Privacy Policy

This Privacy Policy describes how Honrly Inc. (“Honrly”, “we”, “our”, “us”) collects and processes personal information. Honrly respects your privacy and is committed to protecting it through our compliance with this Privacy Policy.

By using our site, a workspace, a public job post, an application, an assessment, or an offer letter, you acknowledge this Privacy Policy. If you do not agree to the collection and processing of information as described here, we cannot provide the services, and you should not use the site.

Honrly processes personal information on behalf of our customers when they run applicant tracking and recruitment on the product. Those customers act as the “data controllers” under the General Data Protection Regulation (Regulation (EU) 2016/679) (the “EU GDPR”), the UK GDPR and UK Data Protection Act 2018 (collectively, the “GDPR”), and as “businesses” under the California Consumer Privacy Act, as amended by the CPRA (“CCPA”). Honrly, in its role as “data processor” under the GDPR and as “service provider” under the CCPA, processes that hiring data solely on behalf of the customer and in accordance with their instructions.

For information about how your personal information is used by a Honrly customer, please refer to the privacy policy of the organization to which you submitted your application, or that invited you to an assessment or offer. You can also start a request with us at Your privacy requests; we will route candidate requests to the hiring company that collected the data.

This notice covers honrly.com: the marketing site, sign-in, company workspaces, careers pages, public job posts, applications, written and video assessments, and offer letters. Controller contact for Honrly itself: privacy[at]honrly.com. San Francisco, CA.

What personal information do we collect and how do we collect it?

Job candidates

When you use Honrly in connection with a job - applying, answering a written assessment, recording a video, or signing an offer - the information we collect may include:

• Name, email address, phone number, school, education dates, GPA, resume or CV, work authorization answers, sponsorship answers, cover-style application answers, and any other information you choose to send.
• Voluntary equal employment opportunity information a hiring company asks for, including gender, ethnicity, veteran status, and disability self-identification (Form CC-305 where that form is shown). Completing those questions is voluntary.
• Written assessment answers, video recordings and related files, transcripts or scores a customer turns on, and the invite token that ties your session to an application.
• Offer-letter content you are sent and your signature.
• Email we send on the hiring company’s behalf (invites, reminders, offers) and replies that pass through our mail provider.
• Metadata about how you use the Service: when you open a job, start or finish an assessment, and whether a session was submitted.
• Information related to the security and integrity of the Service, including IP address, approximate city, region, and country from the host, browser, device, operating system, language, timezone, and technical signals such as paste, autofill, and question-copy on a written assessment. Hiring teams can see this so they know an application or assessment is real. We do not score someone from their face, accent, or appearance.

Customers and people who hire

We collect information from potential customers when they write to us, ask about pricing, or request a conversation, and from customers when they create a workspace. This may include name, work email, password hash, company name, company slug, logo, about text, intro note or intro video, workspace role, billing or contracting details you send us, and how the product is used inside that workspace.

People who apply to work at Honrly

If you apply for a role at Honrly Inc. itself, the same kinds of candidate information above may be used to evaluate your application, run interviews or assessments, communicate with you, and meet legal obligations. In that case we are the controller.

Automatic data collection

As you use the site, we may collect information about your equipment and browsing, including pages you open, logs, error reports, the type of device or browser, operating software, language and regional settings, and IP address. We do not collect mobile advertising IDs, and we do not run advertising or social pixels. First-party cookies are described below.

Information we do not buy

We do not buy personal information from data brokers to enrich candidate profiles, and we do not scrape social networks to build a sourcing database. If a hiring company pastes a job description, resume text, or other content into the product, we process that content to run the features they asked for (for example, drafting questions or scoring an answer).

How do we use personal information?

To provide the Service

On a customer’s instructions, we may use personal information to:

• Help companies post and manage jobs
• Help companies collect and manage applications
• Send job-specific written and video assessments, and store the answers
• Score or summarize answers when those tools are on, and show a quote beside the score
• Help companies communicate with candidates, including invites, reminders, and offers
• Help analyze recruiting activity on that workspace
• Help detect, assess, and prevent fraud or integrity risk on applications and assessments
• Provide recording, transcription, or replay where those features are part of the product
• Provide customer support
• Keep you signed in, route you to the right company workspace, and secure the product

GDPR legal bases

• Contract: to create a workspace account, run the role you applied to, and show hiring teams the applications they asked us to host.
• Consent: optional cookies if we ever add them, camera or microphone access in the browser for a video assessment, and voluntary EEO questions.
• Legitimate interests: keeping sessions signed in, spotting duplicate or impossible submissions, securing the product, improving reliability, and sending transactional email. You may object where that right applies.
• Legal obligation: tax, accounting, and responding to a valid authority request.

