Privacy Policy

1. Nature of Our Service (Data Controller vs Processor)

Estastra acts primarily as a Data Processor on behalf of your Estate Management (the Data Controller). We process your data (entry logs, payment records) based on the instructions and rules set by your Estate. However, for certain services like our Resident App account management, we act as a Controller.

2. Information We Collect

We collect specific data to facilitate estate security, payment reconciliation, and community management.

2.1. Information from Your Estate

• Household Data: House number, property type, and location within the estate.
• Resident Contact: Names, phone numbers, and email addresses of authorized occupants.
• Staff Records: For estate staff, we collect identification details, guarantors, and employment records.

2.2. Information You Provide

• Account Credentials: Username, encrypted passwords, and profile photos.
• Visitor Data: Names and license plates of guests you pre-authorize for entry (Gate Passes).
• Community Posts: Content you share on the community bulletin board or maintenance tickets.

2.3. Automated Collection (Security Logs)

• Movement Logs: We record the timestamp, gate name, and vehicle details every time you or your visitors enter or exit the estate. This is a core security feature.
• Financial Metadata: We process bank transaction alerts (Sender Name, Amount, Date) to reconcile service charges. We do not access or store your bank login credentials or PINs.

3. How We Use Your Data

We use your data solely to provide the Estastra services:

• Security Enforcement: To verify identities at the gate and enforce access rules (e.g., restricting access for unpaid dues, if configured by your estate).
• Automated Reconciliation: To match your bank transfers to your household account using your unique Reference Code.
• Emergency Alerts: To send SMS broadcasts in the event of a security breach or emergency.
• Service Notifications: To confirm payments and notify you of visitor arrivals.

4. Data Sharing & Disclosure

We do not sell your data. We share it only as necessary to operate the platform:

• Your Estate Management: Authorized admins have access to resident lists, payment history, and gate logs for management purposes.
• Service Providers: We use trusted third-party vendors for hosting (Oracle Cloud), SMS delivery (Termii), and email services. They are bound by strict data processing agreements.
• Legal Compliance: We may disclose data if required by Nigerian law or a valid court order.

5. Data Security

We employ enterprise-grade security measures:

• Encryption: All data in transit is encrypted via HTTPS/TLS. Passwords and PINs are hashed using industry standards (Bcrypt).
• Access Control: Strict role-based access ensures that a Gateman cannot see financial data, and an Accountant cannot see movement logs unless authorized.
• Infrastructure: Our servers are hosted in secure Oracle Cloud data centers with automated backups.

6. Data Retention

We retain your data for as long as your Estate subscribes to our service. If you move out or your estate cancels the subscription, your personal data will be archived or deleted in accordance with the Estate's data retention policy and applicable laws.

7. Your Rights

You have the right to request access to, correction of, or deletion of your personal data. Please direct these requests to your Estate Administrator first, as they control the master records.

8. Contact Us

For privacy-related inquiries, please contact us at: