Email address, the internet (IP) address used, and the time of each sign-in and failed attempt; which version of these documents they accepted, and when |
| Website visitors | What you send through the contact form: name, email, the service you ask about, and your message |
We use one cookie, which keeps you signed in to EstateFlow. It is strictly necessary for the service to work. We use no advertising or tracking cookies.
Why we use it
- To run the service for the building: record payments, issue receipts, send reminders and notices, and keep the building’s records accurate.
- To identify tenants as the building’s management requires, and to reach someone in an emergency.
- To keep accounts secure: sign-in records let us detect and stop attempts to break into accounts.
- To answer enquiries sent through this website.
We do not sell personal data, and we do not use it for advertising.
Who we share it with
Only with the building’s own management, and with the service providers below, who process it for us under contract:
| Provider | What they do | Where |
|---|---|---|
| Vercel Inc. | Hosts the application | Global network |
| Turso | Stores the database | Ireland (European Union) |
| Resend | Sends email | United States |
| Cloudflare Inc. | Checks that a sign-in is not an automated attack | Global network |
EstateFlow also reads live exchange rates from Binance. No personal data is sent to Binance. We disclose data to authorities only when the law requires it.
Where it is stored
The database is in Ireland, in the European Union, so data about people in Nigeria and Northern Cyprus is transferred abroad. We transfer it only with the safeguards the Nigeria Data Protection Act 2023 requires, and our providers are bound by contract to protect it to the standard of the EU General Data Protection Regulation.
How long we keep it
| Information | How long |
|---|---|
| A departed tenant’s identity details (passport, ID, date of birth, contacts) | Deleted 6 months after the tenancy ends |
| Apartment condition photos | Deleted 6 months after the apartment stands empty |
| Transfer-receipt photos on reported payments | Deleted 12 months after the report is approved or rejected |
| Payment records and receipts | 6 years, as accounting and tax law requires |
| Sign-in records | 12 months |
| The sign-in cookie | 7 days |
| Website enquiries | 24 months |
How we protect it
Passwords are stored only as secure hashes, and the connection to the service is encrypted. Staff see only the buildings they work for, and tenants see only their own apartment’s records.
Your rights
You can ask to see the data held about you, to correct it, to have it deleted, to receive a copy in a common format, or to object to its use. Tenants can download a copy of their data and request deletion themselves, under My Apartment › Your data and privacy in the tenant portal. We answer every request within 30 days.
Some records, such as receipts for payments made, must be kept for the period the law requires even when deletion is requested; we will tell you when that applies. Write to privacy@bayhsolutions.com. If you are a tenant, we may confirm your request with your building’s management.
If you are in Nigeria
The Nigeria Data Protection Act 2023 applies. If you are not satisfied with our answer, you can complain to the Nigeria Data Protection Commission.
If you are in Northern Cyprus
The personal data protection law of the Turkish Republic of Northern Cyprus also applies, and you can complain to the authority it establishes.
Children
EstateFlow is for adults. We do not knowingly create accounts for anyone under 18.
Changes
When this policy changes, we show the new version to account holders when they next sign in and record their acceptance. The date of the current version is at the top of this page.