Who we are
Handyfolio, available at handyfolio.com, is operated by KKSDev (“we”, “us” or “our”). This policy explains how we handle information when you visit the site, use its tools, contact us or use an account where accounts are available.
For privacy questions or requests, contact hello@kksdev.com. KKSDev is responsible for the information it processes to provide Handyfolio.
Information used by the tools
CV Maker and Image Compressor
Your CV content and selected images are processed in your browser. The CV Maker stores your current draft in this browser’s local storage when available. PDF creation, image compression and draft imports and exports run on your device. Image compression and local CV editing do not upload your images, CV or exported files. If you explicitly choose “Save to my account”, your CV is sent to our server as described below.
CV undo/redo history is held in memory for the current visit. Clearing the CV draft also clears that history. Signing in does not automatically upload, synchronize or back up a browser draft.
Optional cloud CV saving
Where My CVs is enabled, choosing Save to my account or Save changes sends your full CV—including contact details, work history, education and any other information you entered—to our private account database. We store the named CV, its owner, revision number and creation/update timestamps so you can open it on another device, rename it, duplicate it or delete it. We do not publish saved CVs or create public sharing links.
Cloud saving is manual; signing in and editing a browser draft do not automatically upload it. Opening an account CV downloads a copy into the editor and its local browser draft. Your browser copy and your account copy are separate until you explicitly save changes.
Website and SEO tools
When you submit a URL for a website, robots.txt or sitemap check, the URL is sent to our API, which requests the public page or file from that website. The destination website and its hosting providers receive the request from our server and can process it under their own policies. Do not submit private URLs, access tokens or confidential content.
Pasted HTML in the Meta Tag Checker is sent to our API for analysis. Pasted robots.txt and sitemap XML, and edits in SERP Preview, are processed locally in your browser. Tool inputs and fetched contents are used to produce the requested report; our application does not save them as a user document or report history.
Optional accounts and Google sign-in
Public tools can be used without an account. Where Google sign-in is enabled, Google supplies basic identity information, including your Google account identifier, name, email address, email-verification status and, where supplied, profile image. We do not receive your Google password or request access to your Gmail messages, Drive files or contacts.
We store account records, the provider connection, timestamps and authentication/session information in our server-side database. Sessions can include an IP address and browser user-agent information for security. Provider access tokens, if stored, are encrypted by the authentication system. We use account information to sign you in, maintain your session, let you manage your profile and protect accounts.
Google account information is not used for advertising or to train AI models. Google processes your interaction with its sign-in service under its Privacy Policy. You can also review or revoke Handyfolio’s connection through your Google account settings.
Technical information and correspondence
Our servers and infrastructure providers necessarily receive connection information such as your IP address, browser/device details, requested resource and request time. We use operational information to deliver the site, diagnose failures, limit abuse and maintain security.
Application analysis logs record a request identifier, tool/mode, response status, error category and duration. Those application logs are designed to exclude submitted URLs, pasted contents, request headers and raw IP addresses. Infrastructure access or error logs may contain additional connection or diagnostic information; this policy does not promise that every provider log excludes personal data.
If you email us, we receive your email address, message and any information or attachments you choose to provide. We use these to answer and handle your request. Please send only what is necessary, and do not email passwords or authentication tokens.
Why we use information
We use information to provide the tools and accounts you request, respond to enquiries, prevent fraud and abuse, maintain and troubleshoot the service, and meet applicable legal obligations.
Where a law requires a legal basis for processing, the basis depends on the activity: providing the service you request, legitimate interests in operating and securing the service where permitted, compliance with legal obligations, or consent where required. You may withdraw consent where processing relies on it, without affecting processing that was lawful before withdrawal. We do not make hiring, credit or similarly significant decisions about you through our tools.
Retention and security
Browser drafts remain under your browser’s control. Server-side website-check inputs are processed for the request rather than stored in a document library. Processing buffers and diagnostics are separate from the account database and your browser draft.
Account records are kept while your account exists. Saved CVs remain in the active database until you delete them or delete the account. Deleting a CV removes that account copy; deleting the account also removes its saved CVs, linked provider records and sessions. These actions do not remove local drafts or downloaded files on your devices. Expired sessions, sign-in state, rate-limit records and infrastructure logs may remain until normal cleanup or retention processes remove them. Security, support or legally required records may need to be kept longer for their relevant purpose.
We keep correspondence and operational records for as long as needed to answer requests, operate and protect the service, resolve issues or meet legal obligations, rather than promising one deletion period for every record and provider.
We use measures such as HTTPS, access restrictions, protected session cookies and request limits. No service or storage method can guarantee complete security. Export a local copy of work you need to keep; browser storage is not a backup service.
International processing
Our providers operate infrastructure in multiple countries. Information may therefore be processed outside the country where you live. Where applicable law requires conditions or safeguards for international transfers, we must meet those requirements. Contact hello@kksdev.com for information about processing relevant to your request.
Your choices and privacy requests
You can use public tools without signing in, clear browser drafts, control browser storage and cookies, update your account name, manage and delete saved account CVs, sign out or delete your account where account features are enabled.
Depending on applicable law, you may also have rights to access or obtain a copy of your personal information; correct it; request deletion; restrict or object to certain processing; receive a portable copy; withdraw consent; or complain to a competent data-protection authority. These rights may be subject to legal exceptions.
To make a request, email hello@kksdev.com. We may ask for information reasonably needed to verify your identity and locate the relevant records. We respond within the period required by applicable law. We cannot retrieve or erase a browser-only CV draft from our servers because it is not uploaded there.
Children’s privacy
Handyfolio is a general-purpose tool collection and is not directed to children under 13. If local law requires a higher age or parental permission to use the service or consent to processing, those requirements apply. If you believe a child has provided personal information to us inappropriately, contact hello@kksdev.com so we can review the situation.
Changes and contact
We may update this policy as the service changes. The date above identifies this version. Material changes will be brought to your attention where required by applicable law.
Advertising, paid plans and additional analytics are not part of the current workflows described here. Before introducing features that change how we process personal information, we will update the relevant notice and obtain any required consent.
Privacy contact: KKSDev, hello@kksdev.com. For rules about using the service, see our Terms of Service.