Trust & Security

All traffic between your device and My LocalLink is served over HTTPS (TLS). Authentication tokens are stored in your browser and sent only to our backend.

Every table that holds user, business or messaging data has row-level security enabled. Policies are scoped so that you can only read and modify your own records, the records of businesses you own or are a team member of, or content explicitly intended for registered users.

Billing and bank details on the business billing record are visible only to the business owner and platform admins. Competition entrant contact details are never shown to the hosting business unless the entrant explicitly consented to share them.

Accounts are protected by email/password or Google sign-in. Passwords are never stored in plain text — they are hashed by our authentication provider. Sessions can be revoked at any time by signing out.

My LocalLink runs on managed cloud infrastructure with automatic backups and patched runtimes. Server-side secrets are kept out of the client bundle and rotated when needed.

If you believe you have found a security vulnerability, please report it privately to support@mylocallink.co.za before sharing it publicly. Please include steps to reproduce and any proof-of-concept. We ask researchers to:

• Give us reasonable time to investigate and remediate before disclosure
• Avoid accessing, modifying or deleting other users' data
• Avoid degrading the service (no denial-of-service, spam or social engineering)
• Respect user privacy and applicable law

Good-faith reports made under these guidelines will not be pursued. We acknowledge responsible disclosures on request.

We investigate every reported or detected security incident. Where a confirmed breach is likely to result in a real risk of harm to affected users, we will notify those users and the South African Information Regulator without undue delay, in line with POPIA. Our response process includes containment, forensic investigation, remediation, notification and a post-incident review to prevent recurrence.

For anything urgent, email support@mylocallink.co.za with the subject line "Security" or "Privacy". We will respond as quickly as we can.