Privacy Policy

Plain Language Summary

Azi processes information about:

• Participants.
• Business Customers.
• Business Users.
• Website visitors.
• People who contact us.
• People included in Studies.

We use information to operate the Platform, administer Studies, recruit Participants, process payments, provide support, prevent fraud and improve Azi.

Azi may act as the responsible party for its own Platform activities and as an operator when processing Study information on behalf of a Business Customer.

We do not sell Personal Information.

We may share information with providers and Recruitment Partners where necessary and with appropriate safeguards.

You have rights to request access, correction and, in certain circumstances, deletion or objection.

1. Responsible party

YouX (Pty) Ltd, trading as Azi, is the responsible party for Personal Information used for:

• Account administration.
• Platform security.
• Participant profiles.
• Participant matching.
• Azi communications.
• Billing.
• Incentives.
• Fraud prevention.
• Support.
• Azi’s own service analytics.
• Legal compliance.

For Study responses and recordings, the relevant Business Customer or Research Sponsor may act as the responsible party while Azi acts as an operator.

2. Information collected

Azi may collect:

Business information

• Names.
• Work email addresses.
• Telephone numbers.
• Job titles.
• Organisations.
• Workspace roles.
• Subscription records.
• Billing records.
• Support records.

Participant information

• Account and contact information.
• Profile demographics.
• Interests and experience.
• Device information.
• Study eligibility.
• Incentive information.
• Study activity.

Study information

• Questions.
• Tasks.
• Responses.
• Ratings.
• Research recordings.
• Prototype activity.
• Completion metrics.
• Research Results.

Technical information

• IP addresses.
• Browser and device information.
• Login events.
• Usage logs.
• Cookies.
• Security and diagnostic information.

Communications

• Emails.
• Messages.
• Support conversations.
• Consent records.
• Complaints.
• Feedback.

3. Sources

We may collect information:

• Directly from you.
• From your organisation.
• From a Business Customer.
• From a Recruitment Partner.
• From a payment or verification provider.
• Automatically through the Platform.
• From publicly available sources where lawful.

4. Purposes

We may process information to:

• Create and manage accounts.
• Provide the Platform.
• Administer Studies.
• Recruit and match Participants.
• Schedule sessions.
• Facilitate payments and incentives.
• Provide support.
• Secure the Platform.
• Detect fraud.
• Enforce legal terms.
• Improve products.
• Analyse service performance.
• Develop properly de-identified statistics.
• Send permitted communications.
• Comply with law.
• Establish, exercise or defend legal claims.

5. Lawful grounds

Processing may be based on:

• Contract.
• Consent.
• Legal obligation.
• Protection of a legitimate interest of the data subject.
• Legitimate interests of Azi or another party that do not unjustifiably override the person’s rights.
• Another lawful ground.

6. Special Personal Information

6.1 Azi may process Special Personal Information where necessary for legitimate research targeting or a particular Study.

6.2 This information will not be collected merely because a person is willing to provide it.

6.3 Azi and the Business Customer must establish an appropriate legal basis, necessity, proportionality and suitable safeguards.

6.4 Additional Study-specific information or agreement may be required.

7. Sharing

Azi may share information with:

• Business Customers and Research Sponsors.
• Business Users.
• Participants where required for a Study.
• Recruitment Partners.
• Hosting providers.
• Authentication and security providers.
• Communications and scheduling providers.
• Payment and reward providers.
• Analytics providers.
• AI providers.
• Professional advisers.
• Authorities where required.
• A genuine purchaser or successor in a corporate transaction, subject to legal safeguards.

8. Operators

8.1 Azi requires operators processing Personal Information on its behalf to be bound by written obligations addressing:

• Confidentiality.
• Security.
• Processing instructions.
• Incident notification.
• Assistance with lawful requests.
• Deletion or return.
• Subcontracting where relevant.

8.2 Where Azi acts as an operator, the Azi Data Processing Agreement may apply.

9. International transfers

9.1 Information may be processed outside South Africa.

9.2 Azi will use an appropriate legal safeguard, including:

• Adequate protection.
• Binding contractual safeguards.
• Valid consent where appropriate.
• Another lawful transfer mechanism.

9.3 Azi may publish or provide a list of important subprocessors and processing locations.

10. Direct marketing and communications

10.1 Azi may send essential messages concerning:

• Accounts.
• Security.
• Billing.
• Payments.
• Studies accepted by the recipient.
• Platform changes.
• Support.

10.2 Optional electronic marketing will only be sent where permitted by law.

10.3 Participants may be given separate preferences for:

• Partner Studies.
• Jobs or paid tasks.
• Azi promotions.
• Partner promotions.
• Email.
• SMS.
• WhatsApp or similar channels.

