Privacy policy

What we collect

When you create an account we collect your email address and a password (stored as a salted hash only). If you sign in with Google we receive your email address from Google. We do not store names, phone numbers, or billing addresses.

How we use it

We use your email to authenticate you, send portfolio review emails (if opted in), and notify you of site changes that affect your account. We do not sell or share your personal information with third parties for their marketing.

Data storage and security

Your data is stored on servers in the European Union. We use industry-standard encryption in transit (TLS) and at rest. Our database is accessible only to the application and authorised administrators.

Third-party services

We use Google OAuth if you choose to sign in with Google. Google handles authentication according to its own privacy policy. We also use Mailgun to deliver transactional and review emails; Mailgun receives your email address only for the purpose of delivering messages on our behalf.

Cookies

We use essential session cookies to keep you logged in. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

Your rights

You may request a copy of the personal data we hold, ask us to correct or delete it, or withdraw consent for email communications, at any time. To exercise these rights contact info@tfsalabs.co.za.

We comply with the Protection of Personal Information Act (POPIA). We take reasonable steps to safeguard your personal data and will only process it for the purposes described in this policy.

Changes

We may update this privacy policy from time to time. Continued use of the site after changes take effect means you accept the updated policy.