Privacy Policy

1. Roles and Definitions

• Customer: Data Controller
• Wyza: Data Processor
• Participants: Data Subjects
• Personal Data: Any information relating to an identifiable participant.

2. Categories of Data Processed

Wyza may process the following on behalf of customers:

• Contact data (name, phone number, email);
• Demographic data (age, gender, location);
• Survey responses (text, audio, video, WhatsApp responses, files);
• Technical data (IP address, device data, timestamps, metadata).

3. Purpose of Processing

Wyza processes data solely to:

• Collect and store survey responses;
• Transcribe, translate, validate, and analyse responses using AI tools;
• Deliver survey results to customers;
• Secure and improve platform operations;
• Build respondent profiles for people who answer studies on Wyza, as described in section 4.

4. Respondent Profiles

When you answer studies on Wyza, we use your answers to build a profile of you. This includes answers from studies you did not qualify for. Your profile helps us match you to future studies and keep responses honest through quality and fraud checks.

• What we learn from one study can be used across studies.
• You can see and correct some of your profile in Wyza Poll under Settings → Profile.
• You can delete your account at any time. See Delete your account.
• We never share this profile with clients. A client sees only your answers to their own study, in the way that study told you.
• To advertise our studies we may give advertising partners such as Meta a scrambled (hashed) copy of your phone number. They use it only to match and then discard it, so that people who already took part are not shown the same study, and to find people like our respondents. It is never used to sell you anything. To opt out, email privacy@wyza.ai.

5. Legal Basis

Customers are responsible for establishing a lawful basis for processing participant data, including obtaining informed consent where required. Wyza processes data strictly on customer instructions, except where legally required otherwise.

6. Sub-Processors

Wyza may engage trusted sub-processors including:

• Stripe (payments);
• Africa's Talking (OTP, messaging);
• Cloud hosting and analytics providers.

All sub-processors are contractually bound to data protection obligations.

7. Data Security

7.1 Wyza implements appropriate technical and organisational measures, including:

• Encryption;
• Secure servers;
• Access controls;
• Monitoring and incident detection.

7.2 Wyza shall not be liable for data breaches occurring despite reasonable safeguards.

8. Data Subject Rights

8.1 Wyza will assist customers in responding to participant requests relating to:

• Access;
• Correction;
• Withdrawal of consent;
• Deletion.

8.2 Valid participant deletion requests are processed within 24 hours.

9. Data Retention and Deletion

• Data is retained only for the duration required to provide services.
• Upon instruction or termination, Wyza will delete or return data.
• Personal data is permanently erased from active systems following deletion, except where legally required.

10. Breach Notification

Wyza will notify customers without undue delay upon becoming aware of a personal data breach affecting customer data.

11. Governing Law

This Policy is governed by the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act 2023. Where participants are in Kenya or Ghana, their national data protection laws also apply, and the EU and UK GDPR apply where relevant.

12. Website Visitors and Enquiries

When you visit wyza.ai, book a demo, download an example report or email us, Wyza is the controller of the details you give us (such as your name, work email, company and role) and of basic usage data from analytics cookies. We use them to reply, arrange demos and improve the site, and we never sell them. See our Cookie Policy. You can ask us to delete them at any time.

13. Contact

For privacy and data processing matters: privacy@wyza.ai