Privacy Policy
Scope
Welcome to Remote Crew. The commercial company Remote Crew Lda. operates this website, the Remote Crew platform at app.remotecrew.io, and the recruitment services provided through them (together, the "Services"). This policy explains how we collect, use, share and protect personal data across all of them. By using the Services, you agree that your personal data may be processed under the terms described below. The Services are used by professionals who wish to offer software engineering services to customers who wish to hire them.
Who we are
Remote Crew Lda is the data controller for the personal data described in this policy. You can reach us at Remote Crew Lda, R. Diogo de Silves 33, 1400-107 Lisboa, Portugal, by phone on (+351) 910 830 152, or by email at hello@remotecrew.io. For privacy questions or to exercise any of the rights below, please write "Privacy" in the subject line.
Personal Data
Candidates
Data collection
The application process for Remote Crew's candidates consists of an analysis of technical, social and professional skills. In this process, the candidate may need to provide the following information: name, contact details, country and location, work experience, education, skills, certifications, languages, CV, photography and professional portfolio. Where the candidate registers for an account on the platform, we also collect the credentials used to sign in, which we store only as salted cryptographic hashes, together with account settings, communication preferences and a record of consents given. We may also collect data from external services when shared by the candidate.
We do not ask for special category data such as health, religion, ethnicity, political opinions or trade union membership, and we ask candidates not to include it in a CV or profile.
Use of information
The data collected will be used to process the candidate's request to join the Remote Crew professionally, to operate and secure their account, and to match them against open roles. Data can also be used to create a candidate profile to share with customers. A profile is shared with a specific customer only where the candidate has asked to be put forward or has otherwise agreed to it.
Clients
Data collection
The process of entering project details on the Remote Crew website or platform requires the collection of some data that describe them, so that Remote Crew can find the candidate that best suits the project. In this process, the client may need to provide the following information: company name, contact details, job title, district, job requirements information, budget or salary range, and feedback on candidates. We may also collect any other data that customers voluntarily share with Remote Crew through the Services or any other channel. Remote Crew also reserves the right to use publicly available business information about the client in question.
Use of information
The data collected will be used to process the client's request, namely to analyze the job requirements and search for candidates with a matching profile. Contact information may also be used for marketing, event sharing or other promotions. According to the legislation in force, the customer can always opt-out of non-essential communication for the use of company services.
Accounts and platforms you connect
Data collection
Parts of the Services let you connect an account you hold with another provider, so that your information flows into Remote Crew instead of being retyped. We never access an external account unless you start the connection yourself and authorise it on the provider's own permission screen. Connecting an account is always optional, and declining does not affect how we treat you in our hiring process.
What a connection returns depends on the provider and on the permissions you grant. Where it is a professional or developer platform, it may include basic profile information, work experience, education, skills, certifications, courses and languages, projects, publications, awards and volunteering, recommendations and endorsements, the contact details held on that account, job-seeking preferences and application history, and information about your direct professional connections.
We request only what is relevant to hiring. We do not request, and will not accept, data that serves no hiring purpose, including private messages, search history, advertising and ad-targeting data, sign-in and security history, purchase or billing history, online learning activity, identity verification records, and private notes you have made about other people.
Use of information
We use data from a connected account for one purpose: to help you find remote work through Remote Crew. That means populating and keeping your profile up to date, matching you against open roles, and preparing the profile we share with a customer when you ask us to put you forward. Connection information is used only to identify possible referral paths and warm introductions; we do not contact those people on the basis of it, build profiles of them, or share it with customers or anyone else. We do not repurpose any of this data for anything else without asking you first.
Limits we place on ourselves
We will never sell, rent or license data obtained from a connected account, or use it for advertising or ad targeting. We will never use it to train machine learning or generative AI models. We will never use it, or allow it to be used, in any way that facilitates bias or discriminatory practices. We will never attempt to re-identify data that has been de-identified or anonymised. We will never give a third party standalone access to a provider's interface or credentials, or redistribute the data as a product, dataset or derivative work.
Information from a connected account is self-reported by you, and we present it as such: we will never state or imply that a provider has verified or confirmed its accuracy. Nor will we state or imply that Remote Crew is sponsored or endorsed by, or affiliated with, any provider whose account you connect. Each provider is a separate, independent controller of the data it holds about you, under its own privacy policy.
