Privacy Policy for Whyser, Inc.

Last Updated: July 31st, 2026

Welcome to Whyser, Inc. ("Whyser," "we," "us," or "our"). Your privacy is important to us. This Privacy Policy describes how we collect, use, share, and safeguard your personal information when you interact with our services, participate in interviews we conduct on behalf of enterprise customers, or visit our website.

We are committed to protecting your privacy and handling your data responsibly and transparently. Please read this policy carefully.

Our Role

When Whyser processes interview, research, or participant data in connection with providing the research platform on behalf of an enterprise customer, Whyser does so pursuant to its agreement with that customer. The enterprise customer generally acts as the data controller or business, and Whyser acts as the data processor, service provider, or equivalent role under applicable data protection laws.

For certain personal information that Whyser collects and uses for its own business purposes, including account information, website usage information, support communications, security data, and business administration information, Whyser may act as the data controller, business, or equivalent role under applicable law.

Where Whyser acts as a processor or service provider, requests relating to personal information may be referred to the applicable enterprise customer.

Information We Collect

1. Information You Provide Directly

  • Account Creation and Communications: Name, email address, and other information you provide when creating an account or contacting us for support.
  • Client-Provided Interview Details: As a client using the platform, you provide information related to the interview to be conducted, including the interview structure, objectives, topics, questions, target audience, and any other instructions to ensure the interview meets your needs.
  • Interview Participation: Information you provide during interviews, including your responses to questions, data shared in recordings or written submissions, and any other personal details or content you voluntarily share as part of your participation in the interview.

2. Information Automatically Collected

We also automatically collect certain information when you use our services, including but not limited to your IP address, browser type, operating system, and usage data.

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, monitor usage patterns, and improve our services. Cookies are small text files placed on your device by your browser.

  • Types of Cookies We Use:
    • Essential Cookies: Necessary for the functioning of the platform.
    • Analytics Cookies: Used to understand how users interact with our website and Service, analyze usage and performance, and improve the user experience.
    • Functional Cookies: Enhance your user experience, such as saving preferences.
  • Managing Cookies: You can control cookies through your browser settings or opt out of certain cookies, such as Google Analytics, by visiting Google’s opt-out page. However, disabling cookies may limit the functionality of the Service.

For further details, see our Terms of Service, Section 6 (Analytics).

4. Special Category Data

During interviews, participants may voluntarily share sensitive or special category data. Whyser processes such data solely on behalf of the enterprise customer who commissioned the study, with the enterprise customer acting as the data controller and Whyser acting as the data processor. Whyser does not request, require, or encourage participants to disclose special category data unless explicitly instructed by the enterprise customer.

If you do not wish for such information to be processed, please refrain from sharing it during your participation.

How We Use Your Information

Depending on the context and our role, we may use personal information to:

  • Provide, operate, maintain, and improve our services.
  • Facilitate interviews and deliver insights to enterprise customers.
  • Communicate with you, including service updates and responses to inquiries.
  • Personalize your experience and deliver relevant content.
  • Ensure the security, integrity, and reliability of our platform.
  • Comply with legal and regulatory obligations.

Where Whyser acts as a data controller, we process personal information based on one or more applicable legal bases, including performance of a contract, compliance with legal obligations, our legitimate interests in operating, securing, and improving our services, and consent where required by law.

Where Whyser acts as a processor on behalf of an enterprise customer, we process personal information in accordance with that customer's documented instructions and our contractual obligations.

Whyser does not use personal information, Customer Data, or participant data to train or fine-tune large language models or foundation models.

Aggregated and de-identified data may also be used for research, analysis, and service improvement.

How We Share Your Information

1. With Enterprise Customers

When you participate in an interview, your information is shared with the enterprise customer who commissioned the study. They act as the "data controller," determining the purpose and lawful basis for processing.

2. With Third-Party Service Providers

We may share your information with third-party service providers who assist us in operating our service, conducting our business, or serving our users. These providers are subject to appropriate contractual data protection and confidentiality obligations.

A list of our authorized subprocessors is available upon request.

3. For Legal and Compliance Purposes

When required by law or to protect our rights, property, or safety, or that of others.

4. In Business Transfers

In the event of a merger, acquisition, or sale, your information may be transferred to the new entity.

We may also share your information with your consent or as otherwise permitted by law.

Whyser does not sell personal information or share personal information for cross-context behavioral advertising as those terms are defined under applicable U.S. state privacy laws.

Data Security

We are committed to protecting your information through robust measures, such as encryption, access controls, and periodic evaluations of our security practices. While we strive to maintain a high level of security, no system can be guaranteed to be completely secure. If you suspect unauthorized access or believe your data may have been compromised, please notify us immediately.

International Data Transfers

If you are located in the EEA, UK, or Switzerland, your personal information may be transferred to and processed in the United States. We use Standard Contractual Clauses (SCCs) or other approved safeguards to protect such transfers in accordance with applicable data protection laws.

For EEA transfers, Whyser relies on the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914), Module 2 (Controller to Processor). For UK transfers, Whyser uses the UK ICO Addendum. For transfers from Switzerland, Whyser applies the EU Standard Contractual Clauses, with the adaptations required under the Swiss Federal Act on Data Protection (FADP), where applicable.

Your Rights and Choices

Depending on your jurisdiction and the circumstances of the processing, you may have rights regarding your personal information, including:

  • Access: Request access to the personal information we have about you.
  • Correction: Request correction of inaccurate or incomplete personal information.
  • Deletion: Request deletion of your personal information, subject to applicable legal or contractual limitations.
  • Restriction and Objection: Request restriction of certain processing activities or object to certain processing, where applicable.
  • Data Portability: Request a copy of your personal information in a portable or machine-readable format, where applicable.
  • Complaint: Where applicable, lodge a complaint with a competent data protection or privacy authority.

To exercise your rights, email privacy@whyser.ai. For participants in interviews, requests may be referred to the enterprise customer acting as the data controller or business.

Children’s Privacy

Our services are not intended for individuals under 18. We do not knowingly collect data from children. If we discover we have collected personal information from a child, we will delete it promptly.

Data Retention

Personal information is retained for as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy. For data processed on behalf of an enterprise customer, retention is generally tied to the duration of the applicable customer relationship and the customer's instructions.

Following termination of the applicable relationship, personal information may be retained where necessary to comply with applicable legal obligations, applicable limitation periods, or for the establishment, exercise, or defense of legal claims.

We may retain and use anonymized data and metadata derived from platform usage to improve our Service, as detailed in Section 7.1 of our Terms of Service.

Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, business practices, legal obligations, or other relevant circumstances. For material changes, we will notify you by email or through the platform and obtain your consent where required by law.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please email us at privacy@whyser.ai.