Avirihost

Privacy Policy

Last updated: August 17, 2026

Avirihost is an estate management platform for residents, security guards, and administrators. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data. By using Avirihost, you agree to the practices described here.

01

Information We Collect

Account information

When you register or are invited to Avirihost, we collect your full name, email address, phone number, and estate unit number. This information is required to create and manage your account.

Usage and activity data

We record visitor access logs (entry and exit times, access codes used), emergency alert submissions, community posts, and notification interactions. This data supports the security and management of your estate.

Payment information

Bill payments for electricity tokens, airtime, data bundles, cable subscriptions, and estate levies are processed by Flutterwave, a PCI-DSS compliant payment provider. Avirihost stores the transaction reference, status, amount, and — for electricity — the token issued. We do not store your card number or bank credentials.

Device and technical data

When you use the Avirihost mobile app, we may collect your device type and operating system version for compatibility and support purposes. We do not collect precise location data.

02

How We Use Your Information

We use your information solely to operate and improve the Avirihost platform: • Authenticate your identity and enforce role-based access (resident, security guard, administrator) • Record and display visitor access logs for estate security • Process and fulfil utility bill payments on your behalf • Deliver emergency alerts to relevant parties within your estate • Send you notifications about account activity, access events, and community updates • Respond to your support requests We do not sell, rent, or trade your personal data to third parties for marketing purposes.
03

Data Sharing

Supabase

Your account data, estate records, access logs, and notifications are stored in a Supabase-managed PostgreSQL database hosted on Amazon Web Services infrastructure in the EU West region. Data is encrypted at rest and in transit.

Flutterwave

Payment transactions are processed by Flutterwave Inc. When you initiate a payment, your name, email address, and payment amount are shared with Flutterwave to complete the transaction. Flutterwave's privacy policy governs their handling of this data.

Estate administrators

Your estate administrator can view your profile, unit assignment, visitor logs, and transaction history within your estate. They cannot access data belonging to other estates.

Legal requirements

We may disclose your data if required by applicable law, court order, or to protect the rights, safety, or property of Avirihost or its users.

04

Data Retention

We retain your personal data for as long as your account is active. Visitor access logs and transaction records are retained for up to three years for security and audit purposes. If you request account deletion, we will remove your personal data within 30 days, subject to any legal obligations to retain certain records.
05

Your Rights

Depending on your jurisdiction, you may have the right to: • Access the personal data we hold about you • Correct inaccurate or incomplete data • Request deletion of your account and personal data • Object to or restrict certain processing of your data • Receive a portable copy of your data To exercise any of these rights, contact us at privacy@avirihost.com. We will respond within 30 days.
06

Security

All data is transmitted over HTTPS. Database access is governed by row-level security policies — each user can only access data belonging to their estate. API keys and service credentials are stored as environment variables and never exposed to client-side code. Payment data flows through Flutterwave's PCI-DSS certified infrastructure.
07

Children's Privacy

Avirihost is intended for users aged 18 and above. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us immediately.
08

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where the changes are material, notify registered users by email or in-app notification.
09

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: Avirihost Email: privacy@avirihost.com