10.4 Each optional electronic communication will contain a reasonable way to opt out.

11. De-identified information

11.1 Azi may use and share information that has been altered so that a person cannot reasonably be identified.

11.2 Azi will consider whether information could be reconnected through reasonably foreseeable means.

11.3 Pseudonymous information is not treated as de-identified merely because a name has been removed.

11.4 De-identified information may be used for:

• Platform analytics.
• Research-quality analysis.
• Industry insights.
• Reporting.
• Product development.

12. AI and automated processing

12.1 Azi may use AI or automated tools for:

• Matching.
• Fraud detection.
• Transcription.
• Summarisation.
• Research analysis.
• Support.

12.2 Azi will disclose material external AI processing through feature notices, Study information or subprocessor information.

12.3 Azi will take reasonable steps to prevent identifiable confidential Study information from being used to train unrestricted general-purpose third-party models without suitable authority and disclosure.

12.4 Human review should be used where an AI output materially affects a person.

13. Cookies

Cookies and similar technologies are explained in the Azi Cookie Notice.

Non-essential technologies will be managed through an appropriate preference mechanism where required.

14. Security

Azi uses reasonable administrative, technical and organisational safeguards, which may include:

• Access controls.
• Authentication.
• Encryption.
• Logging.
• Backups.
• Staff confidentiality.
• Provider due diligence.
• Incident procedures.
• Security monitoring.

15. Incidents

Where there are reasonable grounds to believe that Personal Information has been accessed or acquired by an unauthorised person, Azi will notify the Information Regulator and affected persons as soon as reasonably possible, subject to lawful instructions and permitted delays.

16. Retention

Azi retains information only for as long as reasonably required for:

• The original purpose.
• Contractual obligations.
• Legal, tax and accounting duties.
• Security and fraud prevention.
• Complaints.
• Legal claims.

Azi maintains or will maintain retention rules for:

• Inactive accounts.
• Business Workspaces.
• Screening responses.
• Study responses.
• Recordings.
• Payment records.
• Support records.
• Consent logs.
• Security records.

17. Rights

Subject to applicable law, a person may:

• Request confirmation that Azi holds Personal Information.
• Request access.
• Request correction.
• Request deletion or destruction.
• Object to certain processing.
• Withdraw consent.
• Object to direct marketing.
• Lodge a complaint.

Identity verification may be required.

18. International users

18.1 International users may have additional rights under the law applying to them.

18.2 Azi may issue supplementary jurisdiction-specific notices.

18.3 Where another mandatory law applies, nothing in this Notice is intended to remove rights that cannot lawfully be excluded.

19. PAIA and Information Officer

Privacy requests: privacy@aziresearch.com

20. Changes

Material changes will be communicated through an appropriate channel.

A new use requiring consent will not be authorised merely through continued Platform use.

21. Contact

YouX (Pty) Ltd, trading as Azi

200 Witch-Hazel Avenue

Highveld Technopark

Centurion

0169

South Africa

Privacy: privacy@aziresearch.com

Support: support@aziresearch.com

Telephone: +27 67 739 8333

Plain Language Summary

Azi collects information about you so that we can:

• Create and protect your Participant account.
• Match you with relevant user-research Studies.
• Contact you about suitable Azi Studies.
• Check eligibility.
• Pay incentives.
• Prevent fraud and duplicate participation.
• Provide support.
• Improve Azi.

Azi may also ask whether you want to receive partner research, job or paid-task opportunities. These additional opportunities are optional.

A Business Customer may receive your Study responses. It should not receive your direct contact details unless this is required and has been clearly explained.

Some Studies may record your voice, video, webcam or screen. You must be told before recording begins.

You can ask Azi to access, correct or delete eligible account information, object to certain processing and opt out of optional communications.

1. Who we are

YouX (Pty) Ltd, trading as Azi, operates the Azi Participant platform.

For Participant account, profile, matching, incentive, fraud-prevention and Platform administration information, Azi ordinarily acts as the responsible party.

For responses and recordings collected for a Business Customer’s Study, the Business Customer or Research Sponsor ordinarily determines the Study purpose and may act as the responsible party. Azi may process that information on its behalf.

2. Information we collect

We may collect:

Account information

• Name.
• Email address.
• Telephone number.
• Password or authentication information.
• Age or birth month and year.
• Country, province, city or general location.

Profile information

• Languages.
• Education.
• Employment.
• Field of work or study.
• Experience.
• Technology use.
• Devices.
• Interests and hobbies.
• Availability.
• Research preferences.
• Voluntarily supplied demographic information.

