Privacy Policy

1. Who we are

Remote AI Platform ("we", "us") operates remoteaiplatform.com, a marketplace connecting remote software engineers ("Professionals") with hiring organizations ("Companies"). This policy explains what personal data we collect, why, and what rights you have over it. It applies to visitors, registered Professionals, and registered Companies.

2. What we collect

• Account data: name, email address, password (stored as a salted hash, never in plain text), and account role (Professional or Company).
• Profile data: for Professionals — headline, bio, skills, work history, links (GitHub/LinkedIn/portfolio), and an uploaded resume file. For Companies — organization name, website, industry, and job postings.
• Resume content: if you upload a resume, we extract its text and use an AI model to parse structured fields (skills, experience level, headline) into your profile. The original file is stored privately and is never shown to other users.
• Communications: messages sent through the platform's messaging feature, and social posts/comments you choose to publish.
• Payment data: for escrow payments between Companies and Professionals, payment card details are collected and processed directly by Stripe, our payment processor — we never see or store full card numbers ourselves.
• Usage data: a small set of product-analytics events (e.g. account created, job search performed, application submitted) tied to your account if you're logged in, or anonymously if not. We do not use third-party tracking/advertising cookies.
• Technical data: standard web server logs (IP address, browser type, request timestamps) retained briefly for security and debugging.

3. Why we process it (legal basis)

• Contract performance: creating your account, matching you with jobs or candidates, processing escrow payments, and enabling messaging are all necessary to provide the service you signed up for.
• Legitimate interest: basic analytics to understand and improve the product, and security logging to detect abuse.
• Consent: where we ask for it explicitly (for example, marketing emails, if we ever introduce them — we do not send any today beyond transactional account/notification emails).

4. AI processing

We use third-party AI providers (accessed through a provider-agnostic layer, so the specific provider may change) to: extract structured data from uploaded resumes, enrich job postings with normalized skill tags, and compute match scores between Professionals and jobs. Resume text and job descriptions are sent to these providers solely to generate that output; they are not used to train the providers' models under our current agreements, and we do not share one user's data with another user's AI requests.

5. Who we share data with

• Supabase (database, authentication, and file storage — hosted in the EU)
• Stripe (payment processing for escrow transactions)
• Resend (transactional email delivery — account confirmations, notifications)
• Sentry (error monitoring — technical crash reports, not resume/profile content)
• AI providers as described above, for the specific processing task only

We do not sell personal data, and we do not share it with advertisers.

6. Where data is stored

Our database, authentication, and file storage are hosted in the EU (Supabase, eu-west-1). Our application servers are currently hosted in the United States (Render); traffic to them is encrypted in transit. If your jurisdiction has specific requirements about cross-border data transfer, this is a point to raise with your lawyer during review of this document.

7. How long we keep data

We retain account and profile data for as long as your account is active. If you delete your account, we remove your profile, resume, messages, and posts; some records (e.g. completed payment transactions) may be retained longer where we have a legal obligation to do so (for example, tax/accounting record-keeping requirements).

8. Your rights

If you are in the EU/EEA (GDPR) or a jurisdiction with similar protections, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, email hello@remoteaiplatform.com. We aim to respond within 30 days.

9. Cookies

We use a minimal set of strictly-necessary cookies/local storage for session authentication (keeping you logged in) and your theme preference (light/dark mode). We do not use advertising or cross-site tracking cookies.

10. Changes to this policy

If we make material changes to this policy, we will update the "last updated" date above and, where the change is significant, notify registered users by email.

11. Contact

Questions about this policy or your data: hello@remoteaiplatform.com.