Privacy

Last updated 23 October 2026.

This explains what Honde (the website and the browser extension) collects about you, why, who else handles it, where it's kept, for how long, and your rights under South Africa's Protection of Personal Information Act (POPIA).

Who is responsible

Honde is run by Mmogo Media (Pty) Ltd, 19 Milcliff Road, Paulshof, Sandton, 2191, Gauteng, South Africa.

Information officer: Tawanda Makunike, support@honde.co.za. Questions about your data: support@honde.co.za.

What we collect, and why

Your account: your name, email address and password, to sign you in and send you account emails.
What you give us to find and apply for jobs: your CV, your profile, your settings and job preferences, and the experience you add. We use them to find jobs, score how well you match, and write and fill in your applications.
What Honde makes for you: your jobs and matches, notes, drafts, tailored CVs, cover letters and other application files.
Which jobs you've seen and opened: we record when a job appears on your screen and when you open it, to sort your list and pick what to email you. It's only visible to you, and deleted with your account.
Which emails you open links in: each job in our digest emails (up to three a day) has a personal link. When you use it we note which email, which job and where in the email it was, to see which jobs and positions help people. We don't put pixels in emails, so we don't know whether you opened one. It's deleted with your account, and you can turn the digest off in Settings.
Welcome emails: once you have activated your account and uploaded a CV, we rate your first 20 jobs against it and email you the scores. If you sign up and don't activate, or activate and don't upload a CV, we send one reminder email. We never send these again.
Your Z83 answers, only if you fill them in and agree: your ID or passport number and the Z83's declarations. These include special personal information under POPIA: criminal record, race and disability. We hold them for one reason: South African government posts require a complete Z83, and Honde fills in yours for each government job you apply for. They're stored encrypted, are never sent to the AI, and are used only to fill your own Z83 forms. The legal basis for holding them: your explicit consent (POPIA section 27(1)(a)), which you give with a checkbox before saving.
Billing, if you pay for a plan: your email address, plan and amount, handled by Paystack.

Who at Honde can see your CV

Only the owner account of Honde can open the CV file you uploaded, and only to help with a problem with your account. Each time they open it, it is recorded in a log. Nobody else at Honde has access to your CV.

The browser extension

On the job sites it is built for (LinkedIn, PNet, CareerJunction, Careers24, Workday, Greenhouse, Lever and a few others), its side panel appears on a job and sends Honde only the page's address, to check whether Honde already has that job. On any other site it does nothing until you press its icon. Everything else waits for a click:

Add this job and See your match send the page's address, its title and up to 20,000 characters of its visible text. A job added this way can be shared: if Honde's checks find nothing wrong with it, and Honde's own copy of the page shows the same job title, the job's title, company, place, description and address join the jobs everyone is matched against. Your CV, your score and anything about you are never shared.
Fill sends the form's field labels, types and options, not anything typed into the form.
Add to my CV sends the text you write.
Autofill information (when Honde offers it) saves the details you type there, such as your phone number and work authorisation, to your Honde account so forms can be filled. Send feedback sends the note you write, with the address and path (never the query) of the page you were on, to the people who run Honde.
Copy cover letter fetches the letter Honde wrote for that job and puts it on your clipboard.
Noticing when you apply: once you've matched, filled or copied a letter for a job in a browser tab, the extension notices when you press submit on that page's application form and tells Honde which job, so it can mark it Applied. It sends no form contents or answers, only that a submit happened, and you can undo it from the extension. It never submits for you.

Honde sends back the answers and your CV and cover-letter files, and the extension types them into the form. It never submits: you check the form and press submit yourself.

Who else processes it

Microsoft Azure hosts Honde in South Africa North.
Anthropic's Claude models, through Microsoft Azure AI Foundry, in the United States (East US 2): the AI that scores matches and writes applications. Your CV and job text are sent there.
OpenAI's realtime voice model, through Microsoft Azure AI Foundry, in the United States (East US 2): only when you start a live practice interview. Your voice streams there while the call lasts so the interviewer can hear and answer you, with your CV and the job advert; Honde keeps the written transcript for your feedback, not the audio. Your camera, if you turn it on, is shown only to you and never sent.
Microsoft Azure AI embeddings, in South Africa North (and East US 2 when that one is busy): to find the jobs closest to your CV, the text of your CV is turned into a list of numbers that can be compared with job postings. The numbers are kept with your settings and deleted with your account.
TypeSafe checks job fit and scams. It receives your CV text and the job's text. TypeSafe processes this in the United States.
Paystack handles payments: your email address, plan and amount.
Pairly, our customer records and the help chat: your name and email address when you sign up and activate your account, and what you write in the chat if you use it.
Google Analytics, only if you accept it in the cookie banner, counts visits to the website: the pages you open, roughly where you are, and your browser and device, and the site that sent you (for example a search engine or an AI assistant such as ChatGPT). It doesn't receive your CV, jobs or applications. Google processes this in the United States.
Meta (the Meta Pixel), only if you accept it in the cookie banner, tells us which of our Facebook and Instagram ads bring people to Honde. It runs only on our public pages (the home, sign-in, terms and privacy pages) and only while you're signed out, so it never sees the jobs, applications or plan inside your account. It gets the public page you open, your browser and device, and Meta's cookie. If you use Facebook or Instagram, Meta can link the visit to your account and use it for its own ads. Meta processes this in Ireland and the United States.
Microsoft Azure Communication Services, in Africa, sends account emails, such as activation and password resets, and reminders before a job you're applying for closes or your paid plan ends (you can turn these off in Settings).
Job-search services (Adzuna, JSearch, Apify) receive only search terms, never your personal details.
AI apps and agents you connect (for example Claude or ChatGPT), only if you allow them in Honde: they receive what they ask Honde for on your behalf, such as your jobs, tenders, matches, applications and profile, and are then handled under that app's own privacy policy. They can't submit applications, change your account or see your Z83 answers. Disconnect them any time in Settings → Connections.
Employers get your details only through their application forms, and only when you press submit.

Every AI request carries an anonymous code, a scrambled form of your account number (never your name or email), so that if a provider's misuse checks flag something it can be traced to one account. Microsoft Azure may keep the text sent to its AI models for up to 30 days to check for misuse.

We don't sell your information, and there are no ads inside Honde. We advertise Honde on Facebook and Instagram. The browser extension has no analytics or trackers.

Where it's stored

In Microsoft Azure's South Africa North region: your account, jobs, notes and drafts in a database, where each person's records are walled off from everyone else's; your CV, profile, settings and application files in Azure file storage.

Sending information outside South Africa. To score matches and write applications, your CV and job text are processed by AI models in the United States (Anthropic's Claude through Azure, and TypeSafe). This is a transfer of personal information across the border (POPIA section 72). The basis for it: your consent, and because the transfer is needed to provide the service you signed up for (POPIA section 72(1)(b) and (c)).

How long we keep it

Your account and everything in it: until you delete your account.
Your Z83 answers and the Z83 forms made from them: until you choose Remove my Z83 answers on the Documents page, or delete your account. Removing them withdraws your consent.
Job listings (market data with no personal information): kept indefinitely.
Server logs: rotated automatically and overwritten after a while. They record user ids, not email addresses.

Deleting your account

In Settings, choose Delete my account. That removes your account, CV, files, applications, settings and your Z83 answers. Your entry in our customer records (Pairly) is archived. You can also ask us by email: support@honde.co.za.

Your rights

Under POPIA you can:

ask what personal information we hold about you;
have it corrected;
have it deleted;
object to how we use it.

Contact our information officer (above). If you're not satisfied, you can complain to the Information Regulator: inforegulator.org.za.

Cookies

Ours: tm_session, which keeps you signed in. It can't be read by scripts on the page, is sent only over secure connections, lasts 30 days, and is removed when you sign out.

If you accept in the cookie banner, Google Analytics sets its own cookies (_ga and _ga_…) to tell visits apart. They last up to two years. If you say no, Google Analytics isn't loaded at all. The Meta Pixel sets _fbp, which lasts three months, and is likewise not loaded if you say no. Your choice is kept in this browser and covers both.

What we collect, and why

Your account: your name, email address and password, to sign you in and send you account emails.

What you give us to find and apply for jobs: your CV, your profile, your settings and job preferences, and the experience you add. We use them to find jobs, score how well you match, and write and fill in your applications.

What Honde makes for you: your jobs and matches, notes, drafts, tailored CVs, cover letters and other application files.

Which jobs you've seen and opened: we record when a job appears on your screen and when you open it, to sort your list and pick what to email you. It's only visible to you, and deleted with your account.

Which emails you open links in: each job in our digest emails (up to three a day) has a personal link. When you use it we note which email, which job and where in the email it was, to see which jobs and positions help people. We don't put pixels in emails, so we don't know whether you opened one. It's deleted with your account, and you can turn the digest off in Settings.

Welcome emails: once you have activated your account and uploaded a CV, we rate your first 20 jobs against it and email you the scores. If you sign up and don't activate, or activate and don't upload a CV, we send one reminder email. We never send these again.

