This Privacy Policy explains how RemoteWorks.pro ("RemoteWorks," "we," "our," or "us") collects, uses, and shares information when you use our Service.
This includes when you access remoteworks.pro, create an account, and use our tools to build and publish a portfolio (the "Service").
This policy applies to all users worldwide, with additional rights for residents of certain jurisdictions as described below.
By using the Service, you acknowledge that you have read and understood this Privacy Policy.
If you do not agree with our practices, please do not use the Service.
1. Information We Collect
Personal Information You Provide
We collect information you provide directly when you interact with our Service:
- Account Information: When you create an account, we collect your name, email address, username, and password. If you sign in via OAuth providers (Google or GitHub), we receive your profile information including name, email, and avatar URL from those services.
- Profile and Portfolio Content: Any information you add to your portfolio including biographical information, work experience, education, skills, project descriptions, links to external profiles, and uploaded images (such as avatars and project screenshots).
- Communications: When you contact us, submit a support request, join the waitlist, or participate in surveys, we collect the information you provide.
- Payment Information: If you subscribe to paid features, our payment processor collects your payment method details. We do not store full credit card numbers on our servers.
Automatically Collected Information
We automatically collect certain information when you access or use the Service:
- Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
- Log Data: IP address, access times, pages viewed, links clicked, referring URLs, and actions taken within the Service.
- Location Information: Approximate geographic location based on IP address (country and city-level).
- Usage Analytics: Feature usage patterns, session duration, interaction data, and performance metrics.
Information from Third Parties
We may receive information about you from:
- OAuth Providers: When you connect your Google or GitHub account, we receive basic profile information as authorized by you.
- Analytics Partners: We may receive aggregated insights and analytics data from our service providers.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To provide, maintain, and operate the Service, including creating and hosting your portfolio, processing uploads, and enabling features.
- Account Management: To create and manage your account, authenticate your identity, and provide customer support.
- Communications: To send you transactional emails (account verification, password resets, security alerts), service announcements, and respond to your inquiries.
- Improvements: To analyze usage patterns, diagnose technical issues, and improve the Service's functionality, security, and user experience.
- Security: To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activities.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests.
- Marketing: With your consent, to send you promotional communications about new features, products, or services. You can opt out at any time.
Legal Bases for Processing (EEA/UK/Switzerland)
If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:
- Contract: Processing necessary to perform our contract with you (providing the Service).
- Legitimate Interests: Processing necessary for our legitimate interests (security, fraud prevention, service improvement) that do not override your rights.
- Consent: Processing based on your explicit consent (marketing communications, optional features).
- Legal Obligation: Processing necessary to comply with legal requirements.
3. Cookies and Tracking Technologies
We use cookies and similar technologies to operate the Service:
- Essential Cookies: Required for authentication, session management, security, and basic functionality. These cannot be disabled.
- Analytics Cookies: Help us understand how users interact with the Service, measure performance, and identify areas for improvement.
- Preference Cookies: Remember your settings and preferences (such as theme choice).
Managing Cookies
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Service functionality.
We respect Do Not Track (DNT) browser signals and honor the Global Privacy Control (GPC) where applicable.
4. Data Sharing and Disclosure
We do not sell your personal information to third parties.
We may share your information in the following cases:
- Service Providers: We share data with trusted third-party vendors who assist us in operating the Service, subject to confidentiality obligations. These include hosting providers (Vercel), database services (Supabase), email delivery, and analytics platforms.
- Public Portfolio Content: Information you include in your public portfolio is accessible to anyone on the internet. This includes your name, bio, projects, and avatar. Your subdomain (username.remoteworks.pro) is publicly accessible.
- Legal Requirements: We may disclose information when required by law, subpoena, court order, or government request, or to protect our rights, property, or safety or that of others.
- Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the successor entity, subject to this Privacy Policy.
- With Your Consent: We may share information with your explicit consent for purposes not described here.
5. Third-Party Services
The Service integrates with and relies on the following third-party services:
- Supabase: Database hosting, authentication, and file storage. Data is stored in Supabase's infrastructure. Supabase Privacy Policy
- Vercel: Application hosting and content delivery. Vercel Privacy Policy
- Google OAuth: If you sign in with Google, your use is subject to Google's Privacy Policy
- GitHub OAuth: If you sign in with GitHub, your use is subject to GitHub's Privacy Statement
These services have their own privacy policies. We encourage you to review them.
6. International Data Transfers
RemoteWorks is operated from the United States.
If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.
European Data Transfers
For transfers from the EEA, UK, or Switzerland, we rely on appropriate safeguards including Standard Contractual Clauses approved by the European Commission.
By using the Service, you consent to the transfer of your information as described in this policy.
7. Data Retention
We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy:
- Account Data: Retained while your account is active and for a reasonable period thereafter to comply with legal obligations.
- Portfolio Content: Retained until you delete it or delete your account.
- Analytics Data: Retained in aggregate form for up to 24 months.
- Backup Data: May persist in our backup systems for up to 90 days after deletion.
Account Deletion
You can delete your account at any time from Settings.
Upon deletion, we will remove your portfolio and personal data, except as required to comply with legal obligations, resolve disputes, or enforce our agreements.
8. Security
We implement industry-standard security measures to protect your information:
- Encryption in transit (TLS/HTTPS) and at rest for sensitive data
- Secure password hashing using modern algorithms
- Row-level security (RLS) in our database to prevent unauthorized access
- Regular security audits and monitoring
- Access controls limiting employee access to personal data
Important Security Notice
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
If you believe your account has been compromised, please contact us immediately.
9. Children's Privacy
The Service is not intended for users under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children. If we learn that we have collected information from a child under the applicable age, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us.
10. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data.
- Portability: Request a copy of your data in a portable format.
- Restriction: Request restriction of processing in certain circumstances.
- Objection: Object to processing based on legitimate interests.
- Withdraw Consent: Withdraw consent where processing is based on consent.
How to Exercise Your Rights
To exercise these rights, contact us at me@remoteworks.pro.
We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.
Self-Service Options: You can update your profile, change or remove your avatar, export your portfolio, and delete your account directly from your Settings page at any time.
11. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: You may request information about the categories and specific pieces of personal information we have collected, the purposes for collection, and with whom we share it.
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
- Right to Correct: You may request correction of inaccurate personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
- Right to Opt-Out of Sale/Sharing: We do not sell your personal information or share it for cross-context behavioral advertising.
How to Make a California Privacy Request
To make a request, email me@remoteworks.pro with "California Privacy Request" in the subject line.
You may designate an authorized agent to make requests on your behalf.
Categories of Information Collected
We collect the following categories of information:
- Identifiers: Name, email, username, IP address
- Internet Activity: Browsing history, interactions with the Service
- Geolocation Data: Country/city level
- Professional Information: Work history you provide
- Inferences: Drawn from the above information
12. European Privacy Rights (GDPR)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
- All rights listed in Section 10 above, plus the right to lodge a complaint with your local data protection authority.
- The right to object to automated decision-making and profiling. We do not currently make decisions based solely on automated processing that produce legal effects.
Data Controller
RemoteWorks.pro is the data controller for personal data collected through the Service.
For questions about how we process your data, contact us at me@remoteworks.pro.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:
- We will update the "Last Updated" date at the top of this policy.
- For significant changes, we will notify you via email or through a notice on the Service before the changes take effect.
- Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.
We encourage you to review this policy periodically to stay informed about how we protect your information.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: me@remoteworks.pro
- Contact Form: remoteworks.pro/contact
We will respond to all inquiries within a reasonable timeframe. For privacy-related requests, we aim to respond within 30 days.