Mune Work is a job marketplace. Job seekers build a profile and apply to roles; employers post roles and review applicants. This policy explains exactly what personal data we collect for that purpose, who we share it with, and the control you have over it.
It covers munework.com and the Mune Work applications and APIs. In this policy, "we" and "us" mean Mune Work; "you" means anyone with a Mune Work account or who visits the site.
1. Data we collect
Account data
Created when you register: your name, email address, account type (job seeker or employer), and a one-way hash of your password — we never store your password itself. If you turn on two-factor authentication we also store the secret and your backup codes. We record verification and account status flags.
Job seeker profile data
Supplied by you, and optional except where noted. Some of it is sensitive, so we list it in full:
- Contact and identity — middle name, phone number, date of birth, address and postal code, profile photo, and where you choose to provide one for identity checks, a government identification document.
- Professional profile — professional title and summary, years of experience, work history, and links to LinkedIn, GitHub, X/Twitter, Facebook, Instagram, YouTube, and personal portfolios.
- Documents — CVs, cover letters, and video CVs that you upload.
- Preferences — desired job titles and locations, preferred countries and companies, expected salary by currency, work types, preferred benefits, relocation openness, and auto-apply settings.
Employer data
Company name, contact details, company profile and branding, job postings, and notes or status you record against applicants.
Activity data
Applications you submit, jobs you save or bookmark, interviews scheduled, messages you send through the platform, and support requests.
Technical data
IP address, browser and device information, and sign-in times — used for security and to alert you to unfamiliar logins. If you enable push notifications, we store a device token issued by Firebase Cloud Messaging. If you enable WhatsApp updates, we store and verify your phone number.
2. Data from Google Sign-In
When you sign in with Google, we request only the email and profile scopes. From these we receive your Google account ID, email address, first and last name, and profile picture URL.
We use this solely to create and authenticate your Mune Work account and to pre-fill your name and photo. We do not use Google data for advertising, we do not sell it, and we do not transfer it to third parties except the processors in section 5 that host the service on our behalf.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not request access to your Gmail, Drive, Calendar, or Contacts.
You can disconnect Mune Work from your Google account at any time at myaccount.google.com/permissions. The same applies to sign-in through LinkedIn and Microsoft, where we likewise request only basic profile and email.
3. How we use your data
| Purpose | What this involves |
|---|---|
| Running your account | Authentication, verification, password reset, two-factor authentication, and security alerts for new sign-ins. |
| Matching and recommendations | Comparing your profile and preferences against job postings to produce a match score, job recommendations, and — only if you enable it — automatic applications on your behalf. |
| Applications | Sending your profile, CV, and any cover letter to the employer whose role you apply to, and tracking status. |
| Notifications | Email, in-app, push, and (if enabled) WhatsApp messages about applications, interviews, and matches. You control these in your settings. |
| Payments | Processing subscriptions and plan upgrades. |
| Support and safety | Answering support requests, preventing fraud and abuse, and meeting legal obligations. |
4. Automated processing and AI
We use AI to read documents you upload and to score how well a profile matches a role. Concretely: when you upload a CV, its text is sent to a third-party AI provider to extract structured fields such as skills, employment history, and education. We also use AI to score candidate–job fit and to read details from job flyers that employers upload.
The providers we send this content to are Anthropic and OpenAI. We send only the document or profile content needed for the task. These providers act as processors for us and, under their API terms, do not use content submitted through their APIs to train their models.
Match scores inform ranking and recommendations. They do not by themselves reject an application — hiring decisions are made by employers. If you enable auto-apply, applications are submitted automatically according to the thresholds and filters you set, and you can turn it off at any time.
5. Who we share data with
Employers
When you apply to a role, that employer receives your profile, CV, cover letter, and any screening answers. Employers can see when you applied and can record notes and status against your application. Your profile visibility outside of applications is governed by your privacy settings.
Service providers
We use these processors to operate the service. They may handle personal data only on our instructions:
- Cloudinary — storage and delivery of CVs, images, and video CVs
- Resend — transactional email
- Google Firebase — push notification delivery
- Anthropic, OpenAI — AI document parsing and match scoring
- Paystack, Flutterwave, Stripe — payment processing. Card details are entered directly with the payment provider; we never receive or store full card numbers.
- Meta (WhatsApp Business), Twilio, Termii — WhatsApp and SMS delivery, only if you enable it
- Netlify, Vercel — application hosting
Other disclosures
We disclose data where required by law, to enforce our terms, to protect the rights and safety of users, and to a successor entity in a merger or acquisition (you would be notified).
We do not sell your personal data, and we do not share it with advertising networks.
6. Developer API
Employers may enable API access and webhooks to integrate Mune Work with their own systems. Where an employer does this, application and candidate data relating to their own postings is transmitted to endpoints they control, and their handling of it is governed by their own privacy practices. Requests are authenticated with signed API keys and payloads are encrypted in transit.
7. Retention
- Account and profile data — kept while your account is open.
- Applications — retained by the employer you applied to for their own record-keeping, which may outlast your account.
- After deletion — we remove your profile, documents, and preferences. Limited records are retained where we must: transaction records for accounting and tax, and security logs for fraud prevention.
- Device tokens — removed automatically once they stop being valid.
8. Your rights
You can, at any time:
- Access and correct your data — directly in your profile settings.
- Delete your account — in settings, which erases your profile and uploaded documents.
- Control notifications — per channel in your notification settings, or unsubscribe from any email using the link in its footer.
- Withdraw an application — from your applications page.
- Object or restrict — where processing relies on our legitimate interests.
- Export — request a copy of your data in a portable format.
To exercise a right we cannot serve in-product, email support@munework.com. We respond within 30 days. If you are in the EEA or UK, you may also complain to your local data protection authority.
9. Security
Traffic is encrypted with TLS. Passwords are stored as one-way hashes. Sensitive integration credentials are encrypted at rest with AES-256-GCM, and API requests are authenticated with signed keys and protected against replay. Access to production data is restricted to personnel who need it. No system is perfectly secure, so we also give you two-factor authentication and alert you to unfamiliar sign-ins.
10. Cookies
We use cookies and browser storage that are strictly necessary to keep you signed in, to remember preferences such as theme, and to protect against abuse. We do not use advertising cookies or cross-site tracking. Blocking essential cookies will prevent sign-in from working.
11. International transfers
We operate internationally, and the providers in section 5 process data in various countries including the United States and the European Union. Where data leaves your region we rely on appropriate safeguards, such as Standard Contractual Clauses, in our agreements with those providers.
12. Children
Mune Work is for people old enough to work and is not directed at children under 16. We do not knowingly collect data from them. If you believe a child has given us data, contact us and we will delete it.
13. Changes to this policy
We will update this page when our practices change and revise the date at the top. For material changes affecting how we use your data, we will notify you by email or in the app before they take effect.
14. Contact us
Mune Work
Privacy and data protection enquiries: support@munework.com
Legal notices: legal@munework.com