Your Z83 answers, only if you fill them in and agree: your ID or passport number and the Z83's declarations. These include special personal information under POPIA: criminal record, race and disability. We hold them for one reason: South African government posts require a complete Z83, and Honde fills in yours for each government job you apply for. They're stored encrypted, are never sent to the AI, and are used only to fill your own Z83 forms. The legal basis for holding them: your explicit consent (POPIA section 27(1)(a)), which you give with a checkbox before saving.

Billing, if you pay for a plan: your email address, plan and amount, handled by Paystack.

The browser extension

Add this job and See your match send the page's address, its title and up to 20,000 characters of its visible text. A job added this way can be shared: if Honde's checks find nothing wrong with it, and Honde's own copy of the page shows the same job title, the job's title, company, place, description and address join the jobs everyone is matched against. Your CV, your score and anything about you are never shared.

Fill sends the form's field labels, types and options, not anything typed into the form.

Add to my CV sends the text you write.

Autofill information (when Honde offers it) saves the details you type there, such as your phone number and work authorisation, to your Honde account so forms can be filled. Send feedback sends the note you write, with the address and path (never the query) of the page you were on, to the people who run Honde.

Copy cover letter fetches the letter Honde wrote for that job and puts it on your clipboard.

Noticing when you apply: once you've matched, filled or copied a letter for a job in a browser tab, the extension notices when you press submit on that page's application form and tells Honde which job, so it can mark it Applied. It sends no form contents or answers, only that a submit happened, and you can undo it from the extension. It never submits for you.

Honde sends back the answers and your CV and cover-letter files, and the extension types them into the form. It never submits: you check the form and press submit yourself.

Who else processes it

Microsoft Azure hosts Honde in South Africa North.

Anthropic's Claude models, through Microsoft Azure AI Foundry, in the United States (East US 2): the AI that scores matches and writes applications. Your CV and job text are sent there.

OpenAI's realtime voice model, through Microsoft Azure AI Foundry, in the United States (East US 2): only when you start a live practice interview. Your voice streams there while the call lasts so the interviewer can hear and answer you, with your CV and the job advert; Honde keeps the written transcript for your feedback, not the audio. Your camera, if you turn it on, is shown only to you and never sent.

Microsoft Azure AI embeddings, in South Africa North (and East US 2 when that one is busy): to find the jobs closest to your CV, the text of your CV is turned into a list of numbers that can be compared with job postings. The numbers are kept with your settings and deleted with your account.

TypeSafe checks job fit and scams. It receives your CV text and the job's text. TypeSafe processes this in the United States.

Paystack handles payments: your email address, plan and amount.

Pairly, our customer records and the help chat: your name and email address when you sign up and activate your account, and what you write in the chat if you use it.

Google Analytics, only if you accept it in the cookie banner, counts visits to the website: the pages you open, roughly where you are, and your browser and device, and the site that sent you (for example a search engine or an AI assistant such as ChatGPT). It doesn't receive your CV, jobs or applications. Google processes this in the United States.

Meta (the Meta Pixel), only if you accept it in the cookie banner, tells us which of our Facebook and Instagram ads bring people to Honde. It runs only on our public pages (the home, sign-in, terms and privacy pages) and only while you're signed out, so it never sees the jobs, applications or plan inside your account. It gets the public page you open, your browser and device, and Meta's cookie. If you use Facebook or Instagram, Meta can link the visit to your account and use it for its own ads. Meta processes this in Ireland and the United States.

Microsoft Azure Communication Services, in Africa, sends account emails, such as activation and password resets, and reminders before a job you're applying for closes or your paid plan ends (you can turn these off in Settings).

Job-search services (Adzuna, JSearch, Apify) receive only search terms, never your personal details.

AI apps and agents you connect (for example Claude or ChatGPT), only if you allow them in Honde: they receive what they ask Honde for on your behalf, such as your jobs, tenders, matches, applications and profile, and are then handled under that app's own privacy policy. They can't submit applications, change your account or see your Z83 answers. Disconnect them any time in Settings → Connections.

Employers get your details only through their application forms, and only when you press submit.

We don't sell your information, and there are no ads inside Honde. We advertise Honde on Facebook and Instagram. The browser extension has no analytics or trackers.

Where it's stored

How long we keep it

Your account and everything in it: until you delete your account.

Your Z83 answers and the Z83 forms made from them: until you choose Remove my Z83 answers on the Documents page, or delete your account. Removing them withdraws your consent.

Job listings (market data with no personal information): kept indefinitely.

Server logs: rotated automatically and overwritten after a while. They record user ids, not email addresses.

Ours: tm_session, which keeps you signed in. It can't be read by scripts on the page, is sent only over secure connections, lasts 30 days, and is removed when you sign out.