Skip to content
Sign in

Legal · privacy and data control

Privacy Policy

HuMetric is a consent-first professional identity and talent-discovery service. This policy explains, in plain language, what personal data we process, why we process it, when it can become public, and how you can control or delete it.

Effective and last updated: October 27, 2026 · v2026-10-27

Localized versions are provided for convenience. If a translation conflicts with the English version, the English version controls to the extent permitted by applicable law.

1. Scope and controller

This policy applies to humetric.net, HuMetric accounts, profile submission and management, public profiles, search, APIs, MCP access, recruiter early access, and related support communications (the “Service”). HuMetric, operated from Taipei, Taiwan, determines how personal data is processed for the Service. Questions and rights requests may be sent to [email protected].

2. Our privacy commitments

  • You own and control your content. HuMetric processes it only to help you structure, improve, trim, publish, promote, secure, or withdraw it as you direct.
  • We do not use your résumé or profile to train HuMetric or general-purpose AI models.
  • We do not currently sell personal information or share it for cross-context behavioral advertising. Any future compensated data-sharing feature would require separate, explicit, informed, and revocable opt-in consent.
  • A submitted résumé starts as a private draft. It is not published until you review and confirm it.
  • You choose one enforced profile audience—public web, signed-in members only, or private—and may change or withdraw it. Your email, phone and profile links aren’t listed on your profile. When you publish to members or the web, paying members can pay to reveal them, on Humetric or through their connected AI agent. Project links stay public. Choose Private to stop.
  • Public and authorized profile access is filtered through exposure rules and logged for auditability.
  • Connecting an external account does not authorize posting; each outbound social post requires separate approval of the exact text.
  • We collect and disclose only what is reasonably necessary for the stated purpose.

3. Data we collect and its sources

Data you provide. Résumés and their text; name; email; phone; professional history; education; skills; location; links; profile summary; contact preferences; desired queries; chosen audience and profile settings; recruiter name, work email, company, and support messages. We must store some of this data in our cloud database and file storage to maintain your private draft, profile, settings, and later deletion controls. We do not keep a separate hidden marketing copy.

Account and connection data. When you sign in with Google or an email magic link, we receive your email address and, for Google, the account identifier and basic account details you approve, which may include name and profile image.

Service and device data. Authentication sessions, timestamps, consent and access logs, API usage, security events, request metadata, IP-derived abuse-prevention values, browser or device information, and basic product analytics. Rate-limit identifiers are hashed rather than stored as raw IP or email values by that protection mechanism.

Public or authorized sources. If you provide a GitHub, LinkedIn, or website link, we may process information at that link when the feature clearly indicates it. We do not claim ownership of third-party data, and we do not treat public availability as permission for unrestricted use.

We do not ask for government IDs, financial account data, medical information, criminal records, or other sensitive personal data. Do not include unnecessary sensitive information in a résumé or free-text field.

4. Why and on what basis we process data

Where local law requires a different legal basis, we rely only on a basis permitted there. We do not use OAuth provider data for advertising.

Taiwan’s Personal Data Protection Act is the baseline for how we handle personal data: we tell you the purpose of collection, use data only within that purpose, honor your rights of access, correction, and deletion, apply security measures, and give breach notifications as described in Section 9.

Consent steps. We ask for consent in three places: once, with one checkbox, to the Terms of Use and this policy when you first sign in; at publishing, for your profile audience (publishing to members or the web also lets paying members pay to reveal your email, phone number and profile links) and, separately, for your public profile to be featured on the Humetric LinkedIn page; and when you connect an AI agent. Each acceptance record holds your account, the document version, the time, where in the product you accepted and your language. It does not hold your IP address or browser user agent.

  • Provide the Service and perform our agreement: authenticate users, parse a résumé, create a private draft, share approved content under the selected audience, operate search and APIs, manage connections, and provide requested recruiter access.
  • Your consent: choose the profile audience, enable optional discovery methods, connect an external account, send an approved social post, and send optional communications where consent is required. You may withdraw consent prospectively.
  • Legitimate operational interests: secure, debug, measure, and improve the Service; prevent fraud and abuse; keep audit records; and understand aggregate usage, balanced against your rights.
  • Legal obligations and protection: comply with lawful requests, enforce our terms, establish or defend legal claims, and protect users, the public, or the Service.

5. AI processing, search, and public profiles

HuMetric may send limited résumé text to a configured cloud language-model provider to turn it into a structured draft. That transfer is for inference, not for HuMetric model training; provider retention and training controls depend on the selected provider and our configuration. If that service is unavailable, a rules-based parser may be used. You review the draft before publication. Search and ranking systems may compare approved professional fields with a query, but HuMetric does not make hiring decisions, determine legal eligibility, or guarantee a job, ranking, citation, or discovery result.

