Privacy Policy
Last updated: June 22, 2026
Questions? Email techcare@remotecloud9.com
1. Introduction
RemoteCloud9 ("we", "us", or "our") operates the website remotecloud9.com (the "Platform"), a remote developer job board. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights over it. By using the Platform you agree to the practices described here. If you do not agree, please stop using the Platform.
2. Who We Are
RemoteCloud9 is the data controller for personal data collected on this Platform. Contact: techcare@remotecloud9.com
3. What Data We Collect
3.1 Candidates
When you create a candidate account or use candidate features, we collect: • Name and email address (provided directly or via Google Sign-In) • Profile information: location, bio, skills, experience, education, phone number • Job search preferences: preferred salary, region, job type • Application data: jobs you apply to, cover letters, application status • Usage data: pages visited, search queries, saved jobs (stored in your browser)
3.2 Employers
When you create an employer account or post jobs, we collect: • Company name, contact name, and email address • Phone number (used for OTP verification) • Job listings you post, including title, description, salary, and requirements • Billing information (if applicable in future paid tiers)
3.3 Google Sign-In
If you sign in using Google ("Sign in with Google"), we receive from Google: • Your name and email address • Your Google account profile picture • A unique Google account identifier We use this data solely to create or identify your RemoteCloud9 account. We do not access your Google Drive, Gmail, Calendar, or any other Google services beyond basic profile information unless you explicitly grant additional permissions. If you later grant Gmail access (for the optional "Scan Emails" feature), we use that access exclusively to identify job-related emails from companies you have applied to, for the purpose of updating your application status. We do not read, store, or share the content of your emails for any other purpose.
3.4 Automatically Collected Data
When you use the Platform, we automatically collect: • IP address and browser type • Pages visited and time spent • Referring URLs • Session cookies (for authentication) We do not use third-party advertising trackers or sell this data.
4. How We Use Your Data
We use personal data for the following purposes: • **Account creation and authentication** — to create your account, verify your identity, and keep you signed in • **Job matching** — to show you relevant jobs based on your profile and preferences • **Application management** — to track the jobs you apply to and display your application status • **OTP verification** — to verify your email or phone when posting jobs or creating accounts • **Email notifications** — to send job alerts you subscribe to, OTP codes, and important account updates • **Platform improvement** — to understand how the Platform is used and fix issues • **Legal compliance** — to comply with applicable laws and respond to legal requests We do not use your data for advertising, profiling for third-party commercial purposes, or selling to data brokers.
5. Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA) or UK, our legal basis for processing your data is: • **Contract performance** — processing necessary to provide the services you have requested • **Legitimate interests** — improving the Platform, preventing fraud, and ensuring security • **Consent** — where you have explicitly opted in (e.g. email newsletters, Gmail access) • **Legal obligation** — where required by law You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
6. Data Sharing
We do not sell your personal data. We share data only in the following limited circumstances: • **Employers** — when you apply to a job, the employer sees your name, email, and any cover letter or resume you submit • **Candidates** — employers' job listings are public; employer contact details are not shared with candidates unless the employer chooses to include them in a listing • **Service providers** — we use trusted third-party services to operate the Platform: - Resend (transactional email delivery) - Redis (caching for OTP and session data) - Google OAuth (sign-in) - Azure OpenAI (AI cover letter and interview prep features) These providers act as data processors and are bound by data processing agreements. • **Legal requirements** — if required by law, court order, or to protect rights and safety
7. Data Retention
We retain your data for as long as your account is active or as needed to provide services. • **Candidate accounts** — retained until you request deletion • **Employer accounts and job listings** — retained until you request deletion or close your account • **OTP data** — deleted within 10 minutes of generation • **Application data** — retained until either party deletes their account • **Email logs** — retained only as long as needed for debugging, then deleted You can request deletion of your account and data at any time (see Section 9).
9. Your Rights
Depending on your location, you may have the following rights: • **Access** — request a copy of the personal data we hold about you • **Correction** — request correction of inaccurate data • **Deletion** — request deletion of your account and personal data (see remotecloud9.com/data-deletion) • **Portability** — request your data in a machine-readable format • **Restriction** — request that we restrict processing of your data • **Objection** — object to processing based on legitimate interests • **Withdraw consent** — withdraw any consent you have given at any time To exercise any of these rights, email us at techcare@remotecloud9.com. We will respond within 30 days. If you are in the EEA or UK and believe we have violated your rights, you have the right to lodge a complaint with your local data protection authority.
10. Security
We take reasonable technical and organisational measures to protect your personal data, including: • HTTPS encryption for all data in transit • Hashed passwords (PBKDF2) — we never store plaintext passwords • JWT-based authentication with short-lived tokens • OTPs stored in Redis with short TTLs, not in our main database • Access controls limiting which staff can access production data No system is completely secure. If you suspect a security issue, please contact techcare@remotecloud9.com immediately.
11. Children's Privacy
The Platform is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.
12. International Transfers
Your data may be processed in countries other than your own, including India (where our servers are hosted) and the United States (where some of our service providers operate). Where we transfer data outside the EEA or UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.
13. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by displaying a notice on the Platform. The "Last updated" date at the top of this page reflects when the policy was last revised. Continued use of the Platform after changes constitutes acceptance of the updated policy.
14. Contact Us
For any privacy-related questions, requests, or complaints: Email: techcare@remotecloud9.com Support: remotecloud9.com/contact We aim to respond to all requests within 30 days.