Privacy Policy

The plain version: your resume is yours. HoneCV uses it to do one job well (turn what you already have into a clean, ATS-safe document you can edit, tailor, and download), and we're careful with everything around that. Using HoneCV requires an account, so your resumes and profile are saved to your account and follow you between devices. We don't sell your data and we don't run advertising trackers. A few things (sending you occasional product email, or, if you ask us to, matching you with jobs or referring you to employers) happen only if you opt in, and every one of those is off by default. The detail is below, and we've tried to keep it honest about what we do.

The short version

• Your resume is yours. You keep all rights to what you upload and create. We use it to run the service for you (structure it, let you edit and tailor it, and let you download it) and nothing more, except the opt-in extras you switch on yourself.
• An account is required. HoneCV is a signed-in product: you create an account (Google sign-in or an emailed magic link) to use it. Your resumes and profile are stored in your account so they're there when you come back.
• The AI step uses a third party. To structure and tailor your resume, its text is sent to a third-party AI provider that runs the model. That provider is an independent company with its own data practices, which we don't control, so we don't make promises on their behalf.
• No selling and no ad tracking. Ever.
• Optional extras are opt-in. Product/marketing email, inbound job matches, and employer referrals are each a separate choice, off by default, and you can change them anytime in your account.

What we collect

We try to collect as little as we can to run the service. Here's the full list.

• Your account details. To sign you in we store your email address and the sign-in method you use (Google, or an emailed magic link). We don't store a password; sign-in is handled by our authentication provider.
• Your resume content. The PDF you upload or the text you paste, plus the structured and tailored versions we build from it so you can edit, manage, and download them. These are saved to your account.
• Your communication and matching preferences. Whether you've opted in to product/marketing email, to inbound job matches, and to employer referrals, each recorded as a separate, off-by-default choice.
• Product analytics. Privacy-respecting analytics about how the product is used (which steps succeed or error, which pages are visited) and error/diagnostic reports that help us fix problems. This comes in two forms. In your browser, in the EU, UK, EEA, Switzerland, South Korea, India, and Canada, no analytics runs until you accept, and nothing is written to your device first; elsewhere it starts by default on both this website and the app, and you can switch it off at any time. We treat a Global Privacy Control signal as a decline, and where we cannot determine your country we ask first rather than assume. Separately, on the app, we keep a minimal, de-identified server-side measurement of which steps succeed or error; because it records no personal profile and no name, it runs regardless of your region or choice. Neither is ever tied to advertising profiles.
• Technical basics. The ordinary information a web server sees when you visit (such as your browser type and a coarse, approximate location derived from your IP address), used to serve the site and keep it secure.

How we use it

We use your resume and profile to provide the service to you: to structure, format, tailor, store, and let you edit and download your documents, and to keep your work available across your devices. We use your preferences to honor the communication and matching choices you've made. We use analytics and technical data, where analytics is running for you (see "Cookies and analytics" below), to keep the service running, fix problems, and make it better.

A few uses happen only if you opt in, and each is a separate switch that's off by default:

• Product and marketing email: occasional email about HoneCV features and updates, only if you opt in.
• Job matches: if you opt in, we may use your profile to surface relevant job opportunities to you.
• Employer referrals: if you opt in, we may share relevant parts of your profile with employers or recruiters to refer you for opportunities. Because this shares your personal information with third parties, it is strictly opt-in, off by default, and you can turn it off at any time.

We do not use your resume or data to build advertising profiles, and we do not train our own AI models on it. (The third-party AI step is described below.)

The AI step

To turn a messy document into a structured one, and to adapt it to a job if you use tailoring, the text of your resume is sent to a third-party AI provider that runs the language model, which we reach through an AI routing service. These are independent companies with their own data-handling policies, which we don't control, so we can't guarantee on their behalf how they retain or train on the text that passes through. We send only the resume text needed to do the job, and only for the step you asked for.

Where your resume lives

Because HoneCV is a signed-in product, your resumes and profile are stored in your account on our cloud database so they're there when you return and follow you between devices. Access is scoped to your account, so other users can't reach your content. To do the AI work, the relevant text is also sent to the third-party AI provider described above for that single step. You can edit or delete your resumes from within the product, and deleting your account removes your stored content (see below).

How long we keep it and how to delete it

• Your resumes and profile are kept in your account for as long as your account is active, so your work is there when you come back. You can delete individual resumes at any time in the product, and you can delete your whole account (which removes your stored resume content and profile) by emailing us at privacy@honecv.com; we'll action the request and confirm when it's done.
• Your preferences and consent records are kept while your account is active so we can honor your choices, and we keep a minimal record of consent as required to show a choice was made.
• Analytics and technical logs are kept only as long as we reasonably need them to run and secure the service, then they age out.

Third parties and subprocessors

We rely on a small number of vendors to run HoneCV, and we only share what each one needs to do its job.

