hope-events

Files

T

joshuaandClaude Opus 5.5 a1ecbb9617 POPIA toolkit part 3: retention, breach register, readiness

- Retention policies (Admin -> Privacy -> Retention) applied by a nightly
  `retention` job: inactive accounts anonymised after 5 years with a
  30-day warning (on by default; never staff roles or people with an
  upcoming registration), form answers, login history, payer details in
  payment notifications, audit/access logs
- User.lastLoginAt (set on login, backfilled) and inactivityWarnedAt
- Breach register (SecurityBreach) with drafts for the people affected
  and the Information Regulator
- Readiness checklist with a score
- Children's/medical flag in the access log; {retention} placeholder in
  the privacy notice
- Unit tests (retention.test.js), e2e (privacy-retention.spec.ts); docs

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012mt6TCv85T9VKRq3cV7rXq

2026-10-23 20:25:58 +02:00

support

POPIA toolkit part 3: retention, breach register, readiness

2026-10-23 20:25:58 +02:00

fixtures.ts

POPIA toolkit part 3: retention, breach register, readiness

2026-10-23 20:25:58 +02:00

payfast.spec.ts

Payment status checks for notifications that never arrive

2026-10-23 15:28:28 +02:00

payments.spec.ts

Hide "Pay online" when no provider is on or the amount is under R15