Privacy Policy

1. Who is responsible for your data

Xodus Habitat, a division of Valeir Holdings SARL (RCCM CM-DLA-02-2025-B13-00148, B.P. 12949, Douala, Cameroon), is responsible for your personal data. Card payments made from outside Cameroon may be collected by Kaelmark LLC (New Jersey, USA), an affiliated company acting as our payment collection agent. Contact: use the contact form at xodushabitat.com/contact and choose the subject “Privacy or data request”.

2. Applicable law

We handle personal data under Cameroon Law No. 2024/017 of 23 December 2024 on personal data protection. Where the law of your country (for example EU/EEA or UK data protection law) also applies to you, we respect the rights it gives you.

3. What we collect

• Account data: name, phone number, email, password (stored securely, never in plain text), role (tenant, landlord, seller, provider, scout, diaspora owner), language, city.
• Identity verification data, for landlords, sellers, providers and scouts: national ID number and an image of the ID document, and a selfie if requested.
• Listing data: property, goods and service descriptions, photos, addresses, prices. For listings submitted by a scout: the landlord's name, phone and email.
• Transaction data: amounts, dates, payment status, mobile money number. Card details are handled by our payment processors; we do not store full card numbers.
• Messages and support requests sent through the Platform or WhatsApp.
• Technical and usage data (IP address, device, pages visited), analytics only if you consent.

We do not ask for sensitive data such as health, religion, political opinions or ethnic origin. Please do not upload it.

4. Why we use it and on what basis

To create and run your account and contracts; to verify identity and prevent fraud; to process payments and escrow; to communicate with you; to meet legal, accounting and anti-money-laundering obligations; to improve the Platform (analytics, with your consent). Our bases are your consent, given when you create an account and accept our Terms (and separately for optional analytics), and our legal obligations. For users in the EU/EEA/UK we also rely on performance of a contract and legitimate interests such as fraud prevention.

5. Who we share it with

Payment partners (CinetPay, MTN Mobile Money, Orange Money, Stripe, Kaelmark LLC); secure cloud hosting and database infrastructure providers; scouts, only the data needed for the listing they handle; other users, only your display name, verified badge, listings, city and the contact channels you choose to share; authorities where required by law; and professional advisers under confidentiality. We never sell your personal data. ID documents are seen only by authorized verification staff.

6. International transfers

Our hosting and some payment partners are located outside Cameroon (including the USA and Europe). We transfer only what is needed, use contractual and technical safeguards, and obtain any authorization required under Cameroonian law. By accepting our Terms you consent to these transfers.

7. How long we keep it

Account data: while your account is active. ID verification images: deleted 12 months after account closure or rejection, unless the law requires longer. Transaction and accounting records: up to 10 years as required by law. Removed listings: 12 months after removal. Messages: 24 months. Analytics data: 13 months.

8. Security

We use encryption in transit, role-based access (ID documents restricted to verification staff), and activity logging. If a breach puts your rights at risk we will notify the competent authority and affected users as the law requires.

9. Your rights

You may ask to access, correct, delete or restrict your data, object to its use, withdraw consent at any time, and receive a copy of your data where applicable. Use the contact form above; we reply within 30 days and may ask you to prove your identity. Some data must be kept to meet legal obligations, and withdrawing consent may limit some features. You may complain to the Personal Data Protection Authority of Cameroon (once operational) or the competent courts; EU/EEA/UK users may also contact their local supervisory authority.

10. Cookies and analytics

Essential storage (login, language) is always used. Analytics (Google Analytics) runs only after you accept, and you can change your choice at any time through “Cookie settings” in the footer.

11. Minors

The Platform is for people aged 18 and over. We do not knowingly collect data from minors.

12. Scouts and landlord data

Scouts handle landlord and tenant data only under the Scout Agreement and on our instructions, and may not keep copies.

13. Changes

We may update this policy; material changes are announced on the Platform before they take effect.