Privacy

Privacy Policy

Last updated 25 October 2026

This policy describes what Remotiv actually does with personal data — what we collect, where it is stored, how long we keep it, and who else receives it. It was written from the system itself rather than from a template, and the retention periods below are enforced automatically by jobs that run every day.

It applies wherever you meet us: remotiv.work, a job posting, and the careers pages we host for the companies hiring through us. Those pages carry the company's branding, but Remotiv holds and processes the data, so this is the policy that governs it.

Who we are

Remotiv (National Tax Number 7921044-0) is the business responsible for the data described here. Our registered address is Colabs Gulberg, 50-N Gurumangat Road, Block N, Gulberg II, Lahore, Pakistan. For anything in this policy, write to talent@remotiv.work.

1. What we collect, and where it comes from

When you apply for a job

Through an application form on remotiv.work or a company careers page we host, we collect your first and last name, email address, phone number, LinkedIn profile URL (which is required), your CV, your answers to any screening questions the role asks, and the details you give about your city and country, years of experience, notice period and availability.

We store the full text of your CV, not just the file. When you upload a CV we extract its contents to text and store that in our database alongside the document, so it can be searched and read by the automated scoring described in section 7. Both the file and the extracted text are deleted together when the retention period ends.

As they consider you, the hiring team at that company can write comments about your application and reply to each other — their notes on you, stored alongside the application. These are about you, so they are part of your record here: if you ask us for a copy of what we hold, they are included.

When you record a video interview

We record video and audio of your answers, generate a written transcript of each one, and store how long you spoke and when. We also record the moment you acknowledge the screen shown before recording starts, so there is a record of what you were told and when.

A final interview held on a Google Meet call with a company's hiring team is recorded differently. See Final interview recordings in section 14.

When you contact us

Our contact form collects your name, email address, company and message. Our meeting booking form collects your name, email address, company, the service you are interested in, your message and your preferred time.

Automatically, when you browse

When you arrive from a tagged link — an ad or a social post — we record the campaign details in that link, the website you came from, and the page you landed on. If you go on to apply, that information is attached to your application so we know which channel it came from. We do not build advertising profiles and we do not sell this or any other data.

From companies hiring through us

Employers using our hiring product create accounts, and may connect a Google Calendar so interview times can be booked. The permissions we request, and exactly what we do with them, are set out in section 13. To find free slots we deliberately use only Google's free/busy view, which returns blocks of busy time with no titles, attendees or descriptions attached. We do not read the contents of anyone's meetings, and the only events we create are the interviews themselves.

2. Where it is stored, and who can reach it

All of it is stored with Supabase, our database and file-storage provider, on infrastructure they operate. Files are separated by how sensitive they are.

CVs and interview recordings are held in private storage. They have no public web address and cannot be opened by anyone who has not been authorised. Each view generates a short-lived link for that one view only. When a company or Remotiv staff open a CV or a recording, we record who opened which document, and when. These access records are kept for 24 months, then deleted. Opening your own CV from your own profile is not logged.
Profile photos, if you add one to a talent profile, and company logos are held in public storage, because they are displayed on public pages.

Inside the product, the company that posted a role can see the applications to that role. Remotiv staff can also access candidate records in order to operate and support the service. Access of that kind to a CV or a recording is recorded.

3. How long we keep it

Four things here expire on their own. Nothing else does. The four that do are enforced by jobs that run every day; they are not a statement of intent, they are code that deletes. Everything else we keep until you ask us to remove it, and we would rather say that than describe a deletion that does not happen.

CVs sent to a company: 24 months from the day you apply

When you apply to a role posted by a company hiring through Remotiv, an expiry date is set on your CV at the moment you apply, 24 months out. When it passes, both the CV file and the extracted text of it are deleted.

The application record itself is kept: your name, email, the role you applied for, the stage you reached and the decisions made. The company keeps its hiring record; it stops holding your document.

The hiring team's comments on your application go on that same date. They were written alongside the CV and they expire with it, rather than outlasting the document they were written about.

Interview recordings: 6 months

Video recordings and their transcripts are deleted six months after the interview is issued. As with CVs, the record of the interview survives the media: the questions you were asked, how long you spoke and when, but not the recording or the transcript. Where an interview was scored, the scores are kept with the application after the recording goes, with the AI's one-line verdict and whether each of the employer's interview criteria was shown. The AI's written explanations and summary, and the short quotes from your answers that it cited as evidence, are deleted at the same time as the recording. Notes the hiring team wrote when adjusting a score are kept with it.

Final interview recordings: 3 months

Recordings of final interviews held on Google Meet are deleted 3 months after the interview. Section 14 explains how they are made and who can see them.

Records of who opened a CV or a recording: 24 months

We record each time a company or Remotiv staff open a CV or a recording: who opened it and when. These access records are kept for 24 months, then deleted.

Talent-pool profiles, and CVs sent to Remotiv's own roles: no expiry date

We keep these until you ask us to delete them. There is no automatic expiry, no reminder email, and no button in your account that deletes your data. If you are in our talent pool, or you applied to a role posted by Remotiv itself rather than by a company hiring through us, nothing above reaches you. Your profile, your CV and your photo stay until someone at Remotiv removes them, and the only way to start that is to email talent@remotiv.work. We will confirm when it is done.

We are stating this plainly because the alternative is worse. A policy that promises a deletion nobody has implemented is not a safeguard; it is a claim that happens to be untrue, and it is the document you would be shown if you ever asked what we did with your CV. So: we hold it, we hold it indefinitely, and asking is the way it stops.

