Privacy
Your search is confidential. So is your data.
Last updated 17 July 2026 · Written in plain English on purpose.
MyHeadhunter exists to run your job search — often a search your current employer doesn't know about. Discretion isn't a legal footnote here; it's the product. This page says exactly what we store, what we never do with it, and how to make us delete it.
The data controller is ComunAI Ltd, registered in England and Wales (company no. 17081930, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ) and registered with the UK Information Commissioner's Office (ICO registration ZC105811) — the company behind the comun.ai products.
What we store
- Your account email and sign-in sessions.
- What you tell us about yourself: your profile, targets, the answers you give in the positioning interview, and the positioning you approve.
- CV content you paste or upload, and every version you edit or export.
- Roles you save or that our scanning finds for you, with their AI fit assessments, plus the documents generated from them — application packs, follow-up drafts, interview briefs, and your coach conversations.
- Emails you choose to forward to your private ingestion address (job alerts, and any application feedback you route there): we store the classification and the job postings we extract; our email provider retains the raw message for up to 30 days. We only ever receive what you send to that address, and we never send replies from it.
- Operational records: AI usage metering (the actions you run, credits used, and their underlying cost) per account, and error logs if something breaks while you use the product.
- If you join the waiting list: your email and the note you optionally leave.
Where it lives
Data is stored with Supabase (our database and authentication provider), the application runs on Vercel, emails are sent through Resend from EU infrastructure, and aggregate site analytics come from Plausible (EU-hosted, cookieless). Every record is scoped to your account and protected by row-level security — one member can never read another's data.
AI processing
The intelligence in the product comes from Anthropic's Claude models. When you run an analysis, score a role, or draft a document, the relevant content is sent to Anthropic's API to generate the result. Under the commercial API terms we use, Anthropic does not train its models on this data. We never send your data to any other AI provider.
What we never do
- We never sell your data, and we never share it with employers or recruiters.
- We never act on your behalf — nothing is submitted or sent unless you send it.
- No advertising trackers and no third-party tracking cookies. For basic audience analytics we use Plausible — it's cookieless, collects no personal data, never tracks you across sites, and produces only aggregate counts (page views, referrers, country). The only cookies we set are the ones that keep you signed in.
We email you to sign you in (magic links), to let you in off the waiting list, and for essential product notices. No marketing lists, no "engagement" campaigns.
Taking your data, and deleting it
Both are self-serve, under Plan & usage in the app — you don't have to ask us. Download everything gives you one file containing every record we hold: your profile, every CV and tailored version, every role, application pack, follow-up, forwarded email and usage entry. Delete my account removes all of it immediately and permanently, including your waiting-list entry, and we check afterwards that nothing was left behind rather than assuming.
What honestly survives: emails we already sent you (they're in your inbox, not ours to retrieve), aggregate counts that identify nobody, and backups for up to 30 days before they roll off — we never restore a deleted account from one. If you'd rather we did it for you, email hello@myheadhunter.app from your account address. You also have the usual UK GDPR rights (access, correction, export), and if you think we've handled your data badly you can complain to the ICO at ico.org.uk — though we'd ask for the chance to fix it first.
If your employer is paying
Some accounts are sponsored — an employer buys places for people they are making redundant. If that is how you got here, one thing matters more than anything else on this page: they cannot see what you do.
Your employer never sees your searches, the roles on your board, your applications, your CV, your scores, or whether you have signed in at all. Not on a dashboard, not on request. The most we ever report is engagement across the whole group, and only when that group is big enough that nobody can be identified by working backwards from it — under five active people we report nothing.
They are a payer, not a participant. We decide nothing with them about your search, they cannot ask us to delete your account, and when the sponsored period ends the account stays yours along with everything in it. The only personal data they give us is your name and work email, so we can send the invitation — we never accept anything else about you, and we delete that list once the sponsorship is reconciled.
Early access
MyHeadhunter is in invite-only early access and evolves quickly. If how we handle data changes materially, we'll update this page and tell members by email. Questions to the same address — a human reads it.