Privacy & Data Processing Policy
Effective Date: Jan, 2026
This Privacy & Data Processing Policy explains how Wyza processes personal data on behalf of customers in the course of providing survey services.
1. Roles and Definitions
- Customer: Data Controller
- Wyza: Data Processor
- Participants: Data Subjects
- Personal Data: Any information relating to an identifiable participant.
2. Categories of Data Processed
Wyza may process the following on behalf of customers:
- Contact data (name, phone number, email);
- Demographic data (age, gender, location);
- Survey responses (text, audio, video, WhatsApp responses, files);
- Technical data (IP address, device data, timestamps, metadata).
3. Purpose of Processing
Wyza processes data solely to:
- Collect and store survey responses;
- Transcribe, translate, validate, and analyse responses using AI tools;
- Deliver survey results to customers;
- Secure and improve platform operations.
4. Legal Basis
Customers are responsible for establishing a lawful basis for processing participant data, including obtaining informed consent where required. Wyza processes data strictly on customer instructions, except where legally required otherwise.
5. Sub-Processors
Wyza may engage trusted sub-processors including:
- Stripe (payments);
- Africa's Talking (OTP, messaging);
- Cloud hosting and analytics providers.
All sub-processors are contractually bound to data protection obligations.
6. Data Security
6.1 Wyza implements appropriate technical and organisational measures, including:
- Encryption;
- Secure servers;
- Access controls;
- Monitoring and incident detection.
6.2 Wyza shall not be liable for data breaches occurring despite reasonable safeguards.
7. Data Subject Rights
7.1 Wyza will assist customers in responding to participant requests relating to:
- Access;
- Correction;
- Withdrawal of consent;
- Deletion.
7.2 Valid participant deletion requests are processed within 24 hours.
8. Data Retention and Deletion
- Data is retained only for the duration required to provide services.
- Upon instruction or termination, Wyza will delete or return data.
- Personal data is permanently erased from active systems following deletion, except where legally required.
9. Breach Notification
Wyza will notify customers without undue delay upon becoming aware of a personal data breach affecting customer data.
10. Governing Law
This Policy is governed by the laws of the Federal Republic of Nigeria.
11. Contact
For privacy and data processing matters: support@wyza.ai
Participant Consent Notice
This survey is conducted by [Customer Name] using the Wyza platform.
By proceeding, you confirm that:
- You are 18 years of age or older.
- You understand the purpose of this survey and voluntarily agree to participate.
- You consent to the collection and processing of your responses, which may include:
- Text answers
- Audio or video recordings
- WhatsApp-based responses
- Demographic information (such as age, gender, or location)
- You acknowledge that:
- Your responses will be shared with [Customer Name], the survey owner;
- Wyza will process your responses on behalf of the survey owner, including AI-based transcription, translation, validation, and analysis;
- Your data will be stored securely and used only for the stated survey purpose.
- You understand that you may:
- Withdraw from the survey at any time;
- Request access to or deletion of your personal data.