Privacy Policy — Remote Worldwide

1. The short version

This policy explains what Remote Worldwide does with your data across https://www.remoteworldwide.net: the job board, the blog, the career tools in your dashboard, and our Chrome extension. In brief:

We collect what you give us (your account, resumes, documents, answers and contacts) and some data about how you use the site.
We use it to run the service, and send parts of it to the providers behind the AI and voice tools, only when you use those tools.
We do not sell your data and we do not share it with advertisers.
You can download your data or delete your account yourself, from Settings, at any time. You can also write to contact@remoteworldwide.net.

The sections below give the detail. Our Terms and Conditions cover the rest of our relationship with you.

2. Who we are

Remote Worldwide (“we”, “us”) runs https://www.remoteworldwide.net from Nigeria and is responsible for the personal data described here. For anything about your data, including the requests in Your rights and controls, contact contact@remoteworldwide.net.

3. What we collect

Your account. Your name, email address and profile photo. If you sign in with Google or GitHub, we receive those details from them and store the tokens they issue so the sign-in keeps working; we never see your password for those accounts. If you sign up with an email address and password, we store the password only as a salted hash and ask you to confirm your address.

Signed-in devices. For each login we record the browser, the IP address and when it was last used, so you can see your devices and sign them out. These records expire after 30 days.

What you create. Resumes, cover letters, documents you upload to your vault, saved jobs, tracked applications, interview practice and reports, career coach and “Ask about a job” conversations, your plan and streak, and the answers you save for job application forms. If you choose to save answers to demographic questions (for example gender, ethnicity, disability or veteran status), or upload an identity document to your vault, we store them like any other content. Demographic answers are never sent to our AI providers.

People in your network. If you import your LinkedIn connections or save people from a referral search, we store data about those people. See People in your network.

Voice. Recordings of interview practice and, when you use talk mode, your voice in the career coach and “Ask about a job”. See Voice and interview practice.

Email sign-ups. When you download a free guide or checklist, we record your email address, which guide it was, which post you found it on, and when you consented.

Usage. Pages you view and what you click, recorded by the analytics tools listed in Cookies and browser storage, plus the technical data any web server receives: IP address, browser, device and approximate location.

We do not take card payments on the site, so we do not collect payment card details.

4. Why we use it

To run your account: signing you in, keeping you signed in, and showing your jobs, documents and progress. The service cannot work without this.
To provide the tools: scoring a resume, drafting a cover letter, answering questions about a job, running interview practice, filling application forms and finding people for a referral.
To email you: account and security email, and the updates you opted into (see Email).
To improve the product: understanding which listings, posts and tools people use.
To keep it safe and lawful: rate limits, spam and fraud prevention, security investigations and legal obligations.

Where the law asks for a legal basis, ours are: performing our contract with you (your account and the tools you use), your consent (optional email, and data you choose to give us such as demographic answers), our legitimate interests (security, analytics and improving the product), and legal obligation where one applies.

5. AI processing

The career tools send the text they need to AI providers, only when you use a tool. That text can include parts of your resume, the job posting, your profile details and what you type into a chat. The providers are:

Groq, which runs the language model that writes scores, drafts, answers, coaching and interview reports. It receives text only, never your audio.
Voyage AI (a MongoDB company), which turns resume and job text into numbers we use to match them.
ElevenLabs, for the voice features in Voice and interview practice, and Google Cloud Text-to-Speech when ElevenLabs is unavailable. Interview questions are read aloud this way, and a question can quote your resume or the job posting.
Exa, a web search service used for referral search. It receives the company and role you are searching for, never who you are.
ScrapingAnt, which fetches the job pages you import and the links you paste into a chat.

Each provider handles the data under its own terms. If you would rather your text was not processed this way, don’t use those tools; the rest of the service works without them. The career coach uses your job-search activity as context only while “AI coaching” is switched on in Settings.

