Privacy Policy

Last updated: 1 March 2026

Remote& | AI ("Remote&", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our platform. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

1. Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our services, and information from third parties.

Information You Provide

• Account data: Name, email address, company name, job title, and password when you register for an account.
• Employee data: Personal and employment information you enter for your workforce, including names, national identification numbers, bank account details, salary information, and employment records.
• Communications: Messages, feedback, and other content you send to us.
• Payment information: Billing details processed through our secure payment providers.

Information Collected Automatically

• Usage data: Pages visited, features used, time spent on the platform, and navigation paths.
• Device data: Browser type, operating system, IP address, device identifiers, and referring URLs.
• Cookies and similar technologies: See our Cookie Policy for details.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our platform and services.
• Process payroll and HR transactions on your behalf.
• Comply with legal obligations and regulatory requirements in applicable jurisdictions.
• Communicate with you about your account, updates, and support.
• Improve and develop new features and functionality.
• Detect and prevent fraud, abuse, and security incidents.
• Analyze usage patterns to enhance user experience.

3. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing, we rely on one or more of the following:

• Contract performance: Processing necessary to deliver the services you have contracted for.
• Legal obligation: Processing required to comply with applicable laws and regulations.
• Legitimate interests: Processing for our legitimate business interests, such as improving our services and preventing fraud, where these interests are not overridden by your rights.
• Consent: Where you have given your explicit consent for a specific processing activity.

4. How We Share Your Information

We do not sell your personal data. We may share information with:

• Service providers: Third-party vendors who help us operate our platform, including cloud hosting providers, payment processors, and communication services. All service providers are bound by data processing agreements.
• Compliance purposes: Government authorities, social insurance agencies, and regulatory bodies as required by law in the jurisdictions where you operate.
• Business transfers: In connection with a merger, acquisition, or sale of all or part of our business, subject to appropriate confidentiality obligations.
• Legal requirements: When required by law, court order, or other legal process.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. We also retain information to comply with legal obligations, resolve disputes, and enforce agreements. Employment and payroll records may be retained for the periods required by applicable labor and tax laws in each relevant jurisdiction.

When you close your account, we will delete or anonymize your personal data within 90 days, except where retention is required by law.

6. Data Security

We implement industry-standard technical and organizational measures to protect your information, including:

• Encryption of data in transit using TLS 1.2 or higher and at rest using AES-256 encryption.
• Role-based access controls and multi-factor authentication for all administrative access.
• Regular security assessments, penetration testing, and vulnerability scanning.
• Tamper-evident audit logs retained for a minimum of 24 months.
• A documented incident response plan with breach notification procedures.

In the event of a personal data breach, we will notify affected parties and relevant supervisory authorities as required by applicable law.

7. International Data Transfers

We store primary data within secure, compliant regions. Where international transfers are required, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities and additional technical measures such as encryption.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data where there is no compelling reason for continued processing.
• Portability: Receive your data in a structured, commonly used, machine-readable format.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at tech@remoteand.com. We will respond within 30 days.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our platform before changes take effect. The date at the top of this policy reflects the most recent update.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: tech@remoteand.com
• Website: remoteandai.com/contact