Data Protection Notice

For estate-managed records, the estate or residents association may be the controller because it determines the purpose of resident records, invoices, access rules, staff permissions, and estate operations.

INSYDE may act as processor where it handles records on behalf of an estate, and as controller for platform security, billing, service analytics, account administration, and direct business communications.

We design processing around lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.

We encourage estates to collect only the data needed for legitimate community operations and to keep staff access aligned with role and responsibility.

Depending on applicable law, data subjects may have rights to be informed, access data, correct inaccurate data, object, restrict processing, request portability, request deletion, complain to a supervisory authority, and avoid certain automated decisions.

Requests can be sent to support@insydeapp.com. Where the estate controls the data, we may route or coordinate the request with the estate administrator.

We maintain internal procedures to assess suspected privacy or security incidents, contain risk, preserve evidence, notify affected stakeholders where required, and support regulatory or estate reporting obligations.

Users and estates should report suspected unauthorized access, leaked records, suspicious login activity, or improper staff use as soon as possible.

Some infrastructure, messaging, payment, analytics, or support providers may process data outside Nigeria. Where we use such providers, we aim to apply appropriate contractual, technical, and organizational safeguards.

Estates should maintain lawful basis for resident processing, publish any estate-specific notices, keep user roles current, train staff, avoid unnecessary collection, and make sure residents know how to raise privacy requests.