To contact customers and people who asked to hear from us

If you write to hello@honrly.com or leave contact details for a conversation about the product, we may use your name, email, company, and message to reply, schedule a walkthrough, and send follow-ups about Honrly. We do not buy marketing lists. We do not send promotional email to candidates who only applied to a customer’s job. Workspace users receive transactional mail needed to run hiring (sign-in, invites they send, product notices). If we later send optional product news, we will give you a way to opt out.

We may aggregate and de-identify information so it no longer identifies a person, and use that for understanding how the product is used and for explaining the product. Aggregated data is not personal information.

To monitor and improve the site and the Service

Automatic information helps us keep the site up, understand which pages are used, fix errors, and recognize you when you return. We do not use it to advertise Honrly to you across other companies’ sites.

To process an application if you apply to Honrly

If you apply for a job at Honrly Inc., we use the information you submit to evaluate qualifications, manage recruitment, communicate with you, and comply with law.

Do we use cookies?

Yes. Cookies are small files a site places on your device so the site can recognize your browser. Unless you have set your browser to refuse cookies, our system will issue cookies when you visit. These cookies are strictly necessary for sign-in and workspace layout. The site does not run without them. Optional analytics and marketing cookies are off and unused today.

Change optional cookies any time from Cookie settings. We honor Global Privacy Control (GPC) as an opt-out of sale or share. See also Do Not Sell or Share.

How long do we retain your personal information?

Retention depends on the type of data and the purpose. We keep personal information as long as needed to fulfill the purposes in this notice, unless a longer period is required or permitted by law.

• Session cookies expire in 7 days.
• Workspace accounts stay until the company removes the person or we complete a verified deletion request.
• Applications, assessments, video, offers, and related files stay until the hiring company deletes the role or the record, or until we complete a verified deletion request they have instructed us to fulfill.
• Privacy request records are kept as needed to show we received and handled the request.

Customers control deletion of hiring data in their workspace. If you want candidate data deleted, start with the company you applied to, or use Your privacy requests.

How can we disclose or share your information?

We may share information about you as follows:

• The hiring company. People in the workspace that owns the role see applications, assessments, scores, integrity notes, and offers for that company. That company is the controller of that data.
• Service providers (subprocessors). Vendors that host the product, store files, send email, or run model features we offer, solely to provide that assistance. They are not permitted to use the information for their own advertising. The current list is below.
• Professional advisors. Lawyers, auditors, bankers, or insurers, where necessary for the services they provide to us.
• Merger or acquisition. In connection with a proposed or actual merger, sale, or transfer of all or part of our business. We will require the successor to honor this notice or give you notice of a new policy.
• Security and compelled disclosure. To comply with law or legal process, or to protect the rights, property, or safety of Honrly, our customers, or others.
• Consent. For any other purpose we disclose to you and for which you consent.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not give it to third parties for their own direct marketing.

We use these subprocessors:

When a customer uses AI features (for example, drafting questions from a job description or scoring a written answer), the relevant text is sent to the model provider listed above to return a result for that workspace. We do not sell that content. Ask us at privacy[at]honrly.com if you need the current rule on whether providers may train on that traffic.

How do we keep your personal information secure?

We have implemented measures designed to protect personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. Passwords are hashed. Session cookies are httpOnly and, in production, Secure. Hiring data is scoped to the company workspace it belongs to. Access to a workspace is authenticated. Public assessment links are meant for the invited candidate.

Information is stored on servers in the United States, hosted by providers that commit to industry security practices (see subprocessors). More about how we think about this is on Security.

The safety of your information also depends on you. If you have credentials for a workspace, you are responsible for keeping them to yourself. No method of transmission or storage is perfectly secure. Tell us at privacy[at]honrly.com if you think something went wrong.

How can you access, correct, or delete your personal information?

You may have rights to request access, correction, updates, or deletion. We will evaluate and respond in line with our obligations, including verifying your identity. Submit a request at Your privacy requests or email privacy[at]honrly.com.

The Service is built so customers can run their own hiring. Those customers are the controllers (GDPR) or businesses (CCPA) of candidate applications, assessments, and offers. Honrly is the processor / service provider. We do not independently decide how that hiring data is used, and we do not decide a candidate’s rights on the customer’s behalf.

