RevaVest Privacy Policy

1. Introduction

RevaVest ("we", "us", "our", or "the Platform") is committed to safeguarding your personal data and upholding your right to privacy under applicable data protection legislation (including NDPR and GDPR principles). This Privacy Policy explains our practices regarding data collection, usage, sharing, storage, and protection when you use our web platform and affiliated services.

2. Information We Collect

To deliver our co-investment, marketplace, and educational services, we collect:

• Account Credentials & Contact Data: First name, last name, email address, phone number, residential state, and country.
• Identity & KYC Information: Government-issued identification, proof of address, and verification selfies when required for compliance.
• Financial & Transactional Records: Wallet activity, bank account numbers for withdrawal payouts, installment schedules, and receipt histories.
• Technical & Telemetry Data: IP addresses, browser fingerprinting for security and rate limiting, cookies, and referral UTM tags.

3. How We Use Your Data

We process your personal information strictly for legitimate operational purposes:

• To establish, secure, and maintain your investor or associate account.
• To process co-ownership purchases, property bookings, inspection schedules, and dividend distributions.
• To prevent fraud, perform anti-money laundering (AML) checks, and satisfy regulatory reporting obligations.
• To communicate transaction receipts, product updates, and platform security alerts.

4. Data Sharing & Third Parties

RevaVest never sells your personal information. We only disclose data to licensed payment gateway processors (e.g. Paystack), regulatory verification providers, and cloud hosting infrastructure providers operating under strict confidentiality and security agreements.

5. Data Retention & Security Measures

We employ industry-standard encryption protocols (TLS/HTTPS in transit and 256-bit encryption at rest), strict role-based access control (RBAC), and persistent audit logging. Sensitive authentication materials and passwords are encrypted using strong cryptographic hashing (bcrypt).

6. Your Rights & Data Choices

You have the right to request access to your recorded personal data, rectification of inaccurate profile records, portability of transactional statements, and closure of your account in accordance with regulatory retention requirements.