Privacy Policy

RemoteHunt ("Service", "we", "us") is operated by Egor Aizen, an individual based in Israel, who decides how your personal data is used and is responsible for it (the "controller"). You can reach us at privacy@remotehunt.app.

• Government ID numbers or identity documents
• Payment card details (Creem, our Merchant of Record, handles payment)
• Background checks or references

Please leave sensitive details — health, religion or beliefs, political views, trade union membership, sexual orientation, ethnic origin or a photo — out of the resume you upload. We don't need them, our matching is not designed to use them, and employers or recruiting agencies may see your resume (Section 7).

No law requires you to give us personal data. Without an email address we can't create your account, and without a resume or profile we can't match jobs to you.

• To provide the Service — reading your resume; finding, scoring and explaining jobs; generating the documents you ask for; running your account and application tracker. Basis: our contract with you.
• Introducing you to employers and recruiting agencies — sharing your profile and resume with employers and agencies that may want to hire you (Section 7). Basis: our legitimate interest, and yours, in helping you get hired; you can object at any time, and we then stop. Where the law of your country requires your consent for this, we ask for it first.
• Emails about your search — a digest on days with new strong matches, and a few others (a welcome, your first match, reminders, and now and then a question from our founder about how RemoteHunt worked for you). You can turn them off at any time in Settings or with the link in any of them. Basis: our legitimate interest in helping your search; you can object at any time.
• Service emails — confirming your address, and emails about a purchase, a withdrawal or a refund. Basis: our contract with you.
• Payments and records — selling and managing the pass, and keeping purchase records. Basis: our contract with you, and tax and accounting law.
• Security — protecting accounts, preventing abuse and fraud, and enforcing our Terms. Basis: our legitimate interest in a safe service.
• Improving RemoteHunt — statistics without cookies, error reports, which channels bring people to us, what is done in the product, and short replays of the page when an error happens; and training and testing our own matching models on profiles with names and contact details removed. Basis: our legitimate interest in improving the Service (you can object at any time); for the optional statistics, in the EU, the EEA, the UK and Switzerland, your consent (Section 11).
• Quality checks — when we change the matching, we re-run it on a small sample of real profiles and compare the results, so that a change doesn't make matching worse. Names and contact details (email address, phone number, profile links) are removed from the sample. It is kept in our private storage and used only for this. Basis: our legitimate interest in accurate matching.
• Analytics cookies — only if you accept them (Section 11). Basis: your consent.
• Answering you — replying to messages you send us. Basis: our legitimate interest, or our contract with you.

RemoteHunt decides automatically which job postings to show you and in what order. Nobody reviews these results before you see them.

• What it uses: your resume and profile — roles, level, country, languages, skills, experience, salary expectations and job preferences — and the jobs you like or dismiss.
• Filters: a posting is hidden when we read that it cannot suit you — the employer hires only in countries you are not in, asks for a language you don't list, is for a different profession or level, pays well below your salary expectation, comes from a staffing agency, or looks like a scam or not a real vacancy. If you dismiss two jobs from the same company, we also hide its other jobs.
• Score: of the remaining postings, the ones closest to your profile are scored from 0 to 100 by AI models — on role fit, work format, compensation, domain and company — with an explanation you can read on each job.
• Effect: filtered postings don't appear in your feed, and the rest are ranked by match. This only affects what we show you: it doesn't stop you from applying anywhere. Filtering and scoring send nothing to employers; sharing your profile with employers and agencies is a separate step, described in Section 7.
• Your control: you can change the details the matching uses in your profile and Settings at any time, and you can ask for a person to review a result by writing to privacy@remotehunt.app.

To read resumes and job postings, score matches and write text, we send the data each task needs to AI models through OpenRouter (US), a service that passes our requests to model providers. OpenRouter does not store the content of requests by default, and with every request we instruct it to use only providers that, under their own terms, do not train their models on it.

