Privacy Policy

Opinyze is owned and operated by Opinyze Limited (RC 9736395) ('Opinyze', 'we', 'us', 'our'), a company registered in Nigeria, and Opinyze Limited is the controller of your personal data. Tornado Tech Ltd, which holds a shareholding in Opinyze Limited, is registered with the Nigeria Data Protection Commission. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use the Opinyze platform at opinyze.com and all related services (the 'Service').

Opinyze was built by FlintNode Technologies Limited and was formerly owned by it. Ownership has since passed to Opinyze Limited. The Opinyze mobile applications are still published under the FlintNode Technologies Limited developer account while that transfer completes, so FlintNode Technologies Limited may appear as the developer on Google Play and the App Store. Opinyze Limited remains the controller of your personal data throughout.

This Privacy Policy is drafted in compliance with the Nigeria Data Protection Regulation (NDPR) 2019, issued by the National Information Technology Development Agency (NITDA), and the Nigeria Data Protection Act 2023. We are committed to protecting the privacy and security of your personal data.

By using the Service, you consent to the collection, use, and processing of your personal data as described in this Privacy Policy.

We collect the following categories of personal data:

We use your personal data for the following purposes:

• Service Delivery: To operate, maintain, and improve the Platform, including matching you with relevant surveys based on your demographic profile.
• Identity Verification: To verify your identity using NIN verification, ensuring platform integrity and preventing fraud.
• Payments & Earnings: To process credit purchases, track earnings, and facilitate withdrawals to your bank account.
• Communication: To send you service-related notifications, survey invitations, earning confirmations, and important updates about your account.
• Analytics: To generate anonymised and aggregated insights for survey Creators. Individual responses are never shared in identifiable form.
• Quality Assurance: To detect and prevent fraudulent responses, bot activity, and abuse of the Platform, including using device identifiers, approximate location, and (for enumerator-run field surveys with consent) audio quality-assurance recordings to confirm that responses are genuine and were collected as intended.
• Platform Improvement: To analyse usage patterns, improve our algorithms, and enhance the user experience.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes, including the NDPR.

Under the NDPR and the Nigeria Data Protection Act 2023, we process your personal data on the following legal bases:

• Consent: You provide explicit consent when you create an account, complete your demographic profile, and participate in surveys. You may withdraw your consent at any time, though this may affect your ability to use certain features of the Service.
• Contractual Necessity: Processing is necessary for the performance of our contract with you (these Terms of Service), including operating your account, processing payments, and delivering survey matching services.
• Legitimate Interest: We process certain data for our legitimate business interests, including fraud prevention, platform security, service improvement, and analytics, where these interests are not overridden by your data protection rights.
• Legal Obligation: We process data where required by applicable Nigerian law, including financial record-keeping and regulatory compliance.

We are committed to protecting your personal data. We share data only in the following circumstances:

We do not sell your personal data to third parties. We do not share your personal data for advertising purposes.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure hashing of passwords using industry-standard algorithms.
• Role-based access controls limiting employee access to personal data.
• Regular security assessments and vulnerability testing.
• Secure session management with HttpOnly, Secure, and SameSite cookie attributes.
• Database access controls and network segmentation.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we commit to promptly notifying affected Users and relevant authorities in the event of a data breach, in accordance with NDPR requirements.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

• Account Data: Retained for as long as your account is open. When an account is closed we scrub the personal details held on it, such as your name, contact details and profile. The account record itself is not deleted, because responses, votes and transactions reference it and those records have to stay intact.
• Survey Responses: Retained indefinitely for research and analytics. Closing your account does not delete your responses. They stay attached to the account record, which by then no longer carries your name, your email address or your contact details.
• Financial Records: Retained for a minimum of 6 years as required by Nigerian tax and financial regulations.
• Identity Verification Data: The record that a verification took place is kept, together with its method, its outcome and its date. The personal details the check returned, and the trailing fragment of the identity number, are removed when your account is closed. A one-way hash of the identity number is kept permanently. It cannot be turned back into the number, and it is what stops the same identity being verified onto a second account.
• Usage Logs: Retained for security and analytics for as long as the account record they belong to exists. Closing your account does not delete them, and by then they no longer link to your name or your contact details.
• Session Recordings: Recordings of live interviews and group sessions, and the transcripts and summaries made from them, are governed by the Live Interview Recordings section of this Policy. That section sets out how long they are kept, and what closing your account does and does not do to them.

When personal data is no longer needed, it is securely deleted or anonymised so that it can no longer be associated with you.

Under the NDPR and the Nigeria Data Protection Act 2023, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this within 30 days of your request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data. You can update most information directly through your account settings.
• Right to Deletion: You have the right to request deletion of your personal data, subject to legal retention requirements. Account deletion can be initiated through your settings or by contacting us.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format (e.g., JSON or CSV).
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Object: You have the right to object to the processing of your personal data for certain purposes, including direct marketing.
• Right to Withdraw Consent: Where we process your data based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] . We will respond to your request within 30 days.