Withdrawing permission and deletion
Providers commonly limit how long an authorisation stays valid. We honour whatever limit the provider sets and ask you to re-authorise when it expires; we never attempt to extend or work around it. You can withdraw your permission at any time, either in the provider's own settings — under the section listing the applications permitted to access your account — or by emailing us and asking us to disconnect the account. Withdrawing permission does not affect the lawfulness of processing carried out beforehand.
We delete all data obtained from a connected account immediately on your request, and when you close your Remote Crew account, except where a law or a binding order from a public authority requires us to retain a specific record, in which case we retain only that record for only as long as required. If your authorisation lapses and you do not renew it, we stop retrieving data and delete what we hold within 30 days, other than details you have separately entered into, or confirmed on, your Remote Crew profile.
Website and platform usage
When you use the website or the platform we collect your IP address, approximate location derived from it, browser and device type, operating system, referring URL, the pages and features you use and how you interact with them, and the date and time of access. On the platform we also keep security and audit logs of significant actions taken in an account. On the website most of this is collected through cookies and similar technologies.
Legal bases for processing
Under the GDPR we must have a legal basis for each purpose we process personal data for. We rely on performance of a contract, or steps taken at your request before entering into one, to operate your account, process applications and match candidates to roles. We rely on your consent to import data from an account you connect, to share your profile with a specific customer, to set non-essential cookies, and to send marketing where consent is required. We rely on our legitimate interests to respond to enquiries, to market to existing business contacts, to understand and improve the Services, and to keep them secure and free of fraud and abuse. We rely on compliance with a legal obligation for accounting, tax and lawful requests. Where we rely on legitimate interests, we have assessed that they are not overridden by your rights and freedoms, and you may object at any time.
Automated decision-making
We use automated matching to rank and surface candidates whose skills and preferences fit an open role. This only produces a shortlist: every decision about whether to put a candidate forward, and every hiring decision, is made by a person. We do not make decisions producing legal or similarly significant effects based solely on automated processing. If you want to know why you were or were not matched to a role, ask us and we will tell you.
User Rights
Remote Crew considers the right to the protection and privacy of personal data to be fundamental. Users of services provided by Remote Crew have the following rights with respect to personal data:
Right of access: users have the right to access personal data we hold about you (subject to certain limitations). The first copy is provided free of charge. To do this, contact us through the contact details in the bottom of this page.
Right to alter: users have the right to rectify their personal data if they are incorrect or outdated and / or to complete them if they are incomplete. Most data can be corrected directly in your platform account.
Right to be forgotten: in some cases, users have the right to have their personal data erased or deleted. Please note that this is not an absolute right, as we may have legal or legitimate grounds for the retention of your personal data. If you want us to delete your data, please contact us through the contact details in the bottom of this page.
Right to object: users have the right to object to the processing of their data at any time when such treatment is based on a legitimate interest. Where you object to direct marketing, we will stop, with no exceptions.
Right to data portability: users have the right to move, copy or transfer the data from our database to another. This applies only to data you have provided, where the processing is based on your consent or contract and the processing is performed by automated means.
Right to withdraw consent: where we rely on your consent, users have the right to withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.
Right to complain to the supervisory authority: users have the right to contact their country's data protection authority in order to file a complaint against Remote Crew privacy and data protection practices. Please do not hesitate to contact us for the above data before submitting any complaint to the competent data protection authority, namely the National Data Protection Commission (CNPD).
Right to restriction: users have the right to request the restriction of the processing of their data. This right means that our treatment of your data is restricted, so we can store them, but we can not use them or submit to additional treatment.
Right to disable cookies: users have the right to disable Cookies. Internet search engine settings are usually set to accept cookies by default, but you can easily adjust them by changing the settings of your search engine.
We respond to requests within one month. If a request is complex, we may extend that by a further two months and will tell you why within the first month. We may need to verify your identity before acting.
