Privacy Policy

Overview

This Privacy Policy outlines how BSG DataWorks collects, uses, stores, and shares personal data from individuals who contribute voice recordings, audio files, video clips, images, or language data. We are committed to protecting your privacy and handling your data in compliance with the Nigeria Data Protection Act 2023 (NDPA 2023), the NDPC General Application and Implementation Directive (GAID) 2025, and other applicable international regulations like GDPR and PIPEDA.

Data We Collect

We collect Identity and Contact Data (name, email, phone, location, age, gender), Language and Speaker Profile Data, Contributed Content (voice/video recordings, images, scripts), Biometric Data (voice recordings), Financial Data (payment details), and Transaction and Consent Records.

How We Collect Data

Data is collected directly from you via consent forms, submission forms, WhatsApp, email, and uploaded recordings. We do not collect data from third parties.

Why We Process Your Data

We process your data for purposes such as registering you as a contributor, collecting and processing recordings, quality review, storing data, licensing recordings to AI buyers, processing payments, maintaining compliance records, and communicating with you. Our legal bases include consent, performance of contract, legitimate interests, and legal obligations.

How We Use Your Data

Your data is used for onboarding, task assignment, quality review, secure storage, inclusion in commercial AI training datasets, licensing to AI companies, payment processing, and responding to data subject requests. We never use your data for purposes beyond those stated without your explicit consent.

Website Analytics, Cookies, International Transfers, and Your Choices

We use Google Analytics only when you give explicit consent through the cookie banner on this website. If you select “Accept analytics”, Google Analytics may collect information about your use of the website, including pages viewed, interactions with links, device and browser information, and approximate location. Google may receive IP-address information as part of a web request and use it to derive approximate location information. If you select “Decline”, Google Analytics does not load. You can withdraw or change your consent at any time through “Cookie settings” in the website footer; your changed choice applies to future measurement and does not affect the lawfulness of processing before withdrawal.

Analytics information may be processed by Google LLC and its affiliates outside Nigeria and, where applicable, outside the European Economic Area and the United Kingdom, including in the United States. Your data may also be transferred internationally to dataset buyers or service providers where necessary for the services described in this policy. Where applicable data-protection law requires it, we use appropriate transfer mechanisms and safeguards for such transfers. You may contact us at dataservices@bsgdataworks.com for further information about the safeguards relevant to your data.

Who We Share Your Data With

We may share data with contracted dataset buyers, authorised personnel, regulators where required by law, and service providers that support secure storage or transfer, including Filen.io and Proton Drive. We use Google only for optional website analytics where you have consented through the cookie banner. We do not operate a payment platform embedded in this website; client payments are arranged separately by bank transfer. We do not sell personal contact details or share them for unrelated marketing.

Data Retention

Retention periods are set according to the purpose for which data was collected and applicable legal, contractual, and regulatory requirements under the Nigeria Data Protection Act 2023, the Companies and Allied Matters Act 2020, and the tax laws of the Federation of Nigeria.

Business inquiries and prospect communications are retained for up to 24 months after our last meaningful contact, then deleted or anonymised. A meaningful contact includes an active reply, meeting, quote, or contract discussion. Purely automated acknowledgements and system notifications do not reset this period.

Contributor contact and profile records, consent forms, licence agreements, and payment records are retained for the duration of the applicable agreement or contributor relationship and thereafter for the period required by applicable contract, Nigerian tax, corporate, and data-protection law — typically at least six years for financial and corporate records — and, for consent evidence, for the operational life of the licensed dataset plus any applicable limitation period.

Voice, image, and video contributions licensed into commercial datasets are retained for the operational life of the licensed data product, in accordance with the contributor's consent to commercial sublicensing and applicable contractual or legal obligations.

Personal contact data is deleted or anonymised at the end of the applicable retention period, except where a longer period is required by law or necessary to establish, exercise, or defend legal claims.

Data Protection

We implement robust technical and organizational measures to protect your data, including encrypted storage, restricted access, contractual prohibitions on re-identification by buyers, and secure data transmission. In case of a data breach, we will notify the NDPC and affected individuals as required by NDPA 2023.

Special Note on Biometric Data

Voice recordings, which may constitute biometric data, receive heightened protections. They are collected with explicit consent, stored encrypted, accessed only by authorized personnel, and used exclusively for AI training, with strict prohibitions against biometric profiling or identification.

Children and Minors

We do not accept contributions from, or knowingly collect data of, individuals under 18. Any such data identified will be immediately deleted.

Automated Decision-Making

BSG DataWorks does not use automated decision-making that produces legal or similarly significant effects. Human review is involved in quality assessment, and you have the right to request human intervention.

Governing Law and Regulatory Jurisdiction

Our primary governing law is the Nigeria Data Protection Act 2023 (NDPA 2023) and the NDPC General Application and Implementation Directive (GAID) 2025. GDPR and Canadian PIPEDA apply where relevant. The Nigeria Data Protection Commission (NDPC) is our regulatory body.

Updates to This Policy

This policy may be updated to reflect changes in practices or law. Active contributors will be notified, and significant changes will require fresh consent.