Privacy policy
This policy explains how Setspace (“Setspace”, “we”) collects and uses your personal data when you use setspace.ng, in line with the Nigeria Data Protection Act 2023. We are the data controller.
What we collect
- Account: your name and email address, and your profile picture if you log in with Google.
- Bookings: the spaces, dates and times you book or host, prices, and booking history.
- Payments: payment amounts and references. Card details go straight to Paystack; we never see or store them.
- Hosts: your listings, photos, the space’s address, and your bank name, account name and the last 4 digits of your account number (Paystack holds the full number to send payouts).
- Messages, reviews and ratings you write on Setspace, including any private note a host sends to Setspace.
- Technical: a login cookie to keep you signed in, and basic server logs (such as IP address and errors) to keep the site secure and working. We don’t use advertising or tracking cookies.
Why we use it
- To run your account and your bookings, take payments, send refunds and pay hosts (performing our contract with you).
- To send emails about your bookings, messages and reviews (performing our contract).
- To prevent fraud, keep people safe and resolve disputes, which can include Setspace staff reading messages (our legitimate interests).
- To meet legal, tax and accounting duties (legal obligation).
We don’t sell your personal data.
Who can see what
- Other users see your first name and last initial on reviews and listings, and the full name on your profile in bookings and messages with them.
- A space’s exact address is shown only to the host and to guests who have paid for a booking there.
- Hosts can see a summary of how other hosts rated a guest who requests to book with them. Guests can’t see these ratings.
- Your email address is never shown to other users.
Companies that help us
We share data only as needed with service providers who process it for us under contract:
- Paystack (payments, refunds and payouts, Nigeria)
- Supabase (database, login and photo storage)
- Vercel (website hosting)
- Resend (sending emails)
- Google (if you choose to log in with Google)
Some of these providers store data outside Nigeria. Where that happens, we rely on the safeguards the Nigeria Data Protection Act allows, such as contractual protections.
How long we keep it
We keep your account data while your account is open. Booking and payment records are kept for at least six years after the booking for tax and accounting reasons. Server logs are kept for a short time. If you close your account, we delete or anonymise what we don’t need to keep by law.
Your rights
You can ask to see the personal data we hold about you, correct it, delete it, receive a copy, restrict or object to how we use it, or withdraw consent where we rely on it. Email hello@setspace.ng and we’ll reply within 30 days. You can edit your name at any time on your account page. If you’re unhappy with our answer, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
Security
Data is sent over encrypted connections, and access is limited by strict security rules in our database. No system is perfect, but if a breach affects your data, we’ll tell you and the regulator as the law requires.
Children
Setspace is for adults aged 18 and over. We don’t knowingly collect data from children.
Changes
We’ll update the date at the top when this policy changes, and email you about important changes.
Contact
Setspace, Lagos, Nigeria. Email hello@setspace.ng.