Data map
| Information | System | Purpose |
|---|---|---|
| Account email, credentials, verification and sessions | Supabase Auth · connection pending | Account access and recovery |
| Draft/published profiles, sharing links, studio requests, analytics and rate counters | Cloudflare D1 | Workspace records and activity |
| Uploaded images | Cloudflare R2 | Portfolio and profile media |
| Verification and recovery email delivery | Email provider · selection pending | Transactional account messages |
| Session cookies, visitor/session IDs and analytics preference | Your browser or installed web app | Access, measurement and your choices |
This is the application’s data map, not a final vendor or subprocessor register. Hosting logs, provider backups, regions and contractual arrangements still need to be documented.
Controls implemented in the code
- Server-side verification of subscriber accounts and account-scoped access to private records.
- Restricted studio access; private uploaded media is served only to its owner unless referenced by a published profile.
- Authentication rate limiting and checks on account-form request origins.
- Separate draft and published profiles, a pause control, and an export of selected account records.
- Browser-level profile analytics opt-out on the Privacy Policy page.
- An offline reconnect screen without service-worker caching of private account responses.
These controls do not establish certified compliance. Production configuration and end-to-end tests are still required.
POPIA and launch readiness
BrandLinc is being prepared for a South African audience. The Information Regulator’s POPIA guidance is a starting point for the operator’s obligations. The following work is outstanding:
- Confirm the responsible legal operator, business address, privacy contact and accountable Information Officer arrangements.
- Document purposes and lawful grounds, required notices and any consent or objection mechanisms for each processing activity.
- Review provider contracts, chosen regions, international transfers and any operator/subprocessor arrangements.
- Implement and verify retention, account closure, deletion, backup expiry and data-rights request procedures.
- Prepare security incident response, access reviews, restore tests and notification procedures.
- Assess PAIA requirements and any applicable obligations for children’s or special personal information.
- Complete legal review of the policies, consumer terms and future payment/cancellation flow.
No POPIA, GDPR, ISO or SOC certification is claimed by BrandLinc on this page.
Retention and removal
There is no automated production deletion schedule for profiles, images, analytics or studio records yet. The 30-day browser visitor-ID expiry is not a server-data deletion deadline. Pausing removes the public page from normal access but retains its account records. Exporting creates a copy, not a deletion. Removing the app only removes it from your device.
Your data controls
Use workspace Settings to export selected account records or pause a published page, and the profile editor to correct public information. Use Privacy Policy → Profile analytics to change measurement preferences for the current browser. A verified contact and procedure for other data-rights requests must be added before launch.
Reporting concerns
A monitored BrandLinc privacy/security contact is pending. Do not send passwords, reset links or sensitive documents through public profiles. For regulatory information and complaint guidance, visit the Information Regulator.