Profiles shared under the selected audience may be visible on public pages and in machine-readable formats such as JSON-LD, JSON, Markdown, MCP after OAuth authorization, sitemaps, or search indexes. Public information can be copied or cached by third parties outside our control. Changing the audience or deleting data stops future disclosure by HuMetric and triggers our available withdrawal mechanisms, but cannot guarantee deletion from every third-party cache or prior recipient.

6. When we disclose data

Providers may process data under their own terms and privacy policies. We do not authorize them to use HuMetric data for their independent advertising.

  • Your chosen audience: public visitors, search services, AI agents, API clients, MCP clients after OAuth authorization, or signed-in Humetric members, only when the owner chooses that audience.
  • Humetric’s LinkedIn page: if your audience is public web and you allow it, we may feature your public profile on the Humetric LinkedIn page. The option may be selected for you when you publish; you can clear it or turn it off at any time, and it ends on its own when your profile leaves the public web. It uses only your public profile, never your email, phone number or profile links. We do not promise whether, when or how often a profile is featured.
  • Service providers: Supabase for authentication, storage, and database services; Render for hosting; Cloudflare for network delivery and security; Resend for sending email, including notification email when communication features (invitations and messages) are available; PostHog for product analytics, which receives pageviews and product events but no profile content, contact details, or search queries; your selected OAuth provider; and a configured résumé-parsing model provider, which may include OpenRouter or another compatible provider.
  • Legal and safety recipients: courts, regulators, law enforcement, advisers, or other parties when reasonably necessary to comply with law or protect rights and safety.
  • Business transfer: a successor in a merger, financing, reorganization, or asset transfer, subject to appropriate confidentiality and notice where required.

7. Invitations, messages, and connected agents

This section applies to intros, invitations and messages: members can start intros to other members once member intros are enabled, and recruiter workspaces we have enabled can send invitations. The person who starts a conversation pays; replying is always free.

  • Contact details. Contact details are never shown in messages before acceptance. They are shared only when the candidate explicitly chooses “Accept and share my contact details”, after seeing exactly which fields will be shared. A reply never shares contact details. Shared contact details cannot be taken back. Apart from the contact reveal described next, a recruiter cannot request or retrieve them any other way.
  • Contact reveal to paying members. Your email, phone and profile links (GitHub, LinkedIn, website and any other links you add) aren’t listed on your profile. When you publish to members or the web, paying members can pay to reveal them, on Humetric or through their connected AI agent. Project links stay public. Choose Private to stop. A phone number is revealed only if you gave one. Accepting the Terms and this policy shares nothing by itself; publishing does, and if your profile is already published when you accept this version, the same rule applies to it. Every reveal is logged. A reveal keeps only a reference, never the value, so choosing Private, or deleting your profile or account, takes effect the next time anyone looks, including members who saw it before; details someone already copied off Humetric cannot be recalled. Contact details never appear in search, on public pages or in the people directory. An AI agent receives another person’s contact details only after its member pays to reveal them, and that reveal is logged like any other. Details an agent already received cannot be recalled, like details copied off Humetric. Staff-managed profiles and profiles built from public sources are never revealable.
  • Anonymous profiles. When a candidate’s profile is anonymous, the recruiter sees only “Anonymous profile” until the candidate chooses “Accept and share my contact details”. That same action also reveals the candidate’s real name to that recruiter. The confirmation shows the name and the contact fields before the candidate agrees.
  • Being invited. Candidates can turn off being invited for each profile. A reply never implies acceptance.
  • Notification email. Notification emails contain a link only, never message text.
  • Connected AI agents (MCP). A connected AI agent can read, send, or decide only with separate application permissions that the person chooses (“inbox.read”, “inbox.write”, and “invitations.decide”). The consent page approves “inbox.read” by default; the other two are off until you turn them on. A human approves every message and decision an agent sends. Permissions can be changed, and the agent disconnected, at any time on the Connected AI agents page (/account/agents). Your own connected agent can read and change your profile, email and phone. It receives other people’s contact details only through a paid reveal described above.
  • Staff access. Only staff holding an explicit capability may read message content, through an audited path, and every read is logged. Direct database access is a separate technical control restricted to authorized engineers.
  • Retention and deletion. Section 8 explains how long search text, messages, and replies are kept and what happens when an account or a recruiter workspace ends.

8. Retention

We apply need-based retention rather than keeping personal data indefinitely, apart from the audit records described above. HuMetric does not retain deleted active data for AI training. You may ask for the current retention assessment for your data.

