Skip to content
RemoteBoard

Privacy Policy

Last updated October 14, 2026

This Privacy Policy explains how personal data is processed when you use remoteboard.com (the "Service"). It applies to candidates, employers and anyone who visits the site.

Who is responsible for your data

The controller of your personal data is the administrator of the remoteboard.com service. You can reach us about any privacy matter at [email protected].

Data we process

When you browse

  • Server logs. IP address, browser type, requested page, referring page, date and time. These are used for security, fault finding and abuse prevention.
  • View and apply-click events. When you view a job or click "Apply on company site", we record the event with the job, the time and the country derived from your IP address. The IP address itself is not stored with these events. Employers see these figures only in aggregate form.
  • Analytics. We measure site usage with analytics that do not use cookies and do not build a profile of you across sites.

When you create a candidate account

  • Email address.
  • Password, stored only as a one-way hash. We never see or store your password in readable form.
  • Job alerts you create (search filters, frequency) and saved jobs.
  • Email confirmation status and records of alert emails sent, opened links and unsubscribes.

When you use the Service as an employer

  • Name and email address of each team member, and their role in the team.
  • Company profile details you provide (company name, logo, description, careers page, ATS board address).
  • Job posts you publish and their statistics.
  • Billing data: billing contact, company name and tax identification number for invoices, plan, invoices and payment status. Card details are entered directly with our payment provider and are not stored by us. We receive only limited information such as the card brand, last four digits and expiry date.

Job data from company career boards

Jobs we display come from the public career boards of companies, published by those companies for display. This data is about job openings, not about candidates. It may include the name of a hiring contact if the company chose to publish it. A company can ask us to stop displaying its jobs by writing to [email protected], and we remove them within 24 hours.

Why we process data and on what legal basis

We process personal data under Article 6 of the General Data Protection Regulation (GDPR):

Purpose Legal basis
Creating and running your account, sending alerts you set up, providing employer plans Performance of a contract, Art. 6(1)(b)
Billing, invoices and keeping accounting records Legal obligation, Art. 6(1)(c)
Security, fraud and abuse prevention, server logs Legitimate interests, Art. 6(1)(f)
Aggregated view and apply-click statistics for employers Legitimate interests, Art. 6(1)(f)
Displaying public job data from company career boards Legitimate interests, Art. 6(1)(f)
Establishing, exercising or defending legal claims Legitimate interests, Art. 6(1)(f)

We do not use your data for automated decisions that have legal or similarly significant effects on you, and we do not sell personal data.

Who receives your data

We share data only with service providers who help us run the Service, under contracts that require them to protect it and use it only on our instructions. We describe them by category:

  • Hosting provider in the EU, which stores the Service and its database.
  • Payment provider, which processes subscription payments, including 3D Secure authentication.
  • Email delivery provider, which sends account emails, codes and job alerts.

We may also disclose data where the law requires it, for example to public authorities acting under a lawful request.

When you click "Apply on company site", you leave RemoteBoard and go to the company's own site or applicant tracking system. Whatever you submit there is processed by that company under its own privacy policy.

International transfers

Our main data storage is in the European Union. If a service provider processes data outside the European Economic Area, we rely on the European Commission's standard contractual clauses or another valid transfer mechanism under the GDPR, together with additional safeguards where needed.

How long we keep data

  • Candidate accounts: while the account is active. When you delete your account, your alerts and saved jobs are deleted at once and account data within 30 days, except where we must keep something by law.
  • Employer accounts and job posts: while the account is active, then up to 30 days after closure.
  • Billing records and invoices: for the period required by tax and accounting law, usually up to 10 years.
  • Server logs: up to 90 days, unless needed to investigate a specific security incident.
  • View and apply-click events: up to 25 months, then kept only as aggregated figures.

Your rights

Under the GDPR you have the right to:

  • access your personal data and receive a copy,
  • correct inaccurate data,
  • erase your data,
  • restrict processing,
  • receive your data in a portable format,
  • object to processing based on legitimate interests,
  • withdraw consent where processing is based on consent, without affecting earlier processing.

You can delete your account and alerts in your account settings at any time. For any other request, email [email protected] from the address linked to your account. We reply within one month.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work.

Cookies

We use only strictly necessary cookies. We do not use advertising cookies or analytics cookies. Details are in our Cookie Policy.

Security

We protect data with encrypted connections, hashed passwords, access limited to people who need it, role-based access inside employer teams and regular backups. No system is completely secure, but we work to keep risks low and to respond quickly to incidents.

Children

The Service is not intended for people under 16. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, write to [email protected] and we will delete it.

Changes to this policy

We may update this policy when the Service or the law changes. The date at the top shows the latest version. If a change significantly affects how we process your data, we will tell account holders by email before it takes effect.

Contact

Questions about this policy or your data: [email protected].