D8 uses information to run accounts, listings, nearby search, conversations, property requests, leases, payments, receipts, support, disputes and platform security. We do not use an advertising SDK or sell personal information for third-party advertising. Some transaction and safety records remain after account deletion because changing a profile must not rewrite a receipt, signed lease or dispute history.
1. Who is responsible
D8 is operated by Light Communication Ltd. For the processing described in this notice, Light Communication Ltd. is the data controller unless another organisation determines its own purposes for processing, such as a payment provider or identity provider.
Privacy enquiries and requests may be sent to thegr8light.inc@gmail.com. Do not email passwords, one-time codes, full card details or other unnecessary sensitive information.
2. Where this notice applies
This notice applies when you use the D8 app or website, contact support, list or seek property, make a rent transaction, respond to a sale advert or use another D8 service that links to it.
Banks, payment providers, sign-in providers, app stores, map apps and other services have their own privacy notices.
3. Information we use
Account and profile
Name, email address, phone number, role, profile and cover photographs, biography, account settings, legal-name confirmations, name-change history and authentication identifiers. If you choose a third-party sign-in option, we receive the account details that provider makes available for authentication.
Property listings
Property title, description, category, address, state and area, coordinates, photographs, videos where supported, price, fees, amenities, availability, unit details, lease terms, ownership or authority information you submit, and listing status. Listing information is intended to be visible to other users.
Identity and company authenticity review
For sale-advertising access, we may process legal name, account type, identity-document type, a private image or PDF of the selected identity document, company name, CAC number, CAC registration evidence, declarations, provider or review references, review notes, status and timestamps. We use this information to assess individual identity or company authenticity, prevent impersonation and display or remove a verified badge. We do not use this review to certify property ownership, authority to sell, title or property documents.
Premium subscriptions
We receive subscription entitlement, product, store, environment, renewal status, current-period end, transaction reference and subscription-event information from the app store and our subscription infrastructure. D8 does not receive your full app-store payment-card details.
Location and maps
With device permission, current coordinates may be used to request nearby results and calculate distance. Coordinates entered or selected for a property are stored with the listing and used for search, proximity and map display. An address or coordinate may be sent to our geocoding or static-map provider to return a coordinate, address suggestion or map image. D8 does not need continuous background location for the Near You feature.
Requests, agreements and records
Saved homes, tours, rent requests, sale enquiries, acceptances, cancellations, notices, renewals, lease content, typed signatures, consent records, timestamps, audit events, property and unit snapshots, transaction status, receipts and related identifiers. Protected records are not rewritten by later profile or listing changes.
Rent payments and landlord payout setup
Rent amount, listed fees, currency, transaction and payment references, generated transfer-account details, payment status, timestamps, provider responses and receipt information. For landlords, we may process bank name, bank code, account number, account name and payment-provider subaccount identifiers. D8 does not collect property purchase money.
Communications, support and safety
Chat messages, voice notes, attachments, contact history, FAQ feedback, property-deletion feedback, tour-safety acknowledgements and reminder preferences, reports, disputes, evidence, support tickets, reviews, moderation decisions and enforcement records. Messages are available to their participants. Authorised D8 personnel may access relevant content for support, safety, dispute review, legal compliance or enforcement.
Device, session and notification information
A device-generated identifier, device name or model, operating system, session timestamps, sign-in activity, IP address where available, push-notification token, notification preferences and delivery status. This supports active-session controls, security and notifications.
Recommendation activity and saved searches
Privacy-conscious feed events such as a listing impression, open, save, contact, tour request or rent request; the property involved; feed type; position; category; selected filters; time; and, when signed in, an account identifier. When Saved searches is enabled, D8 also keeps normalized property criteria such as category, listing type, location term, price range and bedroom range, together with use count and recent-use time. D8 does not retain the exact browse-search phrase for this feature, or add a precise device location or device identifier to the saved-search record.
Website information and suggestions
Our hosting provider may process normal request and security logs, such as IP address, browser type, requested page, time and diagnostic information. If you use the suggestion box on the What’s New page, we process your suggestion, the optional email address you provide and a keyed, pseudonymous value derived from your network address for abuse prevention and rate limiting. We do not store the raw network address in the suggestion record. Suggestions are available to authorised D8 administrators and are used to review feedback, improve the service and, if you supplied an email address, contact you about the suggestion. This website does not intentionally set advertising cookies or load an advertising tracker.
4. Why we use information
| Purpose | Typical information | Legal basis |
|---|---|---|
| Create and secure an account | Identity, contact, authentication, device and session data | Contract; legitimate interests in security |
| Publish and find property | Listing, profile, coordinates, filters and device location | Contract; consent where device permission is required; legitimate interests |
| Enable messages, requests, tours and agreements | Communications, requests, leases, signatures and audit records | Contract; steps requested before a contract; legal obligations |
| Verify identity and manage Premium | Identity or company evidence, review records and app-store subscription entitlement | Contract; steps requested before providing sale-advertising access; legitimate interests in fraud prevention and platform trust |
| Process and record rent payments | Transaction, bank setup, references, amounts and receipts | Contract; legal obligations; legitimate interests in accurate records and fraud prevention |
| Rank and improve feeds | Recommendation events, normalized saved-search criteria, listing quality, freshness and selected filters | Legitimate interests in useful, fair and reliable discovery |
| Send chosen notifications | Push token, preferences and relevant account events | Consent where required; contract for service messages; legitimate interests |
| Handle support, safety and disputes | Tickets, reports, evidence, communications and transaction records | Contract; legal obligations; legitimate interests in protecting users and the platform |
| Review website suggestions | Suggestion text, optional email and pseudonymous rate-limit value | Consent for optional follow-up; legitimate interests in improving and protecting the service |
| Comply with law and defend rights | Information relevant to a lawful request, claim, audit or investigation | Legal obligation; legitimate interests; establishment, exercise or defence of legal claims |
Where we rely on consent, you may withdraw it for future processing. Withdrawal does not make earlier lawful processing invalid and may prevent a feature that needs the information from working.
5. How recommendations work
D8 uses rules to order listings using relevance, listing quality, freshness, useful engagement and selected filters. Near You also uses distance. Saved searches is on by default and may give a limited ordering boost to listings similar to normalized criteria from earlier searches. It does not remove otherwise eligible listings.
You can turn Saved searches off in Profile > Settings > Properties Settings and save the change. This stops further saved-search recording, stops those criteria from being used for ranking and deletes the saved-search criteria linked to your account. Other recommendation activity and property preferences remain governed by their own controls and retention periods.
Ranking changes display order. It does not decide whether you may rent a property, contact a seller or complete any property arrangement. We limit repeated impression events to reduce manipulation and give relevant listings a fair opportunity.
6. Who may receive information
We disclose only what is reasonably needed for a service, instruction, safety issue or legal requirement.
- Other users: listing and profile information, messages sent to them, requests, agreements and transaction details relevant to their side of a transaction. After a completed sale tour, the buyer can receive the seller's account email and profile phone number to make direct contact.
- Cloud infrastructure providers: account authentication, database services, file storage, network request information and secure server-side operations.
- Payment providers and participating financial institutions: payment collection, transfer-account generation, landlord payout setup, transaction verification and financial compliance.
- Location and mapping providers: address search, geocoding and static-map generation where those features are used.
- Notification-delivery providers: device push-token registration and delivery of notifications you have enabled or service messages.
- Sign-in providers: authentication and account details when you choose an external sign-in option.
- Network and security service providers: abuse prevention, service protection and security logs.
- Website hosting providers: website delivery, request processing and security logs.
- Professional advisers and authorities: where reasonably necessary for legal advice, auditing, fraud prevention, a valid legal process, public safety or the defence of rights.
- A successor organisation: as part of a genuine merger, financing, reorganisation or sale, subject to appropriate confidentiality and applicable law.
We select providers that support the relevant service and require them to handle information consistently with their role and applicable law. You may contact us for further information about the providers involved in processing your information, subject to security, confidentiality and legal limitations.
Some providers may process information in other countries. We use contractual, organisational and legal measures appropriate to the transfer and the sensitivity of the information, as required by applicable data-protection law.
7. What other people can see
A property listing may show its description, media, price, fees, amenities, availability, location and the lister's profile. A map can reveal the selected property coordinates. Publish only information you are authorised to share.
Rent transaction, payment, lease and dispute information is not public. It is limited to relevant participants, authorised D8 personnel and providers or authorities with a valid need. Information may be shared when needed to investigate fairly, obtain a response, comply with law or protect rights.
8. How long information is kept
We keep information only for as long as reasonably necessary for the purpose collected, the parties’ records, security, dispute resolution and legal obligations. Retention depends on the category and context:
- Raw, account-linked recommendation events are designed to be removed or de-identified after no more than 90 days. Anonymous aggregate statistics may be kept longer.
- Saved-search criteria expire 180 days after their latest use. Turning Saved searches off deletes the account’s saved-search criteria sooner.
- Session, notification, saved-home and other preference data is kept while needed for the feature or until removed, replaced or deleted with the account.
- Listings and communications remain while active and may be retained for a reasonable period after removal where needed for transaction history, reports, fraud prevention or claims.
- Payment, receipt, transaction, signed lease, consent, audit, dispute and safety records may be retained after account deletion where necessary to preserve a reliable record, comply with financial or legal duties, resolve claims or protect users.
- Website suggestions and their optional contact details are kept while reasonably needed to review, act on or document the feedback, then deleted or anonymised. Pseudonymous rate-limit values are used only for abuse prevention.
- Backups and security logs may remain for a limited cycle before deletion or overwriting.
When information is no longer needed, we delete it, anonymise it, or restrict it from ordinary use, subject to technical and legal constraints.
9. How we protect information
We use measures appropriate to the nature of the service, including authenticated access, role-based database rules, private storage for voice notes, transport security, protected server-side payment operations, session controls, audit records and restrictions on changing transaction snapshots.
No internet service can promise absolute security. Protect your password and one-time codes, review active sessions, keep your device secure, and notify us promptly if you suspect unauthorised access. D8 will assess suspected personal-data breaches and notify affected people or the relevant data-protection authority where applicable law requires it.
10. Your privacy rights
Subject to applicable data-protection law, including the Nigeria Data Protection Act 2023 where it applies, you may ask to:
- receive information about our processing and access personal data we hold about you;
- correct inaccurate or incomplete information;
- delete information that no longer has a lawful reason to be kept;
- restrict or object to certain processing, including processing based on legitimate interests;
- receive eligible information in a portable format;
- withdraw consent for future processing where consent is the basis; and
- raise a concern about solely automated decisions with legal or similarly significant effects, if any are introduced.
Use in-app profile controls for ordinary edits and account deletion. For a formal request, email thegr8light.inc@gmail.com from your account email and describe the request. We may verify identity and may retain or withhold information where disclosure would affect another person’s rights, privilege, security, legal obligations or a valid exemption.
You may complain to the relevant data-protection authority, including the Nigeria Data Protection Commission where it applies. We encourage you to contact us first so we can try to resolve the concern.
11. Children
D8 accounts are for people aged 18 or older. We do not knowingly offer accounts to children. If you believe a child has created an account or provided personal information, contact us so we can investigate and take appropriate action.
12. Changes to this notice
We may update this notice when the product, our providers or the law changes. The effective date will be revised. For a material change, we will provide reasonable notice through the app, website, email or another appropriate channel before the change takes effect where required.
13. Contact
D8 / Light Communication Ltd.
Nigeria
Email: thegr8light.inc@gmail.com
For transaction support, disputes or reports, use Help & Support inside the app so the request stays linked to the correct account and record.