Privacy Policy

Effective Date: January 11, 2026

Global and Remote ("we," "our," or "us") operates the Global and Remote mobile application and web platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

1. Information We Collect

1.1 Personal Information

We collect the following personal information that you provide directly to us:

• Account Information: Full name, email address, phone number, and company name
• Authentication Data: Password (stored only as a secure bcrypt hash, never in plain text)

1.2 User-Generated Content

When you use our Service, you may create:

• Interview request messages and communications
• Portal configurations (portal name, subdomain, logo, selected candidates)
• Favorites lists (candidates you have saved)

1.3 Usage Data

We automatically collect certain information about how you use the Service:

• Login timestamps and session activity
• Feature usage patterns
• Error logs and performance data

1.4 Information We Do NOT Collect

2. How We Use Your Information

We use your personal information for the following purposes:

• Provide the Service: To create and manage your account, authenticate your identity, and deliver core functionality
• Communications: To send interview request notifications, service updates, and respond to your inquiries
• Security: To protect against unauthorized access, fraud, and abuse
• Improvement: To analyze usage patterns and improve our Service
• Legal Compliance: To comply with applicable laws and regulations

3. How We Share Your Information

We share your information only in the following circumstances:

3.1 Service Providers

We use trusted third-party services to operate our platform:

Provider	Purpose	Data Shared
Airtable	Database and candidate management	User profiles, portal data
Resend	Email delivery	Email addresses, message content

3.2 Other Disclosures

• With Your Consent: When you explicitly authorize sharing
• Legal Requirements: When required by law, court order, or government request
• Protection of Rights: To protect our rights, privacy, safety, or property
• Business Transfers: In connection with a merger, acquisition, or sale of assets

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in Transit: All data transmitted between your device and our servers uses HTTPS/TLS encryption
• Password Security: Passwords are hashed using bcrypt with 10 rounds of salting
• Session Tokens: Generated using 32 random bytes and SHA-256 hashing
• Session Expiration: Sessions automatically expire after 7 days
• Rate Limiting: Authentication endpoints are protected against brute-force attacks
• Secure Logout: Sessions are immediately invalidated upon logout

5. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy:

• Account Data: Retained while your account is active, plus 30 days after deletion request
• Session Data: Automatically deleted after 7 days or upon logout
• Usage Logs: Retained for up to 90 days for security and debugging purposes
• Interview Requests: Retained for 2 years for business record-keeping, then anonymized

6. Your Rights and Choices

6.1 Access and Portability

You have the right to request a copy of the personal information we hold about you. Contact us at support@globalandremote.com to request your data.

6.2 Correction

You may update or correct your account information at any time through the app settings or by contacting us.

6.3 Deletion

You have the right to request deletion of your account and personal data:

• Request deletion from within the app via Settings
• Email your request to support@globalandremote.com

Upon receiving a deletion request, we will:

• Delete or anonymize your user account and profile data
• Invalidate all active session tokens
• Anonymize your interview requests (removing personally identifiable information)
• Delete or transfer your created portals (per your preference)
• Process your request within 30 days
• Send a confirmation email upon completion

7. Regional Privacy Rights

7.1 European Union Users (GDPR)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation:

• Legal Basis: We process your data based on contract performance (to provide the Service) and legitimate interest (to improve and secure the Service)
• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interest
• Right to Lodge a Complaint: File a complaint with your local data protection authority

We do not engage in automated decision-making or profiling that produces legal effects.

7.2 California Users (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to Know: Request information about the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do NOT sell personal information, so this right does not apply
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights

Categories of Personal Information Collected: Contact information (name, email, phone), user-generated content, identifiers (account ID), and usage data.

8. Children's Privacy

Our Service is designed for business professionals and is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at support@globalandremote.com.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes:

• We will update the "Effective Date" at the top of this policy
• We will notify you via email or in-app notification
• Continued use of the Service after changes constitutes acceptance of the updated policy

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: