Privacy Policy

1. Corporate Commitment

BTO SOLUTIONS LTD (RC 9452411), incorporated in Nigeria, operates the Shortlet OS platform. We are committed to maintaining the sovereign control and absolute confidentiality of all operator, guest, and property databases.

This Privacy Policy details how we collect, store, isolate, and encrypt operational data in full compliance with the Nigeria Data Protection Act (NDPA 2023) and international guidelines including the General Data Protection Regulation (GDPR).

2. Databases Collected & Handled

To operate the platform, Shortlet OS stores specific database tables:

• Operator Database: Full names, verified corporate credentials (RC numbers), contact information, and billing integrations tied to Paystack.
• Guest Records: Standard identification fields, phone numbers (for automated WhatsApp dispatch), email addresses, and reservation check-in/checkout dates.
• Property Metadata: Unit addresses, night rates, and unit availability statuses.

3. Absolute Data Isolation Guarantee

4. WhatsApp API Compliance & Automated Notifications

When our AI or your team schedules automated guest dispatches (e.g. check-in directions, lock-box codes, checkout alerts), messages are routed via official WhatsApp Business API gateways.

We enforce strict compliance checks to ensure guests only receive contextual transaction alerts tied to an active, paid reservation. Guests retain the absolute right to reply directly to opt-out or communicate directly with your team.

5. Paystack Integration Security

Financial data processed on our pricing portal is direct-routed to our payment gateway provider, Paystack. Shortlet OS does not store raw credit/debit card numbers, CVVs, or Pin details on its servers. All payment records are tokenized and processed over industry-standard Secure Socket Layer (SSL) encryption protocols.

6. Sovereign Rights & Data Exports

In alignment with NDPA 2023, you retain absolute ownership of all information recorded in your dashboard. If you elect to terminate your Shortlet OS subscription:

• You can request a complete data export including all guest profiles, checkout history, and transaction logs in an Excel/CSV format.
• Under the "Right to be Forgotten", we will permanently purge all dynamic databases from our active backups within 30 business days of contract cancellation, subject to statutory tax auditing requirements.