Study information

• Screening responses.
• Task responses.
• Survey answers.
• Ratings.
• Written feedback.
• Verbal feedback.
• Prototype interactions.
• Completion time.
• Audio, video, webcam or screen recording where disclosed.

Technical information

• IP address.
• Browser.
• Device.
• Operating system.
• Login and security events.
• Platform activity.
• Diagnostic data.
• Cookie identifiers.

Payment information

• Payment contact details.
• Incentive records.
• Transaction status.
• Fraud-prevention information.

Communications

• Support requests.
• Emails.
• Messages.
• Complaints.
• Consent and preference records.

3. Why we use your information

We may use information to:

• Create and protect your account.
• Verify eligibility.
• Match you with Studies.
• Send ordinary Azi research invitations.
• Administer screening and scheduling.
• Facilitate Studies.
• Process incentives.
• Prevent duplicate accounts and fraud.
• Investigate complaints.
• Enforce Participant Terms.
• Maintain Platform security.
• Improve Platform performance.
• Produce aggregated statistics.
• Comply with legal obligations.
• Send optional external opportunities where you have opted in.
• Send marketing where legally permitted.

4. Grounds for processing

Depending on the context, we may process information because:

• It is necessary to provide the Participant service you requested.
• It is necessary to perform a Study you accepted.
• You have given voluntary, specific and informed consent.
• Processing is required by law.
• Processing protects your legitimate interests.
• Processing is necessary for Azi’s or another party’s legitimate interests and does not unjustifiably override your rights.
• Another lawful ground applies.

You may withdraw consent for future processing where consent is the applicable ground.

5. Core Studies and optional opportunities

5.1 When you create an Azi Participant account, suitable Azi user-research and testing invitations form part of the core Participant service.

5.2 You may change your availability or communication settings.

5.3 Azi will request a separate optional preference before sending materially different opportunities, such as:

• Job opportunities.
• Freelance work.
• Gig work.
• Non-research paid tasks.
• Partner promotions.
• Other external opportunities.

5.4 Promotional newsletters and partner marketing are managed separately from essential account and Study messages.

6. Who receives information

We may share relevant information with:

• The Business Customer or Research Sponsor conducting a Study.
• Authorised researchers.
• Recruitment Partners.
• Hosting and security providers.
• Communications providers.
• Scheduling providers.
• Payment and incentive providers.
• Analytics and support providers.
• AI providers where disclosed.
• Professional advisers.
• Authorities where legally required.

We limit sharing to what is reasonably necessary for the applicable purpose.

7. Contact details

7.1 A Business Customer does not automatically receive your direct contact details.

7.2 Where direct contact is required for scheduling or conducting a Study, Azi will:

• Facilitate the contact itself; or
• Tell you what information will be shared and ask for the appropriate agreement.

7.3 A Business Customer may not add you to another database or use your contact details for unrelated purposes without separate permission.

8. Study responses

8.1 The Business Customer may receive:

• Your answers.
• Task behaviour.
• Recordings.
• Research observations.
• Participant codes.
• Profile characteristics relevant to the Study.

8.2 The Study information should state whether your participation is:

• Anonymous.
• Pseudonymous.
• Identifiable.

8.3 Pseudonymous participation is not fully anonymous because Azi or another authorised party may retain a way to reconnect the code to you.

9. Recording

9.1 A Study must disclose whether it involves:

• Audio.
• Video.
• Webcam.
• Screen recording.
• Eye tracking.
• Voice recognition.
• Session replay.
• Other recording technology.

9.2 Recording will only occur after the required agreement has been obtained.

9.3 Agreement to research recording does not automatically authorise public or promotional use.

10. Special Personal Information

10.1 Some Studies or profile questions may involve sensitive information.

10.2 We will take reasonable steps to explain:

• What is being collected.
• Why it is needed.
• Who receives it.
• How it will be used.
• Whether providing it is voluntary.

10.3 Azi and Business Customers should not collect sensitive information merely because a Participant is willing to provide it.

11. AI and automated processing

11.1 Azi may use automated tools to:

• Match Participants.
• Detect duplicate or suspicious activity.
• Transcribe responses.
• Summarise research.
• Support analysis.

11.2 We will disclose where an important feature sends identifiable Participant information to an external AI provider.

11.3 We will not rely solely on automated processing to make a decision producing substantial legal or similarly significant effects unless permitted by law and appropriate safeguards are in place.