6. Voice and interview practice

Interview practice is a recorded voice session. When voice practice is available, every session is recorded, and the setup screen says so before you start. Here is what happens:

your microphone is recorded in your browser and uploaded in short pieces while you speak. It records whatever it picks up, including the interviewer’s questions if they play through your speakers, so headphones keep the recording to your answers;
the live interviewer runs on ElevenLabs, which receives your voice as you speak and the text of each reply;
afterwards, ElevenLabs also transcribes the whole recording for your report;
our own analysis service measures how you used your voice, such as pace, pauses, pitch movement and loudness, each compared with the rest of your session. It receives the audio but not the transcript or who you are, and keeps nothing afterwards;
Groq then writes your report from the transcript and those measurements. It never receives the audio;
the recording is stored with Cloudflare R2 so you can play it back from your report. We do not use recordings to identify you, and nothing we run tries to detect your mood or feelings or to guess where you are from.

Talk mode in the career coach and “Ask about a job” also runs on ElevenLabs: it hears you as you speak and reads answers aloud. We keep the conversation’s text, not the audio.

How long we keep it. A recording, its transcript and its report are kept until you delete that session or your account. Upload pieces and working copies are deleted once the report is made, and automatically within 7 days at most. ElevenLabs keeps its own copies of what it processes under its own terms; deleting a session here does not delete them.

Dictation is different. The microphone button that types what you say uses your browser’s own speech service. We do not store that audio, but your browser may send it to its maker to turn into text: in Chrome, that is Google.

7. People in your network

LinkedIn connections. If you upload the Connections.csv file from your LinkedIn data export, we store each connection’s name, LinkedIn profile link, company, position, the date you connected, their email address if they chose to share it with their connections, and any notes you add. We read the file and do not keep it.

Referral search. When you search for people at a company, we search the public web and store the results for you: a person’s name, title, location, profile link and the company’s phone number, and an email address that is either one we found or a likely one worked out from the company’s email format. Likely addresses are labelled as unverified. We never look for personal phone numbers.

These people are visible only to you, and we do not contact them: any message is sent by you, from your own email or LinkedIn. You can delete contacts one at a time or all together; saved searches and referral requests are removed when you delete your account. If you appear in a user’s contacts or search results and want your details removed, write to contact@remoteworldwide.net.

8. The Chrome extension

The extension works on job application pages: Greenhouse, Lever and Ashby, plus any other site you switch it on for. It does not run in incognito windows. On those pages it reads the form’s questions, your current answers, and the job details shown on the page.

It fills fields only when you ask, using your saved answers or AI drafts for the questions you choose. Question labels are sent to Groq for drafting; demographic questions never are.
It never reads or fills identity numbers, bank or card numbers, passwords or dates of birth, and it never submits a form for you.
Demographic answers are filled only from answers you saved yourself, and only if you switch that setting on. It is off by default.
When it sees an application submitted, it logs it to your tracker after a 10-second window in which you can undo it. You can switch logging off.

It talks only to https://www.remoteworldwide.net, using your existing sign-in, and keeps its settings and a short-lived cache in your browser.

9. What other people can see

Most of your data is visible only to you. The exceptions are:

Pods. If you join an accountability pod, its members see your name and photo, your streak, how many applications you logged this week, whether you logged today, and your posts and votes in the pod. Members are emailed when someone new joins. When you log a job offer, the pod sees a post saying you landed that role at that company. Pods are rearranged weekly, and inactive members are removed.
Invites. If you joined through someone’s invite link, they see your name, when you joined, and whether you became a paying member.
Recommendations. Our team may put candidates forward to hiring companies. If you are put forward, your name and the answers you give to that company’s questions are shared with its hiring team.
Things you share. Share cards and captions leave the site only when you press a share button, and their links carry your invite code.

We do not sell your personal information, and we do not share it with advertisers. We share data with the service providers that make the site work, and only so they can do that work:

hosting and infrastructure: Vercel (the website), MongoDB Atlas (our database), CloudAMQP (background jobs), and the hosts that run our services and caches;
Cloudflare R2, which stores your documents, profile photo, voice recordings and interview audio;
Google and GitHub, if you choose to sign in with them;
the AI and voice providers in AI processing: Groq, Voyage AI, ElevenLabs, Google Cloud Text-to-Speech, Exa and ScrapingAnt;
Resend, which delivers our email;
Google Analytics, Hotjar and Vercel Analytics, which tell us how the site is used.

