Privacy Policy

1. Data we collect

We collect data you give us directly and data generated by using the platform:

• Account data: name, email, password hash, country of residence, account type (candidate or employer).
• Profile and application data: resumes, work history, skills, portfolio links, cover letters, salary expectations and right-to-work status.
• Employer data: company name, domain, billing contact, job postings and hiring team members.
• Payment data: processed by our payment providers; we store only the last four digits of a card or a transaction reference, never full card numbers.
• Usage data: pages viewed, searches, device and browser type, IP address and approximate location.
• Cookies and similar technologies: see our Cookie Policy.

2. How we use it

• Operating the marketplace: matching candidates to roles, processing applications and enabling messaging.
• Verifying identity and employer legitimacy to keep the platform trustworthy.
• Powering AI features such as resume rewriting, match scoring and applicant ranking.
• Billing employers for job postings and subscription plans.
• Sending service emails (application updates, security alerts) and, with consent, marketing emails.
• Detecting fraud, abuse and violations of our Terms of Service.
• Complying with tax, employment and payroll-adjacent legal obligations.

3. Legal bases (GDPR / UK GDPR)

For users in the UK and EEA, we rely on the following legal bases:

• Contract: processing needed to create your account and deliver the marketplace service.
• Legitimate interests: fraud prevention, platform security, and improving matching quality, balanced against your rights.
• Consent: marketing emails, non-essential cookies, and optional profile enrichment features.
• Legal obligation: tax records, responding to lawful requests from authorities.

4. Sharing with employers

When you apply to a role, we share your application materials (resume, cover letter, profile, and any assessment results) with the hiring employer and its authorised hiring team members. Employers may not use this data for purposes unrelated to hiring, and may not resell or share it with third parties. We never share your contact details with an employer before you submit an application.

We also share limited data with service providers who help us run the platform: cloud hosting, email delivery, payment processing, identity verification and analytics providers, each bound by a data processing agreement.

5. International transfers

Global Remote Connect operates across the US, Canada and the UK, and our infrastructure providers may process data in other countries. When we transfer personal data from the UK or EEA to a country without an adequacy decision, we rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, plus supplementary technical and organisational safeguards such as encryption in transit.

6. Retention

• Active account data is retained for as long as your account exists.
• Candidate profiles and applications are retained for 24 months after last activity, then deleted or anonymised unless you request earlier deletion.
• Billing records are retained for 7 years to satisfy tax and accounting obligations.
• Security logs are retained for 12 months.

7. Your rights

UK and EEA residents have the right to access, rectify, erase, restrict, and port their data, to object to processing based on legitimate interests, and to withdraw consent at any time. You can also lodge a complaint with the UK Information Commissioner's Office or your local EU data protection authority.

California residents have rights under the CCPA/CPRA, including the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information (Global Remote Connect does not sell personal information). We do not discriminate against you for exercising these rights.

Canadian residents may exercise comparable access and correction rights under PIPEDA and applicable provincial law.

To exercise any of these rights, email hello@globalremoteconnect.com and we will respond within 30 days.

8. Children

Global Remote Connect is intended for people of working age in the US, Canada and the UK. We do not knowingly collect personal data from anyone under 16. If we learn we have collected such data, we will delete it promptly.

9. Contact

Questions about this policy or our data practices can be sent to hello@globalremoteconnect.com or by mail to Remote-first — registered in Wilmington, DE, USA.