11.4 You may contact us if you believe an automated process has materially affected you.

12. Recruitment Partners

12.1 Azi may receive information from or share limited information with a Recruitment Partner.

12.2 A partner may independently control its own participant database and communications.

12.3 The partner’s own privacy notice applies to those independent activities.

12.4 Azi remains responsible for information that Azi itself receives and processes.

13. De-identified and aggregated information

13.1 Azi may create statistics that have been altered so that Participants cannot reasonably be identified.

13.2 We may use or share properly de-identified and aggregated information for:

• Platform improvement.
• Research-quality analysis.
• Market insights.
• Business reporting.
• Partner reporting.
• Public research reports.

13.3 We will take reasonable steps to ensure that this information does not identify:

• Individual Participants.
• Confidential Business Customers.
• Confidential Studies.
• Tested products.

13.4 Pseudonymous information is not treated as de-identified merely because a direct name has been removed.

14. International processing

14.1 Some providers may store or process information outside South Africa.

14.2 Azi will use an appropriate legal safeguard, which may include:

• Adequate legal protection in the destination country.
• Contractual obligations.
• Consent where valid and appropriate.
• Another mechanism permitted by applicable law.

14.3 Information about important providers and processing locations may be made available through a subprocessor list or on request.

15. Security

15.1 Azi uses reasonable technical and organisational safeguards appropriate to the information and risks involved.

15.2 These may include:

• Access controls.
• Authentication.
• Encryption.
• Logging.
• Backups.
• Confidentiality agreements.
• Provider agreements.
• Security monitoring.

15.3 No online system can guarantee absolute security.

15.4 You must protect your own password and devices.

16. Security incidents

16.1 Azi will investigate suspected unauthorised access, loss or disclosure.

16.2 Where there are reasonable grounds to believe that Personal Information has been accessed or acquired by an unauthorised person, Azi will notify the Information Regulator and affected persons as soon as reasonably possible, subject to lawful instructions and permitted delays.

17. Retention

17.1 We retain information only for as long as reasonably necessary for:

• Your account.
• Study administration.
• Incentives and payments.
• Fraud prevention.
• Legal and tax records.
• Security.
• Complaints.
• Legal claims.

17.2 Different information may have different retention periods.

17.3 Study responses and recordings may be retained according to the Business Customer’s Study notice or retention rules.

17.4 Properly de-identified information may be retained for longer.

17.5 Closing your account does not immediately remove:

• Information required by law.
• Fraud-prevention records.
• Payment records.
• Backups.
• Information already lawfully supplied to a separate responsible party.

18. Your rights

Subject to applicable law, you may:

• Ask whether Azi holds your Personal Information.
• Request access.
• Request correction.
• Request deletion or destruction where available.
• Object to certain processing.
• Withdraw consent.
• Object to direct marketing.
• Ask about categories of recipients.
• Lodge a complaint.

Azi may need to verify your identity before responding.

19. Study-data requests

19.1 Azi handles requests relating to your Azi account and profile.

19.2 Where a Business Customer is responsible for Study responses, Azi may refer or forward your request to that Business Customer.

19.3 Azi will provide reasonable assistance in identifying the relevant Research Sponsor.

19.4 Azi cannot technically recall information already lawfully exported by a Business Customer, but the Business Customer remains responsible for handling valid requests.

20. Children

Azi does not currently permit persons under 18 to create Participant accounts or participate through the standard Platform.

21. Changes

We may update this notice for legal, security or service reasons.

Material changes will be communicated through email, account notification or the Platform.

22. Contact

Privacy: privacy@aziresearch.com

Support: support@aziresearch.com

Address: 200 Witch-Hazel Avenue, Highveld Technopark, Centurion, 0169, South Africa

You may also lodge a complaint with the South African Information Regulator or another competent authority.

This Data Processing Agreement forms part of the agreement between YouX (Pty) Ltd, trading as Azi, and the Business Customer.

1. Purpose

1.1 This Agreement applies where Azi processes Personal Information as an operator or processor on behalf of the Business Customer.

1.2 It does not apply to processing for which Azi independently determines the purpose and means, including:

• Azi account administration.
• Billing.
• Platform security.
• Participant account management.
• Azi’s fraud prevention.
• Azi’s own legal compliance.
• Properly de-identified Platform analytics.

2. Roles

2.1 The Business Customer is ordinarily the responsible party or controller for Study content, Study purposes and use of Study responses.

2.2 Azi acts as the operator or processor for relevant Study information processed on documented instructions.

2.3 Each party is responsible for complying with the law applicable to its role.

3. Business Customer instructions

3.1 Azi will process covered Personal Information only:

• To provide the agreed services.
• On documented Business Customer instructions.
• As required by law.
• For another purpose expressly agreed by the parties.

