Legal
POPIA Compliant
The responsible party for the processing of your personal information is MyReportComments, operated in South Africa. You can contact our Information Officer at privacy@myreportcomments.com for any POPIA-related queries or requests.
When using the free downloadable HTML tool, no personal information is collected by us. All data — including learner names and generated comments — is stored locally in your browser's storage and never transmitted to our servers.
When you create an account on myreportcomments.com, we collect:
We do not collect learner personal information (learner names, grades, or performance data) through the web app. Learner data entered into the tool is processed only within your session and is not stored against your account unless you explicitly save a class list.
We process your personal information on the following lawful grounds under POPIA:
| Purpose | Lawful basis |
|---|---|
| Creating and managing your account | Contractual necessity |
| Processing payments | Contractual necessity |
| Sending transactional emails (receipts, password resets) | Contractual necessity |
| Sending marketing emails about new features and report season reminders | Consent (opt-in at registration) |
| Detecting and preventing fraud or abuse | Legitimate interest |
| Improving the service through anonymised usage analytics | Legitimate interest |
We use your personal information only for the purposes for which it was collected, which include:
MyReportComments is designed to minimise the collection of learner personal information. We strongly encourage users not to enter full learner names or any identifying information beyond what is necessary for the tool to function.
We do not collect, store, or process any special personal information as defined by POPIA (including health data, racial or ethnic origin, religious beliefs, or biometric information).
We do not sell your personal information. We share personal information with third parties only where necessary:
All third-party providers are required to handle personal information in accordance with applicable privacy laws.
We retain your account information for as long as your account is active, plus a reasonable period to comply with legal obligations. Payment records are retained for 5 years as required by South African tax law. If you delete your account, your personal information will be removed from active systems within 30 days, except where retention is required by law.
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. These include encrypted data transmission (HTTPS), secure authentication via Supabase Auth, and access controls limiting who can view personal data within our systems.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Regulator within 72 hours of becoming aware of the breach, as required by POPIA.
Under POPIA, you have the right to:
To exercise any of these rights, contact our Information Officer at privacy@myreportcomments.com. We will respond within 30 days.
The MyReportComments website uses essential cookies only — these are required for authentication and session management and cannot be disabled without affecting your ability to use the service. We do not use advertising or tracking cookies. We do not use third-party analytics cookies.
Your data may be processed by our third-party providers in countries outside South Africa (including the United States, where Supabase and Stripe infrastructure is hosted). Where this occurs, we ensure appropriate safeguards are in place consistent with POPIA's requirements for cross-border transfers.
MyReportComments is not directed at children under 18. We do not knowingly collect personal information from individuals under 18. If you believe a minor has provided us with personal information, please contact us immediately.
We may update this Privacy Policy from time to time. Material changes will be notified by email to registered users at least 14 days before taking effect. The "last updated" date at the top of this page will always reflect the most recent version.
For any privacy-related queries, requests, or complaints, contact our Information Officer at privacy@myreportcomments.com.
To lodge a complaint with the South African Information Regulator: www.justice.gov.za/inforeg