Privacy policy

Last updated 26 October 2026

Draft. This is a placeholder that shows the shape of the final document. It has not been reviewed by a lawyer and is not yet in force.

This policy explains how Yesna (“we”), which provides Petra Platform, handles personal data about estate admins, residents, guards and visitors. It is written with the Nigeria Data Protection Act 2023 in mind.

Who is responsible

Each estate decides why and how its residents’, guards’ and visitors’ data is used: the estate is the data controller, and we process that data on its behalf under our agreement with the estate. For the accounts of estate admins and for running our own business (billing estates, support, security), we are the controller.

[To confirm: the company’s registered name, address, RC number, and the contact for the Data Protection Officer.]

What we collect

• Residents: name, phone number, the home they live in and their relation to it, household members they add, vehicles they register, passes and events they create, payments and electricity purchases, requests to the estate office, poll votes, and — only when a panic alert is raised and the resident allows it — the phone’s location.
• Visitors: the name, and optionally the phone number and vehicle plate, that a resident enters; when they came and went.
• Guards: name, phone number, the gate phone they use, shifts, and what they did at the gate.
• Estate admins: name, email, and an authenticator secret for signing in.
• Devices: gate phones’ and controllers’ identifiers, software versions and status.

Why we use it

To let visitors and residents in and out of the estate, keep the estate’s gate log and incident register, raise and collect estate dues, sell electricity where the estate offers it, send the notifications and messages people ask for, keep the service secure, and bill the estate for Petra Platform.

Who we share it with

Only with the services that make Petra Platform work, under contracts that protect the data: our cloud host, the SMS and WhatsApp providers that deliver codes and sign-in messages, the payment gateway, and the electricity vending partner. We do not sell personal data.

[To confirm: the named providers and where each stores data.]

How long we keep it

Visitors’ details are kept for the period the estate sets (its visitor retention setting), then removed. Other data is kept while the estate uses Petra Platform and for a limited period afterwards, unless the law requires longer — for example, payment records.

Your rights

You can ask to see the personal data held about you, to correct it, to have it deleted, to restrict or object to its use, and to receive a copy. Residents and visitors should usually contact their estate first; you can also write to us. You may complain to the Nigeria Data Protection Commission.

Security

Data is encrypted in transit and at rest. Each estate’s data is kept separate from every other estate’s. Admins sign in with a second factor. Our staff can view an estate’s data only for support, read-only, for a limited time, and every such view is recorded in the estate’s audit log.

Changes

We will post changes here and update the date above.