  • Private submission drafts and source files are kept while needed for review, recovery, security, and profile management, then deleted or de-identified when no longer necessary.
  • Published profile data is kept until you hide it, delete it, or close the profile. Audience changes remove content from future HuMetric public responses; full deletion removes active copies, subject to limited backup, legal, and security retention.
  • When you delete your account, public visibility stops immediately: profiles are unpublished, removed from search and the directory, and external withdrawal requests are sent. The account is then scheduled for permanent deletion after 30 days; during that window, signing in shows only a scheduled-for-deletion state and can cancel, restoring profiles as private drafts.
  • When the 30-day window ends, the auth account, profiles, résumé files, and ownership and settings records are permanently deleted. Signing in again later with the same provider creates a new, empty account.
  • When communication features (invitations and messages) are available, deleting your account deletes message content. A content-free audit record remains.
  • Early-access contact data is kept until access outreach is complete, you opt out, or it is no longer needed.
  • When communication features (invitations and messages) are available, a recruiter’s search text is cleared 90 days after the search. An id-only record is kept for quota and audit.
  • When communication features (invitations and messages) are available, messages and replies are kept for 12 months after a conversation closes and are then deleted.
  • When communication features (invitations and messages) are available and a recruiter workspace ends, the candidate keeps their own copy for the retention period described above.
  • Audit records are kept indefinitely and never contain message text, including when communication features (invitations and messages) are available.
  • Anonymized consent, access, and transaction audit records with person references removed, and de-identified product analytics keyed to an identifier that can no longer be resolved to a person, may be kept longer where reasonably required for audit, fraud prevention, dispute resolution, security, or law.
  • Deleted data may remain temporarily in encrypted backups until normal rotation completes and is not restored to active use except for disaster recovery.

9. Security and incident response

We use measures designed for the sensitivity of the data, including access controls, contact fields that are never listed on profiles or in search, hashed credentials and tokens where appropriate, rate limiting, validation, exposure filtering, append-only audit records, and encrypted transport. No system is perfectly secure. If a breach creates a legally reportable risk, we will investigate, contain it, notify affected people and the competent authority as required by law, and document corrective action. Our internal target for notification is 72 hours.

10. Your rights and choices

Depending on applicable law, you may request access, a copy, correction, deletion, restriction or cessation of processing, portability, information about recipients or sources, or objection to certain processing. You may also withdraw consent and complain to your local privacy authority. We will not discriminate against you for exercising a privacy right.

Taiwan data subjects may exercise the rights provided by Article 3 of the Personal Data Protection Act. EEA, UK, and similar-law residents may also object to legitimate-interest processing and request restriction or portability where applicable. California residents may request to know, correct, or delete covered information and may opt out of sale or sharing; HuMetric does not sell personal information or share it for cross-context behavioral advertising.

Use profile controls where available, delete your account on the Account page, or email [email protected]. Describe the account or profile and the right you want to exercise. We may verify identity and authority, respond within the legally required period, explain any lawful exception, and support an authorized agent where local law requires it.

account and data deletion

Request deletion

Signed-in users can delete their account on the Account page; no email is required, and a confirmation step is shown before the request is accepted. Public visibility stops immediately: profiles are unpublished, removed from search and the directory, and external withdrawal requests are sent.

The account is then scheduled for permanent deletion after 30 days. During that window, signing in shows only a scheduled-for-deletion state and lets you cancel, which restores your profiles as private drafts. When the window ends, the auth account, profiles, résumé files, and ownership and settings records are permanently deleted; anonymized audit records, de-identified product analytics, encrypted backups until rotation, and data required for security, legal compliance, or legal claims may survive as described in Section 8.

When communication features (invitations and messages) are available, deleting your account deletes message content. A content-free audit record remains.

Deleting your account does not affect your ability to sign up again: signing in later with the same provider creates a new, empty account. You may also request deletion by email to [email protected] from the account email when possible, with the subject “HuMetric data deletion request.” Revoking an OAuth provider connection alone does not delete data already held by HuMetric.

11. Taiwan collection notice

For Taiwan’s Personal Data Protection Act: the collecting party is HuMetric; purposes and data categories are described in Sections 3 and 4; use continues for the periods in Section 8; processing may occur in Taiwan and locations where our providers operate; recipients and methods are described in Sections 5, 6, and 7; and rights and exercise methods are in Section 10. Providing optional data is voluntary. If required account, contact, résumé, or agreement data is not provided, we cannot create the requested draft, profile, account, or early-access request.

12. United States

Notice at collection: we collect the categories of personal information described in Section 3, for the purposes described in Section 4. We do not currently sell personal information or share it for cross-context behavioral advertising.

To make an access or deletion request, use the profile controls, delete your account on the Account page, or email [email protected]. This is the same contact window described in Section 10.

13. International transfers and minors

HuMetric and its providers may process data outside your country. Where required, we use recognized contractual or legal safeguards and provide information about them on request. The Service is for professional users age 18 or older and is not directed to children. If we learn that a minor submitted personal data, contact us so we can remove it.

14. Policy changes and contact

We may update this policy as the Service or law changes. We will post the revised date and provide additional notice or obtain renewed consent when legally required or when a material change needs it. Continued use does not override rights that require affirmative consent.

Privacy contact: [email protected]. Please also review our Terms of Use.