Privacy Policy

Information you give us

• Account details: your name, email address, and password. Passwords are stored as salted hashes by our authentication provider; we never see them in plain text.
• Workspace details: workspace name, a logo if you upload one, and the email addresses of teammates you invite.
• Websites you scan: the URLs you submit, including any you enter on our homepage before you have an account.
• Billing details: payments are handled by Stripe. We receive your Stripe customer ID, what you bought, and your subscription status. We never receive or store your full card number.
• Messages: what you send us by email, and your email address if you subscribe to our newsletter.

Information we create when we scan a page

To audit a page, we load it in a browser the way a visitor would, capture desktop and mobile screenshots, and read its public text, structure, and metadata. We store the resulting report, scores, findings, and a thumbnail. If a page you scan shows other people’s personal information, such as names in testimonials, that information may appear in the screenshot or analysis. Only scan pages you’re comfortable having analyzed this way.

Information collected automatically

• Log data: our hosting and database providers record IP addresses, browser type, and request details to run and secure the Service.
• Cookies and similar technologies: see Cookies and tracking.

• To provide the Service: run scans, generate reports and fix prompts, keep your projects and history, and let your team collaborate.
• To process payments, add credits, and manage subscriptions.
• To prevent abuse, for example limiting free scans to one per website and per workspace.
• To send service emails, such as team invitations, password resets, and receipts.
• To send product news and marketing emails. You can unsubscribe at any time using the link in any email.
• To measure how the site is used and how our ads perform, with your consent where the law requires it.
• To improve the Service, fix problems, and comply with legal obligations.

Reports are generated with AI models provided by Anthropic. When you run a scan, we send Anthropic the page’s screenshots, text, and structure, and receive the analysis back. Under its commercial terms, Anthropic does not use this data to train its models. We don’t send your account details to Anthropic.

We share personal information only with service providers who help us run Honello, under contracts that limit how they can use it:

• Supabase: database, authentication, and file storage.
• Netlify: website and application hosting.
• Anthropic: AI analysis of scanned pages (see above).
• Stripe: payment processing.
• Klaviyo: account and marketing email.
• Resend: transactional email, such as team invitations.
• Google, Meta, and Pinterest: analytics and advertising measurement, only as described in Cookies and tracking.

We also share information within your workspace (teammates can see the workspace’s projects and reports), when the law requires it, to protect our rights or the safety of others, and as part of a merger, acquisition, or sale of assets, in which case this policy continues to apply.

We do not sell personal information for money. Allowing the Meta and Pinterest tags to run may count as “sharing” or “selling” for targeted advertising under some US state laws. You can opt out at any time; see Cookies and tracking.

We use three kinds of cookies and similar technologies:

• Strictly necessary: keep you signed in, remember your privacy choices and the country we use to apply them, and pass one-time signals between pages (for example, that you just created an account). These are always on.
• Analytics (Google Analytics 4): show us which pages people visit and how they use them. When analytics is off, Google Analytics runs in a mode that sets no cookies and sends only basic, anonymous measurements.
• Advertising (Meta Pixel and Pinterest Tag): measure our ads and let us show Honello ads to people who have visited. These don’t load at all when advertising is off.

In the European Economic Area, the United Kingdom, and Switzerland, analytics and advertising cookies stay off until you allow them, and we ask when you first visit. We estimate your location from your connection or, if that isn’t available, your device’s time zone; if we can’t tell, we ask.

Everywhere else, analytics and advertising cookies are on by default, and you can turn either off at any time.

Wherever you are, you can change your choice with Your privacy choices (also in the site footer). If your browser sends a Global Privacy Control signal, we treat it as an opt-out of advertising cookies and of sharing for targeted advertising.

Google, Meta, and Pinterest process data from these tags under their own privacy policies. You can also control ad personalization in your Google, Meta, and Pinterest account settings.

• Account and workspace information: for as long as your account is open.
• Projects, scans, and reports: until you delete the project or your account.
• Free-scan records (URL and domain): kept so each website gets one free scan.
• Billing and tax records: as long as the law requires, typically up to seven years.
• Server logs: for the limited periods our hosting providers keep them.

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy of it;
• correct information that’s wrong;
• delete your information or your account;
• object to or restrict certain processing, and withdraw consent you gave;
• opt out of targeted advertising and the “sale” or “sharing” of personal information.

You can update your name and workspace in your account settings and delete projects yourself. For anything else, email hello@honello.com from the address on your account. We’ll verify the request and respond within the time the law allows (generally 30 to 45 days). We won’t treat you differently for exercising your rights. You can also authorize an agent to make a request for you; we may ask for proof of the authorization.

If you’re in the European Economic Area or the United Kingdom, we rely on these legal bases: performing our contract with you (running the Service), our legitimate interests (securing and improving the Service, preventing abuse, and marketing to business customers), your consent (analytics and advertising cookies, the newsletter), and legal obligations (tax and accounting records). You may complain to your local data protection authority.

Merakite LLC is based in the United States, and our service providers process data in the United States and other countries. Where the law requires it, we rely on safeguards such as the European Commission’s Standard Contractual Clauses for transfers out of the EEA, the UK, or Switzerland.

We encrypt data in transit, restrict database access so each workspace sees only its own data, and limit internal access to what’s needed to run the Service. No system is perfectly secure, so we can’t guarantee absolute security. If we learn of a breach that affects your information, we’ll notify you as the law requires.

Honello is a business tool and isn’t intended for anyone under 18. We don’t knowingly collect information from children. If you believe a child has given us information, contact us and we’ll delete it.

We’ll post any changes on this page and update the effective date. If a change is significant, we’ll also notify account owners by email before it takes effect.

Merakite LLC, operator of Honello. Email hello@honello.com. See also our Terms of Service.