If you are unsatisfied with our response, you have the right to lodge a complaint with the National Information Technology Development Agency (NITDA).

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children under 18 years of age, and we check age against a government-issued identity document at sign-up rather than relying on what you tell us.

Where verification shows an applicant is under 18 we close the account and remove their personal details, keeping only an irreversible ID fingerprint and the date they turn 18 so we can honour the refusal. Where an existing account holder turns out to be under 18 we switch off earning, spending and participation; the account is preserved and reopens on their 18th birthday. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at [email protected] .

Your personal data may be transferred to and processed in countries outside Nigeria where our cloud hosting providers and service partners operate. When we transfer personal data internationally, we ensure that:

• The receiving country provides an adequate level of data protection as determined by NITDA, or
• Appropriate safeguards are in place, such as standard contractual clauses or binding corporate rules, and
• The transfer complies with the requirements of the NDPR and the Nigeria Data Protection Act 2023.

We primarily use data centres and service providers that maintain servers in regions with strong data protection frameworks.

We use cookies and similar tracking technologies to operate and improve the Service:

You can manage your cookie preferences through the cookie settings panel on our website or through your browser settings. Disabling certain cookies may affect the functionality of the Service.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will:

• Notify you by email or through a prominent notice on the Platform.
• Provide at least 14 days' notice before the changes take effect.
• Update the 'Last updated' date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Some features of the Service use artificial intelligence. They are generating questions for a survey or a form, analysing responses that have been collected, extracting themes from open-text answers, and transcribing and summarising live sessions. The following applies whenever one of them runs:

• What Is Sent: What is sent depends on the feature. It includes a Creator's prompt and any file they attach to it, the questions and content of a survey or form, the responses collected on that survey or form, and the recording of a live session together with the transcript produced from it.
• Responses Are Sent As Given: Where a feature analyses responses, the answers are sent as they were written. We do not rewrite or redact an open-text answer before it is sent. If you type personal information into an open answer, that text is sent with the rest of the answer.
• Who Processes It: This content is sent to third-party AI providers to deliver the feature. It leaves our systems when that happens. Each provider handles it under the terms it publishes for its service. Those published terms govern what a provider may do with the content, including whether it may be used to train a model. We choose which providers we use, and their published terms are part of that choice. We may use more than one provider for the same feature, and we may change or add to them.
• Cross-Border Processing: These providers process the content on servers outside Nigeria. The safeguards described in the International Data Transfers section apply to that processing.
• Output Is Not a Decision About You: AI output is a research aid for the Creator. It may be inaccurate, incomplete or out of date, and it is not checked by us before it reaches them. It is not a decision about you. We do not use AI to decide whether you may take part in a study, what you are paid, or whether your account is restricted. Those outcomes follow rules we set, and where a review is needed a person carries it out.
• Your Rights Still Apply: The rights set out in the Your Rights section apply to content processed by an AI feature in the same way as to any other personal data we hold about you.

When you take part in a live interview or group session on the Platform, we record the session to deliver the research the Creator paid for. Voice and video recordings are personal data, so we handle them with extra care:

• Consent: your audio and, where the study uses video, your video are recorded only after you give explicit, versioned consent. You give that consent when you book. A booking cannot be completed without it, and the version of the consent you accepted is stored with your booking. If you reschedule, the version is recorded again. The consent text discloses recording, transcription and AI-assisted analysis.
• Transcription and analysis: recordings, and the transcripts made from them, are sent to third-party AI providers to produce the transcript and the summary. The material leaves our systems when that happens. Each provider handles it under the terms it publishes for its service. Those published terms govern what a provider may do with the material, including whether it may be used to train a model. We choose which providers we use, and their published terms are part of that choice.
• Access: the researcher who ran the study can access the recording, the transcript and the summary. Opinyze can access them for quality assurance, fraud prevention and to protect your payment. Nobody else is given access by us.
• Storage and links: recordings are held in private storage. A playback or download link is generated only when someone with access asks for it, and it expires a short time after it is issued. We do not publish a recording and we do not make one available at a public address.
• Cross-border storage: recordings are stored with our cloud storage provider on servers outside Nigeria, under the safeguards described in the International Data Transfers section.
• Retention: recordings of completed sessions are retained for the research they were made for, and for resolving disputes and legal claims. We delete a recording when retention is no longer necessary.
• Closing your account: closing your account pseudonymises the account. It does not withdraw the permission you already gave for a recording that has already been made, and it does not delete that recording.
• Asking us to delete a recording: a recording is shared. It contains the researcher, and in a group session it contains other participants, so it is not yours alone to remove. You may ask us to delete a recording and we consider each request. We may refuse where retention is still necessary, or where other people are recorded. We will tell you if we refuse.

You can cancel a booked session before it starts, on the terms set out in the Live Interviews & Group Sessions section of our Terms of Service. Once a session has been recorded, the recording exists and this section governs what happens to it.

If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer:

For data protection complaints, you may also contact: