Honnz
PRIVACY · VERSION 2026-09-23

Privacy Policy

Effective September 23, 2026. This Policy explains how Honnz ("Honnz," "we," "us," or "our") processes personal data when you use Honnz. It is intended to be read together with the Terms of Service.

1. Who controls your data

For account and service data processed to operate Honnz, Honnz acts as the data controller or equivalent responsible party under applicable law. Privacy requests may be sent to support@honnz.com.

2. Data we collect or process

Depending on the features you use, we may process:

3. Where data comes from

We receive data directly from you, from actions you take in Honnz, from connected services you authorize such as X and PayPal, and from normal technical requests made by your browser or app. We do not intentionally purchase sensitive personal profiles from data brokers.

4. Why we process data

We process data to create and secure accounts; verify email addresses; provide content analysis, generation, scheduling and publishing; maintain queues and automation settings; provide subscriptions and billing access; operate support and reliability systems; prevent abuse and fraud; comply with legal obligations; enforce our Terms; protect users and Honnz; and, where you have made the applicable privacy choice, measure marketing conversions.

5. Consent and other lawful grounds

Where applicable law requires prior consent, Honnz requests it before the relevant processing. Some processing is also necessary to perform the service you requested, secure the service, comply with legal obligations, or establish, exercise, or defend legal claims. Optional marketing/conversion measurement is kept separate from core account access where required. Withdrawing consent does not affect processing already lawfully performed before withdrawal and may make a feature that depends on that consent unavailable.

6. Email verification and transactional messages

New accounts may be required to verify their email address. Honnz creates a random, single-use verification token and stores only a cryptographic digest of that token. The raw verification URL is sent through our transactional email provider. Verification links expire automatically, and resend requests are rate-limited to reduce abuse and account enumeration.

7. Connected X accounts

X access is used only for features you authorize, such as reading your own content for style learning, obtaining account information made available to the app, and publishing to your own connected account under the mode you select. Honnz does not use the X connection to automate likes, follows, replies, reposts, direct messages, or fake engagement. Connected authorization tokens are encrypted at rest and are not exposed to other customer workspaces. You may disconnect X from your workspace, subject to any data that must temporarily remain for security, billing, legal, backup, or dispute purposes.

8. AI providers

When you use AI features, relevant instructions, content samples, drafts, or context may be sent to the configured AI provider to generate or analyze content. If you connect your own OpenAI API key, the key is encrypted at rest, used for your workspace requests, and is not displayed again after saving. Disconnecting BYOK removes the stored key from active workspace configuration, subject to backup and security retention described below.

9. PayPal and payments

PayPal handles payment credentials and payment processing under its own privacy terms. Honnz receives and stores the subscription and lifecycle information necessary to determine your plan and access. Do not send Honnz full card numbers or account passwords in support requests.

10. Service providers and disclosures

We may disclose the minimum data reasonably necessary to service providers that help us operate Honnz, including cloud hosting/database providers, X, AI providers, PayPal, and our transactional email provider (currently Resend when configured). We may also disclose data when required by law, lawful process, or a competent authority; to protect rights, safety, security, or the integrity of the service; to investigate fraud or abuse; or in connection with a merger, financing, acquisition, reorganization, or sale of assets subject to appropriate confidentiality and legal safeguards.

We do not sell personal data for money. We do not intentionally disclose passwords, raw API keys, or OAuth access tokens for advertising purposes.

11. International processing and transfers

Some service providers may process data outside Jordan or outside your country. Where applicable law restricts cross-border transfers, Honnz will use the mechanisms, contractual protections, adequacy requirements, permissions, or other safeguards required by that law. We seek to limit disclosures to data reasonably necessary for the relevant service purpose.

12. Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including providing the account, maintaining security and fraud controls, resolving disputes, satisfying payment/accounting obligations, enforcing agreements, and meeting legal requirements. When the purpose ends and no lawful retention need remains, data should be deleted, anonymized, or placed beyond ordinary use. Backup copies may persist for a limited period until overwritten in the normal backup cycle.

Verification tokens are short-lived and invalidated after successful use or rotation. Security throttling data is designed to expire after its operational window. Some audit, billing, legal-acceptance, and fraud-prevention records may be retained longer where reasonably necessary to establish or defend legal rights or meet legal obligations.

13. Security

Honnz uses technical and organizational measures appropriate to the service, including HTTPS in production, password hashing, server-side secrets, encryption at rest for sensitive connected credentials, secure session cookies, database-backed login throttling, restricted cross-site state-changing requests, no-store caching for authenticated areas, and browser security headers. No online service can guarantee absolute security. If we become aware of a qualifying personal-data breach, we will take the response and notification steps required by applicable law.

14. Your privacy rights

Depending on applicable law, you may have rights to know about and access personal data held about you, obtain a copy, correct or update it, withdraw prior consent, restrict processing, request erasure or anonymization, object to certain processing or profiling, request portability where applicable, and submit a complaint to the competent data-protection authority. These rights may be subject to lawful exceptions, identity verification, and retention obligations.

To exercise a privacy right, email support@honnz.com from your account email when possible and describe the request. We may ask for reasonable information to verify identity before releasing or changing account data.

15. Children

Honnz is not intended for persons under 18 and account creation requires confirmation that the user is at least 18. If we learn that an underage person created an account contrary to these requirements, we may suspend the account and take appropriate deletion or compliance steps.

16. Automated processing

Honnz uses automation and AI to generate, rank, schedule, and analyze content. These product functions do not make decisions intended to produce legal or similarly significant effects about you. You control whether publishing automation is enabled and can change publishing settings or disconnect supported integrations.

17. Cookies and local storage

Honnz uses essential session technology to keep you signed in securely and may use local storage or cookies to remember privacy choices and permitted conversion attribution. Optional tracking is controlled by the privacy-choice mechanism where enabled. Blocking essential cookies may prevent authenticated features from working.

18. Changes to this Policy

We may update this Policy as Honnz, law, or our providers change. Material changes may be presented for renewed acknowledgement or consent before continued authenticated use where appropriate. The version and effective date above identify the current policy.

19. Jordan privacy framework

For users within Jordan, this Policy is intended to operate consistently with Jordan's Personal Data Protection Law No. 24 of 2023 and regulations/instructions issued under it, including applicable requirements concerning consent, data-subject rights, security, disclosure, retention, and international transfers. If a provision of this Policy conflicts with a non-waivable legal requirement, the legal requirement controls.

20. Contact

Privacy questions and requests: support@honnz.com.