Privacy Policy

Last updated: August 2026

This Privacy Policy explains how ProStackNG Technologies, operating LodgeIQ ("we", "us", "our") from Port Harcourt, Rivers State, Nigeria, collects, uses, and protects personal data. It's written with the Nigeria Data Protection Act 2023 (NDPR) in mind, and applies both to hotel account holders/staff and, where relevant, to guests whose data hotels enter into LodgeIQ.

1. Two Kinds of Data We Handle

It matters who's the "controller" of what data:

Your hotel's account & staff data — LodgeIQ is the controller. This is the information you give us directly: hotel details, staff accounts, billing information.

Your guests' data — Your hotel is the controller; LodgeIQ is a processor acting on your instructions. Guest names, contact details, ID/booking information, and folio history are entered by your staff to run your hotel operations, not collected by us directly.

2. What We Collect

Account & staff data: name, email, phone, role, and login credentials for each staff account your hotel creates.
Hotel & business data: hotel name, address, room inventory, pricing, and operational configuration.
Guest data entered by your hotel: names, contact details, identification and booking information, folio and payment history, and any notes staff record — only what your hotel chooses to enter for its own operations.
Billing data: subscription plan, billing history, and payment status. Card details are handled directly by Paystack, our payment processor — LodgeIQ does not receive or store full card numbers.
Device & usage data: if you opt in to push notifications, a device push-subscription token used only to deliver those notifications.

3. How We Use It

To provide and operate the Service: authenticate accounts, run reservations/billing/housekeeping features, process subscription payments, send transactional emails and SMS (booking confirmations, invitations, alerts, receipts), respond to support requests, and maintain security (rate limiting, audit logging, fraud prevention). We don't use guest or hotel data for advertising, and we don't sell personal data.

4. Cookies

LodgeIQ uses a single essential session cookie required to keep you signed in. We don't run third-party analytics or advertising trackers, and we don't use cookies for marketing purposes.

5. Who We Share Data With

We share data only with the processors needed to run the Service, each bound by their own security and data-handling terms:

Paystack — payment processing and subscription billing.
Resend — transactional email delivery.
Termii — transactional SMS delivery.

We don't share personal data with advertisers or data brokers. We may disclose data if required by law or a valid legal process.

6. Data Retention & Erasure

Guest data is retained for as long as your hotel's account is active, for your hotel's own operational and record-keeping needs. If a hotel account is closed, guest personal data is anonymized within 30 days of the closure request. Financial and booking records are not deleted even after a guest's personal data is anonymized — amount, date, and room stay records are retained without any identifying guest information attached, consistent with standard accounting and tax record-keeping requirements. If you're a guest and want to request erasure of your data, please contact the hotel you stayed at directly, as they control that data; we support their ability to fulfil that request in the platform.

7. Your Rights

Subject to applicable law, you may request access to, correction of, or erasure of personal data we hold about you as an account holder, and object to certain processing. Hotel account holders can reach us at support@lodgeiq.ng to exercise these rights for their own account and staff data.

8. Security

We use encrypted connections (HTTPS) for all traffic, role-based access control so staff only see what their role requires, rate limiting on authentication endpoints, optional multi-factor authentication, and audit logging of sensitive actions. No system is perfectly secure, but we take reasonable, industry-standard measures to protect data in our care.

9. International Data

Some of our processors (Section 5) may process data outside Nigeria as part of delivering their service to us. We select processors that maintain appropriate safeguards for cross-border data handling.

10. Children's Privacy

LodgeIQ is a business tool intended for hotel staff and is not directed at children. Guest records may incidentally include minors travelling with a booking party; that data is controlled by the hotel under Section 1, the same as any other guest data.

11. Changes to This Policy

We may update this Privacy Policy as the Service evolves. Material changes will be announced in-app or by email before they take effect.

12. Contact

Questions about this Policy or how your data is handled? Reach us at support@lodgeiq.ng or through our contact page.

ProStackNG Technologies · Port Harcourt, Rivers State, Nigeria