• Google (Gemini models) — our main models. They receive your resume text (with your contact details when they read your resume, or write a tailored resume or cover letter while the OpenAI model below is unavailable), your profile, job postings, your conversations with Ask AI, your messages in the chat on our site (its AI assistant answers them first; see Section 2) and replies to emails we sent you, for a draft answer. Under the paid terms we use, Google does not use this data to train its models; it may keep it for up to 55 days to detect abuse.
• OpenAI — a GPT model writes your cover letters and tailored resumes: it receives your profile (with your contact details for a tailored resume) and the job posting. OpenRouter sends these requests to OpenAI itself, Microsoft Azure or Amazon Web Services, under the rule above. OpenAI also turns your profile into numbers ("embeddings") that let us find the postings closest to it. OpenAI does not use data sent through its API to train its models.
• Other models — when Gemini is unavailable, Ask AI can fall back to a model from Meta (Llama), served by a provider that OpenRouter selects under the rule above. It receives only what Ask AI needs — never your contact details — and that provider's own data policy applies.
• Alibaba (Qwen model) — lays out the text of job postings for easier reading. It receives only the posting as the employer published it, never anything about you, under the no-training rule above.
• TypeSafe (the Jev model) — a model that only rates how well a job fits you and writes no text. Since 24 September 2026 it takes part in scoring matches for a share of accounts: a job it rates a clear poor fit is not scored further and does not appear among your matches. For each job it rates, it receives the same summary of your profile and the job posting as our matching step — never your contact details — under the no-training rule above.

The free resume checker (/resume-checker) works without an account. The resume and job description text you paste or upload there is sent once, over this same OpenRouter path to Google (Gemini), to score that one pair and write the result you see on screen — nothing about it is written to our database or our logs, and nothing is saved once the answer comes back. Only the outcome (a match range and how long it took) is recorded, never the text.

We are based in Israel, which the European Commission recognizes as providing adequate protection for personal data. Our servers and most of our providers are in the United States. Where personal data from the EU, EEA, UK or Switzerland goes to them, we rely on the safeguards they provide — the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

Employers and recruiting agencies that receive your profile (Section 7) may be in any country. Where the law requires a safeguard for sending your data to one of them, we use the European Commission's Standard Contractual Clauses, or rely on the transfer being necessary for the service you signed up for.

• Your account and everything in it (resume, profile, matches, documents, Ask AI conversations, notes): until you delete your account — then it is deleted from our live database at once. We may also delete a free account that has not been used for 24 months, after an email at least 30 days before
• Backups: up to 90 days, then overwritten
• Security log (sign-ins, data downloads, deletions: account id and time, and — until you delete your account — IP address and browser): up to 2 years
• Records of purchases and refunds (order number, amount, dates): up to 7 years, for tax and accounting. Creem, as the seller, keeps its own records
• A refund we still owe you (the order number and dates, and for a resume pack the amount — not your account id, email or country): if you delete your account before we have refunded you, we keep this until the refund is made, so it is not forgotten, and then delete it
• Which employers and agencies received your profile, and when: as long as your account exists, so that we can tell you. What an employer or agency keeps is up to it (Section 7)
• Messages you send us: up to 2 years
• Usage statistics: kept without your account id after you delete your account
• Weekly job emails without an account (your email address, a role and a country): an unconfirmed request for 7 days; a confirmed one until you unsubscribe, the address bounces or is reported as spam, or you create an account — see Section 13
• Chrome extension records (install id and version, and — once you sign in through it — the link to your account and your browser's token hash): see Section 12
• Server logs (which can include IP addresses) and error reports: up to 90 days
• The quality-check sample (Section 4; profiles with names and contact details removed): until we replace the sample; to have your profile removed from it sooner, write to privacy@remotehunt.app

Wherever you live, you can use these rights — the ones the EU General Data Protection Regulation (GDPR) and Israel's Privacy Protection Law give. Most of them work directly from Settings → Privacy:

• Get a copy of your data — the “Download my data” button gives you everything tied to your account as a JSON file you can take to another service: your profile and preferences, the text of the resumes and notes you gave us and the earlier versions of your profile, your matches, the jobs you saved, dismissed or applied to and your notes on them, the documents you generated, your conversations with Ask AI, the emails we sent you and what our email provider reported about them, the answers you tapped in them, your messages to us, your purchases and payment attempts, the security log of your account, how you found us, and the browsers you connected the Chrome extension from. Backups, server logs, error reports, the records Creem keeps as the seller and the quality-check sample (Section 4) are not in the file — write to us for those.
• Correct your data — in your profile and Settings.
• Delete your account — the “Delete my account” button deletes your account and its data at once (Section 9 lists what stays, and for how long).
• Object or restrict — turn off our emails with the link in any of them or in Settings, and ask us to stop or limit any other use of your data.
• Stop sharing with employers and agencies — write to us, and we stop sharing your profile from then on; you can also ask which employers and agencies received it (Section 7).
• Withdraw consent — press “Cookie settings” at the bottom of this page, our home page or our blog, and choose “Reject” (Section 11).
• Ask a person to review an automated matching result (Section 5).
• Complain to a data protection authority — in the EU, EEA or UK, the one where you live; in Israel, the Privacy Protection Authority.

For anything else, or to delete an account you can no longer sign in to, write to privacy@remotehunt.app. We reply within 30 days (the law lets us take up to two more months for a complex request, and we tell you if we do), and we may ask you to confirm the request from your account's email address.

If you live in a US state with a consumer privacy law (for example, California), you may also have the right to know what personal data we collect, use and disclose, to have it deleted or corrected, and to opt out of its "sale" or "sharing". Sharing your profile with employers or agencies that pay us may count as a "sale" under some of these laws; to opt out, write to us as above. We will not treat you differently for using these rights. The data we collect is listed in Section 2, why in Section 4, and who receives it in Section 7.

Some data is kept in your browser. What is needed to run the Service is kept without asking. For everything optional, the rule depends on where your connection comes from, worked out from your IP address: from the EU, the EEA, the UK or Switzerland, nothing optional is stored or sent until you press “Accept” in our cookie banner; from anywhere else, the optional statistics below run unless you press “Reject”. The analytics cookies wait for “Accept” wherever you are.

