Privacy Notice.
The beta-version notice explains how Pay Me Bro handles personal information for public website enquiries and beta workflow software use.
Beta version. The notice applies during Pay Me Bro beta/pilot use and may be updated as the product, public website, and school onboarding workflow change.
1. Responsible party
The responsible party for processing personal information is TEC LABS (Pty) Ltd, registration / enterprise number 2026/193764/07. Pay Me Bro is independent SaaS workflow software for participating schools. Public website and platform enquiries can be sent to hello@teclabs.co.za.
2. Purpose of processing
Pay Me Bro processes personal information for the purposes needed to provide the public website, respond to enquiries, onboard participating schools, collect and review student timesheet claims, support lecturer and administrator review, provide workflow-status notifications, and maintain records needed for school administration and applicable legal obligations.
Pay Me Bro does not handle payroll funds, guarantee payment, or verify that a student has been paid.
3. Personal information collected
The public website does not currently collect enquiry form submissions. If a person emails Pay Me Bro, that email may include the sender's name, email address, role, school, and information included by the sender.
Registered platform use may involve profile and workflow information such as full name, email address, student or staff number, identity or passport information included in uploaded bank documents, income tax reference number, bank account document details, visa or study permit status for international students, school affiliation, student classification, timesheet data, work descriptions, approval status, generated PDFs, and workflow communication records.
4. Lawful basis
Processing is carried out on the basis of consent where consent is requested, and where applicable, legal obligation arising from tax, payroll-document, record-keeping, or institutional administration requirements.
5. Data handling safeguards
Pay Me Bro is designed to support role-scoped access and clearer records. Access to financial documents is intended for authorised administrators and finance/admin users. Lecturers use workflow views for the timesheets relevant to their role. Supabase provides the database, authentication, and storage foundation. Resend supports transactional email delivery.
Pay Me Bro is designed and operated to support compliance with POPIA and applicable South African record-keeping requirements. This describes the service's design and operating approach; it is not an unconditional guarantee of legal compliance. Using Pay Me Bro does not automatically satisfy each participating school's obligations.
6. Retention
Pay Me Bro retains date, time, school, lecturer, approval, processing, and audit information to operate the timesheet workflow, preserve an accountable history, support payroll and reporting hand-offs, resolve disputes, and meet applicable record-keeping requirements.
Official submitted, approved, rejected, processed, payroll-linked, and associated audit records are retained for at least five years after finalisation or the applicable payroll/reporting close, whichever is later.
Abandoned drafts are eligible for deletion 90 days after their last update. Synthetic and test fixtures are removed immediately after verified test completion unless a legal hold, investigation, dispute, audit, or other lawful-retention requirement requires preservation.
A legal hold, investigation, dispute, or audit suspends any deletion, including test-fixture cleanup, until the hold or proceeding is released or concluded. Sensitive payroll or motivation documents follow an explicitly classified retention schedule; deletion is not inferred from timesheet age.
Public website enquiry emails are retained only while needed for the enquiry, support, onboarding, audit, or legal purpose for which they were received.
7. Cross-border processing
Personal information may be processed by third-party service providers whose infrastructure is located outside the Republic of South Africa. Current service providers include Supabase, Inc. for database, file storage, and authentication, and Resend, Inc. for transactional email delivery. These providers are expected to maintain appropriate data protection standards for their services.
8. Your rights as a data subject
You may request access to or correction of your personal information, and may request deletion where permitted. A deletion request may be limited or delayed while lawful retention applies.
Depending on the request, POPIA may also provide rights to object to processing or withdraw consent where processing relies on consent.
To exercise these rights, email hello@teclabs.co.za with the subject "POPIA Data Subject Request".
9. Participating-school responsibilities
Participating schools retain their own legal and record-keeping responsibilities, including responsibilities for payroll, employment, tax, institutional, and source records outside Pay Me Bro.
10. Complaints
A person who believes their rights under POPIA have been violated may lodge a complaint with the Information Regulator of South Africa.
- inforeg@justice.gov.za
- Telephone
- 012 406 4818
- Website
- www.inforegulator.org.za
11. Public website and app notices
Registered Pay Me Bro users may see a more specific in-app POPIA notice during onboarding or from their dashboard. The in-app notice may contain workflow-specific consent wording because registered platform use processes more information than the public website.