Privacy Policy

What we collect

When you use VoiceInsights Africa as a respondent, we collect the voice recording and/or text you provide in response to survey questions, along with basic metadata (channel used, timestamp, and — if you provide it — demographic information like gender or age band). When you use the platform as a client organization, we collect account information (name, email, organization) needed to operate your account.

How we use it

Respondent data is processed to generate transcripts, sentiment analysis, and aggregated insights for the client organization that commissioned the survey. We do not sell respondent data to third parties. Client account data is used solely to operate and bill for the service.

Service providers and subprocessors

We use contracted service providers to operate the platform. Depending on the channel and configuration selected by the commissioning organization, these may include Cloudflare for application hosting and storage, Twilio for phone, SMS and WhatsApp delivery, OpenAI or Anthropic for configured language and AI processing, and an email delivery provider for transactional notices. These providers process data on our instructions to deliver the service; this is not a sale of respondent data. A project-specific subprocessor and data-transfer schedule should be agreed during enterprise onboarding where required.

Consent

Approved collection workflows must present and record the consent process required by the applicable research protocol and channel. Respondents may stop participating in accordance with that protocol. See our Safeguarding & Compliance page for details.

Data retention and security

Data is encrypted in transit and at rest, and access is restricted by role. Offline interview payloads are encrypted on the field device and are removed after a confirmed synchronization. Project retention periods, deletion schedules, permitted processing locations and international transfer safeguards must be configured in the client agreement; we do not claim a universal data-residency location for every provider. See our Security page for technical detail.

Legal basis — Tanzania Personal Data Protection Act, 2022

VoiceInsights Africa designs implementations to support applicable obligations under Tanzania's Personal Data Protection Act, No. 11 of 2022. The applicable agreement must identify controller and processor roles, permitted purposes, regulatory responsibilities and any transfer safeguards required for the customer and project. References to international principles describe design context and do not claim certification.

Your rights

If you are a respondent and want data associated with you removed, or if you are a client organization with questions about this policy, contact us at [email protected].

This is a working draft policy for an early-stage platform. If your organization requires a reviewed, jurisdiction-specific privacy policy for procurement purposes, please contact us and we will provide one.