Sissoni Pty Ltd (ABN 54 141 491 607) trading as Whyser Work
Last updated: 17 August 2026
Whyser Work is a workplace culture, performance, and leadership development platform operated by Sissoni Pty Ltd (ABN 54 141 491 607), trading as Whyser Work ("we", "us", "our"). Our registered office is at Maleny 4552.
This Privacy Policy explains how we collect, use, store, and protect personal information in connection with the Whyser Work platform (whyser.work). It applies to all users of the platform, including employer administrators and employees.
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We take our obligations under that legislation seriously.
For privacy-related enquiries, contact us at privacy@whyser.au.
We collect different categories of information depending on your role on the platform.
All users (employers and employees):
Employees additionally:
Employer administrators additionally:
A note on gender
Whyser Work records gender as a workplace demographic, in the same way it records your department and job title. It is recorded so that aggregate results can be grouped and compared, for example to show how different groups within an organisation experience their workplace and how that changes over time. We do not use gender to make decisions about individuals.
Gender reaches us in two different ways, and the two are held separately. Your employer may supply it as part of the staff information they give us when adding you to the platform. A value supplied that way is held against your user record, is recorded only as Male or Female, may not have been confirmed with you personally, and will not describe everyone accurately. Separately, some of our surveys ask you directly which gender you identify with, offering Male, Female or Other. An answer given that way is stored with that survey response.
If a gender value recorded against you is incorrect, or you would prefer that we did not hold one at all, contact us at privacy@whyser.au and we will correct or remove it. Survey responses are recorded without any link to your identity, so where you have answered a gender question inside a survey we are not able to locate that individual answer in order to change or remove it.
We do not collect payment card details directly. Payment processing for course purchases is handled by Stripe. Card details are provided directly to Stripe and are never received or stored by us.
Some information collected through the Whyser Work platform may constitute sensitive information under the Privacy Act 1988 (Cth). In particular, the Team Belonging survey captures responses relating to workplace psychological safety, stress, and wellbeing. This information may be relevant to an individual's psychological or emotional health.
We collect this information only in the context of a workplace culture assessment conducted on behalf of the employer organisation you work for, and only where your employer has obtained the appropriate consent or authority to do so as part of your employment or engagement arrangements.
We handle sensitive information with additional care and do not use it for any purpose beyond those described in this policy.
We collect information in the following ways:
We use the information we collect to:
We do not use your personal information for direct marketing without your consent, and we do not sell your personal information to third parties.
The Whyser Work platform uses artificial intelligence to generate culture reports, performance insights, KPI suggestions, and recommendations. More than one AI provider is used, depending on the feature.
Anthropic (Claude)
KPI suggestions are generated using Anthropic's Claude API, accessed directly by us as a commercial API service. Under Anthropic's commercial API terms, your data is never used to train Anthropic's AI models. API inputs and outputs are retained for a maximum of 7 days for security and abuse monitoring purposes only, and are then permanently deleted. This is materially different from consumer AI products and reflects the protections that apply to commercial API usage.
Google (Gemini)
Culture survey recommendations and onboarding check-in summaries are generated using a Google Gemini model, accessed through our platform provider Base44.
Other AI-assisted report content
Some narrative content within exported culture reports is generated through Base44's AI integration without our specifying a particular model. In those cases Base44 selects the model used.
We are seeking written confirmation from Base44 regarding which models are used where we do not specify one, the geographic location of that processing, the applicable retention periods, and whether inputs may be used to train any underlying model. We will update this policy as soon as that confirmation is received. If you have questions in the meantime, please contact us at privacy@whyser.au.
Where survey data is sent to an AI model, the information is limited to survey scores, the number of respondents, and free-text survey comments. Your name, email address and respondent identifier are not included. Culture survey recommendations are only generated where a survey has received at least four responses.
AI-generated content is intended as a decision-support tool only. It should not be treated as professional HR, legal, or psychological advice.
We do not sell or rent your personal information. We may share information with:
Our sub-processors
The following providers process personal information on our behalf in order to operate the platform. We remain accountable to you for how they handle your information.
We will update this list whenever we add or change a sub-processor. If you would like to be notified of changes, contact us at privacy@whyser.au.
The Whyser Work platform is built on Base44, a platform whose servers are located in the United States of America. This means your personal information, including survey responses and performance data, is stored on servers in the US.
Other sub-processors listed in Section 7 also process information outside Australia. AI processing via Anthropic's API occurs on servers located in the United States. Platform email delivery is handled by Resend in Japan. Platform backups are stored with GitHub in the United States. Payment processing is handled by Stripe in the United States. Google Analytics data is processed by Google on servers located in the United States and other countries in which Google operates. We are currently confirming the processing location for the AI services accessed through Base44, and will update this policy once that is confirmed.
By using the Whyser Work platform, you acknowledge that your personal information will be transferred to and stored outside Australia.
Base44 holds SOC 2 Type II and ISO 27001 certifications - independent audits confirming their security controls meet recognised international standards. All data is encrypted in transit and at rest.
We have taken reasonable steps to satisfy ourselves that our sub-processors handle data processed through our platform in a manner consistent with the Australian Privacy Principles. Base44's full privacy policy and Data Processing Addendum are available at base44.com.
We will update this policy if Australian data residency options become available and we elect to use them.
We use two analytics services to understand how the platform is used and improve it over time.
Base44 platform analytics. Our platform provider records basic activity such as pages visited and session activity.
Google Analytics. We use Google Analytics on the platform. It sets cookies in your browser and collects usage information including the pages you visit, how long you spend on them, approximate location derived from your IP address, and your browser and device type. This information is processed by Google. Google Analytics does not receive your survey responses, feedback, goals, performance data or any other content you enter into the platform.
You can prevent Google Analytics from collecting your data by installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout, or by blocking cookies in your browser settings. Blocking these cookies does not affect your ability to use the platform.
We do not use advertising networks, and we do not sell or share your information with advertisers.
We take reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification, and disclosure. Security measures include:
No method of data transmission or storage is completely secure. If you become aware of a security concern, please contact us at privacy@whyser.au.
We retain your personal information for as long as your account is active or as long as needed to provide services to your employer organisation. If your employer's subscription ends, your data will be retained for 12 months before permanent deletion, unless an earlier deletion is requested.
To request deletion of your personal information, contact us at privacy@whyser.au.
Under the Australian Privacy Principles, you have the right to:
To exercise any of these rights, contact us at privacy@whyser.au. We will respond within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last updated" date. We encourage you to review this page periodically.
Sissoni Pty Ltd trading as Whyser Work
ABN 54 141 491 607
Maleny 4552
privacy@whyser.au
whyser.work