Privacy Policy

1. Who We Are

GPERA, also known as the Gate Pass System (GPS), provides digital estate security and operations tools for residential estates. The platform includes the GPERA Resident App, GPERA Guard App, estate admin console, public website, APIs, and related services.

This Privacy Policy explains how we collect, use, store, share, and protect personal information when residents, guards, estate managers, visitors, and other authorized users use GPERA.

2. Information We Collect

The information we collect depends on your role, the estate features enabled by your estate, and how you use the platform.

• Account and profile information, such as name, phone number, email address, role, estate, unit, resident type, guard assignment, and authentication details.
• Visitor and access information, such as guest names, phone numbers, vehicle details, visit purpose, QR codes, pass codes, access windows, entry and exit logs, denied attempts, blacklist matches, and guard verification activity.
• Estate operations information, such as dues, levy records, payments, receipts, complaints, complaint responses, announcements, document access, incident reports, elections, votes where applicable, and audit activity.
• Device and technical information, such as device identifiers, app version, IP address, operating system, crash diagnostics, network status, offline sync data, and security logs.
• Communications information, such as support requests, email messages, SMS delivery data, in-app notifications, and contact preferences.

3. How We Use Information

• To create and manage resident, guard, estate admin, and estate leadership accounts.
• To generate, validate, expire, cancel, and audit visitor passes.
• To help guards verify visitors at the gate, including during temporary internet outages.
• To keep entry, exit, incident, blacklist, complaint, payment, governance, and administrative records for estate accountability.
• To send account, security, visitor, payment, complaint, announcement, and service notifications.
• To process estate dues, levies, receipts, and related financial records.
• To provide support, troubleshoot issues, prevent misuse, secure the platform, and improve our services.
• To comply with legal obligations, enforce our Terms and Conditions, and protect residents, estates, visitors, guards, and GPERA.

4. Legal Basis and Estate Authority

GPERA processes information to perform requested services, support legitimate estate security and management interests, comply with legal obligations, and, where required, based on user consent.

For many records, the relevant estate, estate association, management company, or authorized administrator controls how the data is used within the estate. GPERA acts as a service provider and platform operator for those estate-authorized workflows.

5. Sharing of Information

We do not sell personal information. We share information only where needed to operate, secure, support, or legally protect the platform.

• With authorized estate administrators, guards, and residents according to their roles and permissions.
• With service providers that support hosting, analytics, crash reporting, SMS, email, payment processing, customer support, and security monitoring.
• With payment processors such as Paystack when users make or verify estate-related payments.
• With law enforcement, regulators, courts, or other parties when required by law or necessary to address fraud, safety, or security incidents.
• With a successor organization if GPERA is involved in a merger, acquisition, restructuring, or transfer of assets.

6. Data Retention

We retain personal information for as long as necessary to provide the services, support estate accountability, resolve disputes, enforce agreements, maintain security, and meet legal, tax, financial, audit, and compliance obligations.

Some records, including entry logs, payment records, receipts, incident reports, audit logs, and election or governance records, may be retained after an account is deleted because estates need them for security, accounting, dispute resolution, and statutory compliance.

7. Security

We use technical and organizational safeguards designed to protect GPERA data, including role-based access, authentication controls, audit logging, encrypted connections, restricted administrative access, secure hosting practices, and monitoring.

No digital service can guarantee absolute security. Users are responsible for keeping passwords, OTPs, pass codes, and devices secure and for promptly reporting suspected unauthorized access.

8. Your Choices and Rights

• You may request access to, correction of, or deletion of your personal information, subject to identity verification, estate authority, and applicable retention requirements.
• You may update certain profile details through the app or by contacting your estate administrator.
• You may disable some device permissions, but certain features, such as QR scanning, notifications, and file uploads, may stop working properly.
• You may request account deletion through the How to Delete Account page or by emailing support@gpera.org.

9. Children

GPERA is intended for use by adults and authorized estate personnel. If household or visitor information includes a minor, it must be provided by a parent, guardian, resident, estate administrator, or other authorized person for estate security or operations.

10. International Processing

GPERA is built for residential estates in Africa and may use infrastructure or service providers located in other countries. Where information is processed outside your country, we take reasonable steps to protect it according to this Privacy Policy and applicable law.

11. Changes to This Policy

We may update this Privacy Policy as the platform, laws, or estate features change. If changes are material, we will take reasonable steps to notify users through the website, app, email, or estate administrators.

12. Contact Us

For privacy questions, data requests, or account deletion support, contact GPERA at support@gpera.org or hello@gpera.org.