• Needed to run the Service — sign-in cookies (set by Supabase); a cookie that remembers whether your account has an active pass (up to 120 days); a cookie that remembers your plan for five minutes, so that every page does not have to look it up again; your cookie choice; when you sign in with Google from a link to a page of the Service, a cookie with that page's address for up to 15 minutes, so that you land on it after signing in; a cookie, set only for connections from outside the EU, the EEA, the UK and Switzerland, that records that the optional statistics may run before you answer (until you close your browser); the preferences and drafts you enter; and, if you drop a resume on our home page before signing up, or press sign-up after our free resume check, the file itself for up to 3 hours, so that it is ready once your account exists. Signing out or deleting your account removes all of this from the browser, except your cookie choice, the cookie about where your connection comes from (our servers set it again on every page) and whether you have already seen our languages prompt.
• The chat on our site — if you are signed in, only the number of the newest message you have seen, so the Help button marks an answer as new only once: the conversation belongs to your account. If you are not, a random code that lets your browser find your conversation again. Either is kept in the browser only when the optional storage below is allowed (from the EU, the EEA, the UK or Switzerland, after “Accept”), otherwise only while the tab is open; pressing “Reject” or signing out deletes it.
• Statistics without cookies, for every visitor — Vercel Web Analytics and Speed Insights count page views and measure loading speed, Sentry reports errors (technical details of what broke), and we count visits to our public pages ourselves (which kind of page, and for the first page of a visit the kind of site that sent you and its name — for example “search, google.com” — which blog article it was, if it is one, and whether you scrolled, tapped or typed before the visit was counted, as anonymous daily counts split only by phone, tablet or computer and by a broad region of the world (worked out from your connection), and nothing else); how often the programs of AI assistants (ChatGPT, Perplexity, Claude) fetch our pages, as anonymous daily counts by the program’s name and the page; which button you press on the home page (for example “Sign up free” at the top), as one anonymous daily count per button; the steps on our sign-up and log-in pages (the page opened, Google or email chosen, the form sent or the kind of error, and from which kind of page a sign-up or log-in link was pressed), as anonymous daily counts split only by phone or computer; while we compare two versions of a public page, which version you were shown and what you pressed on it (on a job page: sign-up, our free resume check and whether it returned a result, the company site), as anonymous daily counts per version; and a click on the “Apply on the company site” link on a public job page (which job, when, and the country your connection comes from, as one anonymous row — no IP address, no browser information, no account). None of these stores anything in your browser or profiles individual visitors.
• Which home page you saw (optional) — while we compare two versions of our home page, which one you pressed sign-up on, kept in your browser until your account exists and then saved against it. It is one letter and nothing else.
• How you found us (optional) — the campaign markers described in Section 2, for up to 90 days.
• Product events and visit counting (optional) — what is done in the product, for example starting to sign up, opening a job or pressing Apply, sent to Vercel Web Analytics without cookies, with the page it happened on but never with a file name or an email address; and markers in the open tab that keep a reload from counting as a second visit, or an offer we showed you from counting twice.
• Error replays (optional) — when an error happens, Sentry can keep a short replay of the page with all text and inputs hidden (in about one case in ten); while the tab is open, a session marker stays in your browser.
• Analytics cookies, only with your consent — PostHog, Google Analytics and Microsoft Clarity measure how the product is used, including session replays with sensitive fields masked. None of them loads unless you press “Accept” in our cookie banner.

You can change your answer at any time with “Cookie settings” at the bottom of this page, our home page or our blog. “Reject” stops the optional statistics and deletes the “How you found us” record from your browser; a record already saved against your account stays until you delete the account.

We don't use advertising cookies or retargeting pixels.

The RemoteHunt extension for Google Chrome helps you judge a job posting and apply to it on the page you are already on. It runs only on the job boards and application sites it names (for example LinkedIn, Indeed, Himalayas, Greenhouse, Lever and Ashby) and on remotehunt.app. It never submits an application: it can fill in a form, and you press the site's own button to send it.

On a job page you can ask us to email you new remote jobs like that one, without creating an account. The emails come from RemoteHunt, sent through Resend (Section 7).

You can add RemoteHunt to an AI chat such as ChatGPT or Claude as a connector (how). When you ask that chat about remote jobs, the chat company's servers send us the words its model puts into our tool: a job title, a country, a level or a RemoteHunt job link. They send no account, no name and none of your conversation, and we do not ask for any. We answer with jobs from our public pages.

We keep none of those words. We count each call by chat (read from the program name its request carries), tool and result, and the number of jobs returned; for 40 days we also keep that tally in our cache. The request passes through Vercel and Railway (Section 7) like any other. The links in our answers say they came from the connector, so we can count visits and sign-ups that began there (Section 11). What the chat company does with your conversation is covered by its own privacy policy. You can remove the connector in the chat's settings at any time.

The Service is not intended for anyone under 18. We do not knowingly collect data from minors.

• All data travels over encrypted connections (HTTPS/TLS)
• Our database provider encrypts the data it stores
• Passwords are stored only as hashes, by our sign-in provider
• Only we and people who work for us under a duty of confidentiality, through protected accounts, have access to the data behind the Service
• Backups are kept in private storage for up to 90 days

No system is 100% secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.

We may update this policy. We will post the new version here with its date and, for important changes, tell you by email or in the Service before they take effect.

For privacy questions: privacy@remotehunt.app. For anything else: contact@remotehunt.app.