Sharing your data
We do not sell your personal data. We share a candidate's profile with a prospective customer when the candidate has asked to be put forward or has otherwise agreed to it; that customer then becomes an independent controller of the data under its own privacy policy. We share data with the service providers described below, who process it on our behalf under a written data processing agreement; with lawyers, accountants and auditors where necessary and under a duty of confidentiality; where the law requires it, including to comply with a court order or lawful request or to establish, exercise or defend legal claims; and, if Remote Crew is involved in a merger, acquisition or sale of assets, with the acquiring entity, which will remain bound by this policy or give you notice of any change.
Service providers
We rely on third parties to run the Services, each handling data only on our documented instructions: cloud hosting, database and file storage providers for the website and platform; Prismic for editorial content; Google Analytics and Google Tag Manager, Mixpanel and MouseFlow for analytics and product insight; Pipedrive for client relationships and leads; MailerLite and transactional email providers for newsletters and account notifications; Cal.com for booking calls; and Slack, which receives contact and enquiry submissions so our team can respond. Analytics and marketing tools are loaded only where you have accepted the relevant cookie category.
International transfers
Remote Crew is based in Portugal and we store data in the European Union wherever we can. Some of the providers above are established in, or process data from, the United States and other countries outside the European Economic Area. Where data is transferred outside the EEA, we rely on an adequacy decision of the European Commission where one exists, or otherwise on the European Commission's Standard Contractual Clauses together with any additional safeguards the transfer requires. You can request a copy of the safeguards we use by emailing us.
How long we keep your data
We keep account data for as long as your account is open, and delete or anonymise it within 30 days of closure apart from records we are required to keep. Candidate profiles and applications are kept while the profile is active and for up to 24 months after your last interaction with us, so we can tell you about suitable roles; we delete sooner if you ask. Data from connected accounts is kept as described above. Client and prospect records are kept for the duration of the relationship and up to 24 months afterwards. Contract, invoicing and accounting records are kept for the period Portuguese law requires, currently 10 years. Security and audit logs are kept for up to 12 months, and analytics data generally for up to 14 months. When a retention period ends we delete the data or irreversibly anonymise it.
External websites
The website and the platform may contain links to other services that are not operated or controlled by Remote Crew, including professional networks, code hosting services and customer websites. Information that users share with external websites will be subject to the Terms and Conditions and Privacy Policy of those websites and not by this policy.
Security
Remote Crew takes appropriate technical and organisational measures to protect the personal data provided through the Services from loss, misuse, unauthorized use, alteration or destruction. These include encryption in transit (HTTPS), hashed password storage, role-based access controls limiting data to staff who need it, audit logging on the platform, contractual confidentiality obligations, and periodic review of our providers. However, no electronic transmission, over the internet or by email is absolutely safe or error-free, so users should pay particular attention to information sent by these channels, keep their password confidential, and tell us at once if they suspect their account has been accessed by someone else. If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the CNPD within 72 hours and, where the risk is high, notify you directly.
Cookies
Our website uses cookies. "Cookies" are a text string stored in a specific file and included in Hypertext Transfer Protocol (HTTP) requests and responses. It allows for registering status information while users browse and when they return to a particular website, while maintaining HTTP sessions.
The platform uses strictly necessary cookies to keep you signed in and protect your session; these cannot be switched off without breaking the platform. Our website also makes use of analytics and marketing cookies to recognize when a user visits the site, understand their online behavior, improve usability and analyze site usage. These are set only with your consent, which you give or refuse through the cookie banner and can change at any time. Most browsers also allow you to refuse cookies. It should be noted that blocking cookies may have an adverse effect on your use of the site and the user experience. Our Cookie Policy explains each cookie we use and how to control them.
Children
The Services are intended for working professionals and are not directed at anyone under age. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
Changes to the Privacy Policy
The Services and the business can change as necessary. As a consequence, Remote Crew may update this Privacy Policy from time to time to reflect changes to the Services, our providers or the law. Where a change materially affects how we use your personal data, we will give notice by email or a prominent notice on the website and the platform before it takes effect, and where the law requires it we will ask for your consent again. Users are encouraged to review this policy periodically. Previous versions are available on request.
Contacts
Please contact us if you have any questions regarding the Remote Crew Privacy Policy or information on the site via email at hello@remotecrew.io.
This policy was last reviewed in October 2026