For access, correction, or deletion of information collected by or for a Honrly customer, we recommend you contact the company you applied to. They can instruct us to act. If you send the request to us, we will verify the email and work with that company. Deletion of candidate records is not instant.

If you are signed in to a workspace, you can download a copy of your workspace account from the same request page. That download is your user record and memberships, not every candidate file in the company.

We respond within one month under GDPR, or 45 days under CCPA, and may extend once if the request is complex. Authorized agents may email privacy[at]honrly.com with proof they can act for the person.

International data transfers

Honrly Inc. is a U.S. company. If you are outside the United States and you give us personal information, that information may be transferred to and processed in the United States, where privacy law may differ from the law in your country. Our subprocessors listed above are also in the United States.

Where EU, UK, or Swiss law requires a transfer tool, we rely on the Standard Contractual Clauses (or equivalent) of the relevant processor, plus the security measures in this product. If you want a copy of the clauses that apply, write to privacy[at]honrly.com.

EU, UK, and Swiss residents

If you are in the European Union, the United Kingdom, or Switzerland, you have rights under the EU GDPR, the UK GDPR, and/or the Swiss Federal Act on Data Protection, as applicable. Those rights include:

• The right of access to your personal data
• The right to rectify personal data that is incorrect or incomplete
• The right to erasure (“right to be forgotten”) if certain grounds are met
• The right to withdraw consent at any time, if processing is based on consent
• The right to object to processing based on legitimate interests
• The right to object to processing for direct marketing
• The right to restrict processing in the cases the law provides
• The right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller (data portability)

Withdrawal of consent does not affect processing already carried out. We will not share your personal data with a third party for that third party’s marketing unless you have specifically agreed. Exercise these rights at Your privacy requests or via privacy[at]honrly.com. We may need to confirm your identity. In limited cases the law allows a reasonable fee for access.

If you believe our processing is inconsistent with your rights and we have not addressed your concern, you may lodge a complaint with the supervisory authority in your country.

California privacy rights (CCPA / CPRA)

If you are a California resident, you have rights under the CCPA. These include:

• Right to know. Request the categories and specific pieces of personal information we have collected about you, the purposes, the categories of sources, and the categories of third parties to whom we disclose it.
• Right to delete. Request deletion, subject to the exceptions the law allows (for example, security, legal holds, or completing a transaction).
• Right to correct. Request correction of inaccurate personal information we maintain.
• Right to opt out of sale or sharing. We do not sell personal information and we do not share it for cross-context behavioral advertising. You can still record an opt-out at Do Not Sell or Share. We treat a GPC signal as a valid opt-out.
• Right to limit use of sensitive personal information. We do not use sensitive personal information to infer characteristics beyond running hiring (for example, voluntary EEO answers are for the customer’s compliance process, not for ads).
• Right to non-discrimination. We will not deny the Service, charge a different price, or provide a different quality because you exercised these rights.

Submit a request at Your privacy requests. We will verify your identity before we act.

Categories collected (last 12 months)

Depending on how you use the site, we may collect: identifiers (name, email, phone, IP, account id); customer records (resume, education, work authorization); protected classification information you volunteer (gender, race/ethnicity, veteran, disability); internet or electronic activity (logs, pages, integrity signals); geolocation at city / region / country level; audio or visual content you submit (video assessments, intro videos); professional or employment information; education information; and inferences a hiring team draws from answers (scores, traits, notes). We collect this from you directly, from your device, and from the hiring company that invited you. We disclose it to that hiring company and to the subprocessors above. We do not sell it. We do not share it for cross-context behavioral advertising.

We do not have actual knowledge that we sell or share the personal information of consumers under 16. We do not use or disclose sensitive personal information for purposes other than those permitted by CCPA regulations § 7027(m).

Children

Honrly is not directed at children under 16. Hiring companies must not invite minors unless they have a lawful basis and any required guardian consent. Contact us if you believe a child used the product so we can delete the account.

Changes to this Privacy Policy

If we make changes, we will post them on this page and update the date above. Changes apply to information collected after the new date. If a change is material, we will note it here. Continued use after a posted change is acceptance of the updated notice.

Contacting us

Questions about this Privacy Policy, or requests under GDPR or CCPA, can be sent by email: privacy[at]honrly.com (privacy@honrly.com).

Or via our mailing address:
Honrly Inc., San Francisco, CA

General product questions can still go to hello@honrly.com. Privacy requests should use privacy[at]honrly.com or Your privacy requests.