• AI provider (via a routing service). A third-party AI provider, accessed via a routing service, runs the model that structures and tailors your resume, an independent provider with its own data policies we don't control (see "The AI step" above).
• Authentication and data storage: Supabase. We use Supabase to authenticate your account and to store your account details, resumes, profile, and preferences.
• Product analytics and error tracking: PostHog. We use PostHog for privacy-respecting product analytics and error/diagnostic reporting, run under the consent rules described above. No advertising trackers.
• Hosting and infrastructure: Vercel. Vercel serves the website and runs the code that processes your upload and renders your download.
• Payments: Creem. If you subscribe to a paid plan, Creem acts as our payment processor and merchant of record, handling billing and applicable taxes on its own hosted checkout page. Your card details go to Creem, never to our servers.

Cookies and analytics

We keep this minimal. We use the cookies and local storage needed to sign you in and run the product. For the privacy-respecting analytics described above: in the EU, UK, EEA, Switzerland, South Korea, India, and Canada, no analytics runs in your browser until you accept, on this website and in the app alike, and nothing is written to your device before you choose. Elsewhere it starts by default on both, and you can decline at any time; until you do, the analytics may set its own storage in your browser. Pages you can open without an account, such as a resume someone has shared with you, are different: they run no in-browser analytics for anyone, so there is no banner, and nothing in your browser for a choice (or a Global Privacy Control signal) to switch off. We do still count how often a shared page is opened, but server-side and de-identified: a plain tally that records no personal profile and no name, and nothing that identifies you as the visitor. A location we cannot determine is treated as though you had not yet accepted. We do not use third-party advertising cookies, and we don't sell or share your activity with ad networks.

When you do accept or decline, we remember that choice in a single first-party cookie shared by this website and the app, so you only have to tell us once and a decline is honored on both. No consent decision is recorded until you make one. If you never touch the banner, no consent cookie is set and each side applies the default for your location described above. On this website, where that default is on, we also remember your country for the rest of your browsing session so we aren't re-checking it on every page you open; the app doesn't need to, because it can read your approximate location from the request itself.

Your rights and choices

You're in control of your resume and your account: you can edit, export, or delete your resumes, change your communication and matching preferences, and delete your account whenever you like. Beyond that, depending on where you live, you may have additional legal rights, and we'll honor them.

• If you're in the EU, UK, or a similar region: you generally have the right to access the personal data we hold about you, to correct or delete it, to object to or restrict certain processing, to withdraw consent for anything you opted into (such as marketing email or referrals) without affecting the service, and to receive a copy in a portable form. You can also complain to your local data protection authority.
• If you're in California: you generally have the right to know what personal information we collect and how it's used, to request access or deletion, and to not be discriminated against for exercising those rights. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

The fastest way to exercise most of these rights is directly in your account. For anything else, email us at the address below and we'll help.

International users and data transfers

HoneCV is operated from the Philippines, and the vendors we use to run it (including our authentication/storage, analytics, payment, and AI providers) may process data in countries other than your own. Where personal data is transferred out of the EU, UK, or a similar region, we rely on the European Commission's Standard Contractual Clauses (SCCs) as our transfer mechanism, together with our vendors' own safeguards.

For users in the EU, UK, or a similar region, our lawful bases for processing are:

• Performance of our contract with you, for the core service: processing, structuring, tailoring, storing, and letting you edit and download your resumes and profile.
• Your consent, for product/marketing email, inbound job matches, and employer referrals, and for product analytics where your region requires consent first; you can withdraw any of these at any time without affecting the core service.
• Our legitimate interests, for keeping the service secure; for the app's minimal, de-identified server-side measurement of which steps succeed or error, which records no personal profile and so runs regardless of region or consent; and, in regions where consent isn't required first, for the in-browser product analytics and error tracking described above (which you can switch off at any time).

Children's privacy

HoneCV is meant for adults building a resume. The service is intended for people who are 18 or older (matching our Terms of Service); it isn't directed at children, and we don't knowingly collect personal information from anyone under 18. If you believe someone underage has provided us information, contact us and we'll delete it.

Security

We take reasonable, practical measures to protect your information: for example, serving the site over encrypted connections, scoping each account's data to that account, and limiting what we share with vendors to what each one needs. No method of transmission or storage is ever perfectly secure, so we can't promise absolute security, but we work to keep the amount of data at risk small by design.

What we never do

• Sell or rent your personal information.
• Train our own AI models on your resume.
• Share your profile with employers, or send you marketing email, unless you've opted in.
• Watermark your resume, or lock your data behind a surprise charge.
• Charge you without making the price clear up front, and never with a silent auto-renewal.
• Run third-party advertising trackers or build ad profiles from your activity.

Changes to this policy

As HoneCV grows, we'll update this policy. If a change is meaningful, we'll update the date at the top and, where appropriate, tell you directly rather than burying it. The current version always lives on this page.

Contact

HoneCV is operated by Clingier Media, based in the Philippines, which is the controller responsible for the personal data described in this policy. Questions about your data, or want to exercise a right above? Email privacy@honecv.com and we'll get back to you.