Patrofi Privacy & Data Policy
Effective Date: September 1, 2026 • Last Revised: September 2026 • Platform: Patrofi
Privacy Commitment & Role Definition
At Patrofi(“Patrofi”, “we”, “us”), we respect the confidentiality of operational telemetry, physical checkpoint logs, and guard personnel records. This Privacy Policy governs how personal and operational data is handled when security organizations use our SaaS guard tour platform.
1. Delineation of Roles: Controller vs. Processor
1.1 Customer as Data Controller: Under the Nigeria Data Protection Act, 2023 (NDPA) and global data protection laws, the Customer (the subscribing security agency, corporate enterprise, or facility manager) is the Data Controller. The Customer determines the purpose and lawful basis for collecting guard rosters, shift schedules, GPS tracking parameters, and incident evidence photos.
1.2 Patrofi as Data Processor: Patrofi acts solely as a Data Processor (or service provider). We process operational telemetry strictly on the written and automated instructions of the Customer, as configured within their organization workspace settings.
2. Categories of Information Collected & Processed
Organization business name, administrator email address, full name, phone number, billing address, and transaction references.
Guard officer name, terminal access PIN/credentials, assigned property site, scheduled patrol routes, shift start/end timestamps, and missed checkpoint exceptions.
Hardware NFC checkpoint identifiers, secure verification tokens, GPS coordinates (latitude, longitude, accuracy radius) sampled strictly during active patrol executions, and verification status flags.
Compressed on-site hazard photography (broken locks, water leakage, gate obstructions), written incident logs, and panic SOS emergency dispatch coordinates.
3. Guard Location Privacy & Shift-Only Tracking Boundary
3.1 Duty Hours Boundary: Patrofi is engineered with strict employee privacy safeguards. Location tracking and device telemetry are captured exclusively while an officer is logged into an active patrol shift or executing a scheduled tour.
3.2 No Off-Duty Surveillance: The Patrofi mobile terminal terminates all background geolocation listeners immediately upon clock-out, tour completion, or application termination. We do not track officers during off-duty hours or rest periods.
4. Touch Checkpoints & Anti-Ghosting Safeguards
4.1 Physical Touch Verification: Checkpoint scanning requires physical contact or close proximity with designated physical checkpoint tags. We do not capture biometric or facial recognition data during scans.
4.2 Dynamic Token Verification: To eliminate patrol ghosting, checkpoints utilize dynamic verification tokens generated upon physical touch, validated server-side to guarantee authentic physical presence.
5. Offline Synchronization & Local Device Storage
When guards patrol basements, underground parking structures, or remote perimeters with zero cellular signal, verification records and compressed incident photos are securely held in local device storage. Once network connectivity is restored, cached records auto-synchronize to the cloud and local temporary storage is safely cleared.
6. Lawful Bases for Processing under NDPA 2023
We process personal data under one or more of the following lawful bases:
- Contractual Performance: To deliver the Patrofi SaaS service, verify patrol routes, and generate client compliance reports.
- Legitimate Interests: To protect facility perimeter security, ensure lone-worker physical safety, and prevent patrol fraud.
- Legal Obligation: To comply with tax laws, statutory reporting, and valid lawful process from law enforcement agencies.
7. Data Security, Isolation & Audit Integrity
7.1 Encryption: All telemetry in transit is encrypted using Transport Layer Security (TLS 1.3 / HTTPS). Data at rest is encrypted using AES-256 standard.
7.2 Tenant Isolation:Patrofi enforces strict multi-tenant database isolation. No security organization can access or query another agency's site data or rosters.
7.3 Tamper-Evident Audit Trails: Every critical event (checkpoint tap, incident submission, manual override, tour dispatch) generates an immutable audit signature for non-repudiation and forensic verification.
8. Sub-processors & Infrastructure Partners
Patrofi engages SOC-2 and ISO-27001 certified third-party infrastructure providers for cloud hosting, managed database storage, transactional email dispatch, and PCI-DSS certified payment processing. All sub-processors are bound by strict Data Processing Addendums (DPAs) requiring equivalent privacy standards.
9. Data Subject Rights & Request Routing
9.1 Rights under NDPA: Data subjects have rights regarding access, rectification, objection to processing, and erasure of their personal data.
9.2 Routing to Controller: Because Patrofi is a Data Processor acting on behalf of the Customer, any requests from guards or employees regarding shift data or deletion must be submitted directly to their employing security agency or facility organization (the Data Controller). Patrofi will assist Controllers in fulfilling verified requests.
10. Retention, Deletion & Archival
Customer patrol telemetry and incident evidence are retained for the duration of the active subscription tier (typically 30 to 180 days for photos; 90 to 365 days for cryptographic audit hashes). Upon termination of an organization workspace, all active data is permanently deleted or anonymized within sixty (60) days following a grace export period.
11. International Data Transfers
Where operational data is processed using global cloud infrastructure outside Nigeria, Patrofi ensures such transfers comply with Sections 41, 42, and 43 of the Nigeria Data Protection Act, 2023, utilizing Standard Contractual Clauses (SCCs) and adequate data protection measures.
12. Data Protection Officer (DPO) Contact
For inquiries regarding our privacy practices, regulatory compliance, or Data Protection Impact Assessments (DPIA), please contact our designated Data Protection Officer: