Last updated: March 2026
Privacy Policy
1. Introduction
Opinyze is a product owned and operated by FlintNode Technologies ('FlintNode', 'we', 'us', 'our'), a technology company based in Lagos, Nigeria. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use the Opinyze platform at opinyze.com and all related services (the 'Service').
This Privacy Policy is drafted in compliance with the Nigeria Data Protection Regulation (NDPR) 2019, issued by the National Information Technology Development Agency (NITDA), and the Nigeria Data Protection Act 2023. We are committed to protecting the privacy and security of your personal data.
By using the Service, you consent to the collection, use, and processing of your personal data as described in this Privacy Policy.
2. Information We Collect
We collect the following categories of personal data:
Account Information
- Full name, email address, phone number, and profile photo.
- Date of birth, gender, and location (state, LGA).
- Account credentials (password is stored in hashed form only).
Demographic Information
- Age, gender, marital status, education level, employment status, income range, and religion.
- State and local government area of residence.
- Language preferences and ethnic background.
- This information is used to match you with relevant surveys and to provide anonymised demographic analytics to survey Creators.
Identity Verification Data
- National Identification Number (NIN) for identity verification purposes.
- Verification is processed through our authorised third-party verification partner (Dojah API). We store only the verification status and a hashed reference. We do not store your raw NIN.
Survey Response Data
- Your responses to surveys and polls you participate in.
- Time spent on each question and completion timestamps.
- Quality metrics (attention check results, consistency scores).
Usage Data
- IP address, browser type, device type, and operating system.
- Pages visited, features used, and time spent on the Platform.
- Referral source and referring URLs.
Financial Data
- Bank account details for withdrawal processing (stored securely and encrypted).
- Credit purchase and transaction history.
- We do not store payment card details. All card payments are processed by our authorised payment processor.
3. How We Use Your Information
We use your personal data for the following purposes:
- Service Delivery: To operate, maintain, and improve the Platform, including matching you with relevant surveys based on your demographic profile.
- Identity Verification: To verify your identity using NIN verification, ensuring platform integrity and preventing fraud.
- Payments & Earnings: To process credit purchases, track earnings, and facilitate withdrawals to your bank account.
- Communication: To send you service-related notifications, survey invitations, earning confirmations, and important updates about your account.
- Analytics: To generate anonymised and aggregated insights for survey Creators. Individual responses are never shared in identifiable form.
- Quality Assurance: To detect and prevent fraudulent responses, bot activity, and abuse of the Platform.
- Platform Improvement: To analyse usage patterns, improve our algorithms, and enhance the user experience.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes, including the NDPR.
4. Legal Basis for Processing
Under the NDPR and the Nigeria Data Protection Act 2023, we process your personal data on the following legal bases:
- Consent: You provide explicit consent when you create an account, complete your demographic profile, and participate in surveys. You may withdraw your consent at any time, though this may affect your ability to use certain features of the Service.
- Contractual Necessity: Processing is necessary for the performance of our contract with you (these Terms of Service), including operating your account, processing payments, and delivering survey matching services.
- Legitimate Interest: We process certain data for our legitimate business interests, including fraud prevention, platform security, service improvement, and analytics, where these interests are not overridden by your data protection rights.
- Legal Obligation: We process data where required by applicable Nigerian law, including financial record-keeping and regulatory compliance.
5. Data Sharing & Disclosure
We are committed to protecting your personal data. We share data only in the following circumstances:
With Survey Creators (Anonymised Only)
- Survey Creators receive anonymised and aggregated response data. They see response patterns and demographic breakdowns, but never individual identities.
- Creators cannot identify individual Respondents from the data we provide.
- Raw personally identifiable information (PII) is never shared with Creators.
With Service Providers
- Identity verification partners (for NIN verification).
- Payment processors (for credit purchases and withdrawals).
- Cloud hosting providers (for data storage and processing).
- All service providers are bound by data processing agreements that comply with the NDPR.
For Legal Reasons
- When required by law, regulation, or legal process.
- To protect the rights, property, or safety of FlintNode, our Users, or the public.
- In connection with a merger, acquisition, or sale of assets, with appropriate notice to affected Users.
We do not sell your personal data to third parties. We do not share your personal data for advertising purposes.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS/SSL) and at rest.
- Secure hashing of passwords using industry-standard algorithms.
- Role-based access controls limiting employee access to personal data.
- Regular security assessments and vulnerability testing.
- Secure session management with HttpOnly, Secure, and SameSite cookie attributes.
- Database access controls and network segmentation.
While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we commit to promptly notifying affected Users and relevant authorities in the event of a data breach, in accordance with NDPR requirements.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:
- Account Data: Retained for as long as your account is active, plus 12 months after account deletion to handle any outstanding issues.
- Survey Responses: Retained in anonymised form indefinitely for research and analytics purposes. Identifiable response links are deleted within 12 months of account deletion.
- Financial Records: Retained for a minimum of 6 years as required by Nigerian tax and financial regulations.
- Identity Verification Data: Verification status is retained while your account is active. Hashed NIN references are deleted upon account deletion.
- Usage Logs: Retained for up to 24 months for security and analytics purposes, then anonymised or deleted.
When personal data is no longer needed, it is securely deleted or anonymised so that it can no longer be associated with you.
8. Your Rights
Under the NDPR and the Nigeria Data Protection Act 2023, you have the following rights regarding your personal data:
- Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this within 30 days of your request.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data. You can update most information directly through your account settings.
- Right to Deletion: You have the right to request deletion of your personal data, subject to legal retention requirements. Account deletion can be initiated through your settings or by contacting us.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format (e.g., JSON or CSV).
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
- Right to Object: You have the right to object to the processing of your personal data for certain purposes, including direct marketing.
- Right to Withdraw Consent: Where we process your data based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact our Data Protection Officer at [email protected] . We will respond to your request within 30 days.
If you are unsatisfied with our response, you have the right to lodge a complaint with the National Information Technology Development Agency (NITDA).
9. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children under 18 years of age.
If we become aware that we have collected personal data from a child under 18, we will take immediate steps to delete such information. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at [email protected] .
10. International Data Transfers
Your personal data may be transferred to and processed in countries outside Nigeria where our cloud hosting providers and service partners operate. When we transfer personal data internationally, we ensure that:
- The receiving country provides an adequate level of data protection as determined by NITDA, or
- Appropriate safeguards are in place, such as standard contractual clauses or binding corporate rules, and
- The transfer complies with the requirements of the NDPR and the Nigeria Data Protection Act 2023.
We primarily use data centres and service providers that maintain servers in regions with strong data protection frameworks.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will:
- Notify you by email or through a prominent notice on the Platform.
- Provide at least 14 days' notice before the changes take effect.
- Update the 'Last updated' date at the top of this page.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
13. Contact & Data Protection Officer
If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer:
FlintNode Technologies
Data Protection Officer
Lagos, Nigeria
Email: [email protected]
Website: opinyze.com
For data protection complaints, you may also contact:
National Information Technology Development Agency (NITDA)
Website: nitda.gov.ng