Who is responsible for your information
Global Wave Technologies, Lagos, Nigeria, operates Whiiso and is the controller of personal data processed to provide the platform. For privacy questions, requests or complaints, email support@whiiso.com with "Privacy" in the subject. This notice is informed by the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Commission’s applicable directives, including the General Application and Implementation Directive 2025.
Information we collect
Depending on how you use Whiiso, we process account and contact information; password hashes and session records; profile details, interests and follows; posts, photographs and other uploaded media; messages and community participation; call or booking details; payment references, amounts and transaction status; payout details where you request a payout; support requests, reports and moderation records; and technical information such as IP addresses, browser information and security events. We receive information directly from you, from interactions with other users, and from payment or service providers confirming a transaction or delivering a requested feature. Birth-date information supplied at registration is used to check adult eligibility; the platform does not retain that date of birth in the account record.
Why we use it and our lawful bases
We use information necessary to create and administer your account, deliver messages and requested community or creator services, process bookings and reconcile payments on the basis of performing our agreement with you or taking requested steps before an agreement. We process information required by applicable law on the basis of legal obligation. Where justified after balancing your rights, our legitimate interests include preventing fraud, protecting accounts, resolving disputes and maintaining service reliability. Optional marketing or processing that requires consent uses your specific, informed consent; consent can be withdrawn without affecting earlier lawful processing. We do not treat acceptance of this notice as blanket consent for every use of personal data.
Visibility, messages and live rooms
Profile information and public posts may be visible to other users and, where publicly accessible, visitors and search engines. Community content is shared according to access and membership rules. Messages are available to intended participants; authorised personnel may access relevant records where necessary for support, safety, investigation or a legal obligation. Live audio, video and screen sharing expose what you choose to share to participants. A camera or microphone is used only when you enable the relevant feature and device permission. Do not assume content is end-to-end encrypted. Other people can copy or record content they receive; do not post information you are not comfortable sharing.
Providers and other disclosures
We share the information needed with hosting, storage, email, communications and payment providers to deliver the features you use. Paystack and Flutterwave may process payment information under their own privacy notices; payment-card credentials are entered into the provider’s payment interface rather than stored as full card details in Whiiso’s transaction records. Creators and hosts receive information necessary to fulfil a booking or membership. We may disclose relevant records in response to a lawful request, to protect rights and safety, or to professional advisers handling a dispute. Any business transfer involving personal data remains subject to applicable data-protection requirements and appropriate notice.
International processing
Our hosting and other service providers may process information outside Nigeria, including in the United States. Transfers from Nigeria must satisfy the Nigeria Data Protection Act 2023 and applicable NDPC requirements, including an adequate level of protection or another permitted transfer basis and any required approvals. Contact us for information about the providers, destination countries and safeguards relevant to your information. Using Whiiso does not by itself constitute consent to an otherwise unlawful international transfer.
Cookies and local storage
We use session cookies and similar technologies for sign-in, account security and service operation. Browser storage also remembers choices such as your theme or installation preferences. You can manage cookies and site storage in your browser, but blocking essential cookies may prevent sign-in or other requested features. If we introduce optional analytics, advertising or marketing tracking that requires consent, we will explain it and obtain that consent before activation; optional consent can be refused or withdrawn. Payment and other external providers may use their own technologies subject to their notices.
Recommendations and automated decisions
Interests, follows and activity may help rank posts, creators and communities. You can adjust relevant profile interests and use available feed controls. If you believe an automated result or restriction affects you unfairly, contact us for review. Where a decision made solely by automated processing has a legal or similarly significant effect, you have the protections provided by Nigerian law, including requesting human intervention, expressing your view and contesting the decision where applicable.
Retention and deletion
We keep account and profile information while the account is active and needed to provide the service. Content and communications are kept while needed for the feature, access history or a legitimate dispute; transaction, fraud, security and complaint records may need to remain after account closure to satisfy applicable legal obligations or establish, exercise or defend claims. Retention is determined by the information’s purpose, statutory requirements, unresolved disputes and security needs, rather than an indefinite right to keep everything. We delete or anonymise information when those purposes and lawful grounds end. Backups and legal holds may delay final removal; retained copies remain restricted and are not a reason to keep using information for unrelated purposes. Contact support@whiiso.com for a retention explanation or erasure request. Deleting your account cannot erase copies already lawfully held by another user or an external provider.
Your rights and how to exercise them
Subject to the conditions in Nigerian law, you can request information about processing; access a copy of your personal data; correct inaccurate information; request erasure or restriction; object to processing, including direct marketing; withdraw consent; request portability where applicable; and seek review of qualifying automated decisions. Some information can be edited in your profile and an account-data export is available in Settings. Email support@whiiso.com from the address associated with your account, describe your request and identify relevant records. We may request proportionate proof of identity and respond within the applicable legal time limit. If a request cannot be fulfilled in full, we will explain the lawful reason and available complaint route. Do not send passwords, payment PINs or one-time codes.
Complaints and security
Please send privacy concerns to support@whiiso.com; you do not have to give up regulatory or court remedies while we review them. You may complain directly to the Nigeria Data Protection Commission through its official complaints channels. We use access restrictions, protected credentials and other reasonable technical and organisational measures to protect information. No internet service can guarantee absolute security. Report suspected compromise promptly; where a personal-data breach meets the legal notification threshold, we will make the notifications required by law.
Adults only and updates
Whiiso is for people aged 18 and over. We do not knowingly offer accounts to children; if you believe a child has provided personal data, contact support@whiiso.com so we can investigate and take appropriate steps. We may update this notice as the service or law changes. The effective date appears above, and material changes will receive appropriate notice.