We may also disclose data if the law requires it, to protect our rights or someone’s safety, or to a buyer if the business is ever sold. In that case this policy continues to apply until it is replaced and you are told.

11. Email

Always sent, because they are part of running your account: sign-up, email confirmation, password reset and change, account deletion notices, a low credit balance, an AI report you were waiting for, and pod membership notices.

Optional, each switched in Settings and each with a one-click unsubscribe link: the weekly digest, replies on recommendations, pod activity and product news. The digest and recommendation replies start switched on; the others start off.

Downloading a free guide does not sign you up to any email. To have your address removed from our guide sign-up list, write to contact@remoteworldwide.net.

12. Cookies and browser storage

Essential cookies keep you signed in and protect forms against cross-site request forgery. If you follow someone’s invite link, a cookie remembers the invite for 30 days so it counts when you sign up.

Analytics. Google Analytics and Hotjar set cookies and record how pages are used, including clicks and scrolling. Vercel Analytics measures visits and page speed without cookies. They load on every page.

Browser storage. To keep the dashboard fast we keep a copy of some of your data, such as your settings, profile and tracker, in your browser for up to 24 hours, and clear it when you sign out. Unsent drafts and small preferences are also kept in your browser and stay on your device.

Your browser can block or delete cookies; blocking the essential ones stops sign-in working. Links we share can carry campaign tags (utm_*) so we know which post or email brought someone here.

13. How long we keep it

Account and content: until you delete it or your account.
Voice recordings, transcripts and reports: until you delete the session or your account. Upload pieces and working copies go within 7 days.
Signed-in devices: 30 days after last use, or until you sign the device out.
Confirmation and password reset links: 24 hours and 30 minutes.
Notifications: 90 days.
Guide sign-ups: until you ask us to remove them.
Operational and security logs: a limited period, overwritten as new logs are written.

14. Your rights and controls

Download your data from Settings → Privacy → Download my data. You get a JSON file with your account, content and activity across our services. Uploaded files are not inside it; you can download those from your documents.

Delete your account from Settings → Account. Your account is locked and signed out everywhere at once, then deleted 7 days later; you can cancel before then, and we email you either way. Deletion removes your profile, content, documents, recordings, contacts, pod membership, invites and settings. We keep:

a record of credit purchases and spending with your identity removed, for our accounts;
a note that an account with your ID was deleted, for 90 days, so it cannot be restored by mistake;
your guide sign-up email, if you gave one, until you ask us to remove it;
copies held by our providers under their own terms, such as ElevenLabs.

You can also ask us to:

give you a copy of the data we hold about you;
correct anything that is wrong or incomplete;
delete specific data;
stop optional email (the unsubscribe link does this instantly);
restrict or object to a particular use, where the law gives you that right.

Write to contact@remoteworldwide.net and we will respond within 30 days; we may need to confirm who you are first. If you are unhappy with our answer, you can complain to the Nigeria Data Protection Commission or to the data protection authority where you live.

15. Security

Traffic is encrypted in transit, passwords and one-time links are stored only as hashes, stored documents are private and opened through short-lived links, sessions can be revoked per device, and access to production data is limited to the people who need it. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your data, we will tell you and the relevant authority as the law requires.

16. Where your data goes

We operate from Nigeria, and our providers run in several countries, including the United States and the European Union, so your data may be processed outside the country you live in. When it is, we rely on the safeguards those providers offer, such as standard contractual clauses.

17. Children

The service is not for people under 16. We do not knowingly collect their data, and if we learn that we have, we delete it. If you believe a child has given us information, tell us at contact@remoteworldwide.net.

18. Changes and contact

We update this policy as the product and the law change. The date at the top shows the current version, and we will give reasonable notice of anything that materially affects you. Questions, requests or complaints: contact@remoteworldwide.net.