Privacy
Last updated 19 October 2026.
This explains what Honde (the website and the browser extension) collects about you, why, who else handles it, where it's kept, for how long, and your rights under South Africa's Protection of Personal Information Act (POPIA).
Who is responsible
Honde is run by TODO: the operator's legal name and address.
Information officer: TODO: name and contact details. Questions about your data: TODO: support email.
What we collect, and why
- Your account: your name, email address and password, to sign you in and send you account emails.
- What you give us to find and apply for jobs: your CV, your profile, your settings and job preferences, and the experience you add. We use them to find jobs, score how well you match, and write and fill in your applications.
- What Honde makes for you: your jobs and matches, notes, drafts, tailored CVs, cover letters and other application files.
- Which jobs you've seen and opened: we record when a job appears on your screen and when you open it, to sort your list and pick what to email you. It's only visible to you, and deleted with your account.
- Your mailbox, only if you connect one: read-only, to pick up job-alert emails. The mailbox password is stored encrypted.
- Your Z83 answers, only if you fill them in and agree: your ID or passport number and the Z83's declarations. These include special personal information under POPIA: criminal record, race and disability. We hold them for one reason: South African government posts require a complete Z83, and Honde fills in yours for each government job you apply for. They're stored encrypted, are never sent to the AI, and are used only to fill your own Z83 forms. The legal basis for holding them: your consent, which you give with a checkbox before saving TODO: confirm the basis under POPIA section 27.
- Billing, if you pay for a plan: your email address, plan and amount, handled by Paystack.
The browser extension
It does nothing until you click it. Then:
- Match sends the page's address, its title and up to 20,000 characters of its visible text.
- Fill sends the form's field labels, types and options, not anything typed into the form.
- Add to my CV sends the text you write.
Honde sends back the answers and your CV and cover-letter files, and the extension types them into the form. It never submits: you check the form and press submit yourself.
Who else processes it
- Microsoft Azure hosts Honde in South Africa North.
- Anthropic's Claude models, through Microsoft Azure AI Foundry, in the United States (East US 2): the AI that scores matches and writes applications. Your CV and job text are sent there.
- TypeSafe checks job fit and scams. It receives your CV text and the job's text. Location: TODO: where TypeSafe processes data.
- Paystack handles payments: your email address, plan and amount.
- Pairly, our customer records: your name and email address when you sign up and activate your account.
- Google Analytics, only if you accept it in the cookie banner, counts visits to the website: the pages you open, roughly where you are, and your browser and device. It doesn't receive your CV, jobs or applications. Google processes this in the United States.
- Meta (the Meta Pixel), only if you accept it in the cookie banner, tells us which of our Facebook and Instagram ads bring people to Honde. It runs only on our public pages (the home, sign-in, terms and privacy pages) and only while you're signed out, so it never sees the jobs, applications or plan inside your account. It gets the public page you open, your browser and device, and Meta's cookie. If you use Facebook or Instagram, Meta can link the visit to your account and use it for its own ads. Meta processes this in Ireland and the United States.
- Maileroo sends account emails, such as activation and password resets, and reminders before a job you're applying for closes or your paid plan ends (you can turn these off in Settings).
- Job-search services (Adzuna, JSearch, Apify) receive only search terms, never your personal details.
- Employers get your details only through their application forms, and only when you press submit.
We don't sell your information, and there are no ads inside Honde. We advertise Honde on Facebook and Instagram. The browser extension has no analytics or trackers.
Where it's stored
In Microsoft Azure's South Africa North region: your account, jobs, notes and drafts in a database, where each person's records are walled off from everyone else's; your CV, profile, settings and application files in Azure file storage.
Sending information outside South Africa. To score matches and write applications, your CV and job text are processed by AI models in the United States. This is a transfer of personal information across the border (POPIA section 72). The basis for it: TODO: the legal basis for the transfer.
How long we keep it
- Your account and everything in it: until you delete your account.
- Your Z83 answers and the Z83 forms made from them: until you choose Remove my Z83 answers on the Documents page, or delete your account. Removing them withdraws your consent.
- Job listings (market data with no personal information): kept indefinitely.
- Server logs: rotated automatically and overwritten after a while. They record user ids, not email addresses.
Deleting your account
In Settings, choose Delete my account. That removes your account, CV, files, applications, mailbox settings and your Z83 answers. Your entry in our customer records (Pairly) is archived. You can also ask us by email: TODO: support email.
Your rights
Under POPIA you can:
- ask what personal information we hold about you;
- have it corrected;
- have it deleted;
- object to how we use it.
Contact our information officer (above). If you're not satisfied, you can complain to the Information Regulator: inforegulator.org.za.
Cookies
Ours: tm_session, which keeps you signed in. It can't be read by scripts on the page, is sent only over secure connections, lasts 30 days, and is removed when you sign out.
If you accept in the cookie banner, Google Analytics sets its own cookies (_ga and _ga_…) to tell visits apart. They last up to two years. If you say no, Google Analytics isn't loaded at all. The Meta Pixel sets _fbp, which lasts three months, and is likewise not loaded if you say no. Your choice is kept in this browser and covers both.