3.2 The service agreement, Study configuration and use of Platform features constitute documented instructions.

3.3 If Azi believes an instruction is unlawful, it may suspend the relevant processing and notify the Business Customer where legally permitted.

4. Processing details

Subject matter: User research, participant recruitment, Study administration and related Platform services.

Duration: The term of the applicable service and any lawful retention period.

Nature of processing: Collection, receipt, recording, organisation, storage, access, analysis, transmission, restriction, deletion and other agreed operations.

Purposes: Administration of the Business Customer’s Studies and services.

Data subjects may include:

• Participants.
• Business Users.
• Customers.
• Employees.
• Research subjects.
• Other people included in Study material.

Information may include:

• Contact details.
• Profile details.
• Demographics.
• Screening information.
• Research responses.
• Recordings.
• Behavioural information.
• Device information.
• Study observations.

5. Business Customer obligations

The Business Customer must:

• Provide lawful instructions.
• Have authority to process the information.
• Give required notices.
• Obtain required agreement or consent.
• Collect only necessary information.
• Avoid unlawful Study content.
• Respond to data-subject requests.
• Use suitable security controls for exported information.
• Notify Azi of relevant legal or regulatory requirements.

6. Confidentiality

6.1 Azi will restrict access to personnel who require it.

6.2 Relevant personnel must be bound by confidentiality obligations.

6.3 These obligations continue after their access ends.

7. Security

7.1 Azi will implement reasonable technical and organisational safeguards appropriate to:

• The sensitivity of the information.
• The volume of information.
• The processing context.
• Reasonably foreseeable threats.
• The potential harm from compromise.

7.2 Measures may include:

• Access controls.
• Authentication.
• Encryption.
• Logging.
• Backups.
• Change management.
• Incident management.
• Provider controls.
• Staff confidentiality.

7.3 Azi may update safeguards as technology and risks develop, provided the overall level of protection is not materially reduced.

8. Security incidents

8.1 Azi will notify the Business Customer without undue delay after becoming aware of a confirmed security compromise affecting covered Personal Information.

8.2 The notice will include available information reasonably necessary for the Business Customer to comply with its obligations.

8.3 Azi will reasonably assist with investigation, containment and notification.

8.4 Notification is not an admission of fault or liability.

9. Suboperators

9.1 The Business Customer authorises Azi to use suboperators reasonably necessary to provide the services.

9.2 Azi will:

• Maintain a list of material suboperators.
• Impose appropriate data-protection obligations.
• Remain responsible for their performance to the extent required by law or contract.
• Provide reasonable notice of material changes where practicable.

9.3 The Business Customer may raise a reasonable, evidence-based objection to a new suboperator on genuine data-protection grounds.

9.4 If the parties cannot resolve the objection, Azi may provide a reasonable alternative or allow termination of the materially affected service.

10. International transfers

10.1 Azi may transfer covered Personal Information internationally only using a mechanism permitted by applicable law.

10.2 Azi will require suitable safeguards addressing confidentiality, security and onward transfers.

10.3 Information about material processing locations will be available through the suboperator list or on request.

11. Data-subject requests

11.1 Azi will notify or refer a request to the Business Customer where the request concerns Study information controlled by the Business Customer.

11.2 Taking account of the nature of processing, Azi will provide reasonable assistance.

11.3 Azi may charge reasonable fees for exceptional assistance not included in the ordinary services, provided this is agreed in advance.

12. Regulatory assistance

Azi will provide reasonable assistance relating to:

• Security.
• Impact assessments.
• Prior authorisation where applicable.
• Regulatory enquiries.
• Consultation with authorities.

Assistance beyond ordinary Platform functionality may be chargeable where reasonable and agreed.

13. Deletion and return

13.1 On termination or written instruction, Azi will delete or return covered Personal Information within the applicable service and retention framework.

13.2 Azi may retain information where required by law or necessary for legal claims, security, fraud prevention or backups.

13.3 Retained information remains protected and may not be used for unrelated purposes.

14. Audit information

14.1 Azi will make available information reasonably necessary to demonstrate compliance.

14.2 Where documentary information is insufficient, the Business Customer may request an audit subject to:

• Reasonable advance notice.
• Confidentiality.
• Minimal disruption.
• Appropriate scope.
• No access to another customer’s information.
• Payment of reasonable costs unless a material breach is identified.

15. Liability

Liability under this Agreement is subject to the limitations in the main service agreement, except to the extent prohibited by law.

16. Priority

For Personal Information processed on behalf of the Business Customer, this Agreement prevails over conflicting provisions in the general Platform Terms.