Two consequences worth being explicit about. Time passing does not remove anything — a profile you have not touched in years is still here. And deleting it is a manual request handled by a person, not a self-service action, so it is not instant; write to talent@remotiv.work and we will action it.

If you are in both places — most often because you applied to a company's role first and joined the pool afterwards — the company's copy still expires on its own 24-month date. That is a separate record with a separate clock, and it goes whether or not you ask. What stays is the profile and anything attached to it.

Everything else

Contact form messages, our record of the emails and messages we sent you, booking requests, account records and application records are kept while they remain useful to the hiring or business relationship they belong to. We do not currently apply an automatic expiry to them.

4. Why we are allowed to process it

Data-protection law asks us to have a specific reason for each thing we do with your data, not a general one. Ours are:

Handling your application and passing it to the employer — because you asked us to, as a step towards a possible contract of employment.
Scoring CVs and interview answers, with a human deciding — our legitimate interest in assessing candidates consistently and at scale. The human decision described in section 7 is part of what makes this fair rather than automated.
Recording video interviews — our legitimate interest in assessing candidates consistently. Before any recording starts, we show you what is recorded, who will see it, how long it is kept, and that a person makes the decision — and we record your acknowledgement of that, with a timestamp.
Emailing you about a role — our legitimate interest in progressing an application you started. Every such email carries an unsubscribe link.
Answering contact and booking enquiries — our legitimate interest in replying to someone who wrote to us.
Security, rate limiting and access logs — our legitimate interest in keeping the service and your data secure, and in some cases a legal obligation to keep records.
Keeping your CV in the Remotiv talent pool — your consent, given by joining the network so that we can match you to future roles. That consent does not expire on its own and we do not currently ask you to renew it, so withdrawing it is something you have to do: email talent@remotiv.work and we delete your profile and your CV. Until you do, we keep them.

5. Where in the world your data goes

Your data does not stay in your country. We are based in Pakistan; our systems and providers are not, and we would rather say so directly than bury it.

Japan — our database and all file storage, including CVs and interview recordings, are hosted by Supabase in their Tokyo region. Final interview recordings are made through Recall.ai in its Tokyo region before they reach our storage.
United States — interview recordings sent to OpenAI for transcription, CV text, screening answers and interview transcripts sent to OpenAI or Anthropic for scoring, and email sent through Resend.
Global — Google, for interview calendar events, and Meta, where WhatsApp invitations are enabled. Both operate internationally.

Where the law of your country requires a safeguard for transfers of this kind, we rely on the standard contractual protections offered by these providers. If you want to know more about a particular one, email talent@remotiv.work.

6. Who else receives it

We do not sell personal data and we do not share it for advertising. We use the following providers to run the service, and each receives only what its job requires.

Supabase — our database, file storage and login system. Holds everything described above.
OpenAI — receives the recording of your video interview answers, video and audio together, in order to transcribe them. It may also receive the text of your CV, your screening answers, the details you gave on the application form, the transcripts of your interview answers and the requirements of the role, in order to produce the scores and summaries described in section 7.
Anthropic — may receive the same information as OpenAI, for the same scoring. We use one of the two for scoring at a time, depending on how our system is set up. Anthropic also receives the text of CVs added to the Remotiv talent pool, to fill in profile fields, and talent-pool profile summaries (never your email address or phone number) when a company searches the pool. It also receives the messages you type into the chat assistant on our website, in order to answer them.
Recall.ai - runs Remotiv Recorder, which records final interviews held on Google Meet. It holds a recording only until Remotiv has saved its own copy, and in any case for no more than 7 days. See section 14.
Resend — our email provider. Receives your email address and the contents of the messages we send you.
Google — when an employer has connected a calendar, we create interview events, which include the interview time and the participants.
Meta (WhatsApp) — where WhatsApp messaging is enabled for a role, we send interview invitations through it, which means Meta receives your first name and phone number along with the company's name.

About what we send to OpenAI and Anthropic, plainly: we send it under each provider's standard commercial API terms. Neither uses API data to train its models by default. Under their standard terms each may keep what we send for up to 30 days (in OpenAI's case for abuse monitoring), unless different retention controls apply to our account. The deletion periods in section 3 cover our copies; they do not reach theirs. Their handling is governed by their own policies, not this one.

7. How AI is used, exactly

We use AI to read and score applications. Specifically: the text of your CV, with your screening answers and the details you gave on the application form, is scored against the requirements of the role, and your interview answers are transcribed and scored against a written rubric. The AI also writes a short summary of each scorecard. Those scores are stored on your application, and they are used to rank candidates and to flag some for closer attention.

A person makes every hiring decision. Nothing in our system automatically rejects, advances or hires anyone on the strength of a score — the scores order and highlight a list that a human then reads. A reviewer can also override a score, and we keep a record of when that happens.

Remotiv does not make solely automated hiring decisions. No outcome that affects you is produced by a machine alone. We are describing this precisely because “AI-assisted” can mean anything from a spellcheck to an automatic rejection. Ours produces a number that affects the order you appear in and whether you are flagged. It does not decide the outcome.

8. Your choices, and what actually happens

Unsubscribing from emails

Every email we send about a role carries an unsubscribe link that works without logging in. It stops that company's emails to you. Because each company hiring through Remotiv is separate, unsubscribing from one does not unsubscribe you from another — you can use the link in each company's email.

Access, correction and deletion

There is no self-serve way to delete your data, and we are not going to pretend otherwise. Email talent@remotiv.work and a person will handle it. That is the whole mechanism today. We will confirm what we hold, correct it, or delete it. If you are asking us to delete something a company still needs as a record of a hiring decision, we will tell you what we can and cannot remove and why, rather than quietly doing half of it.

Depending on where you live you may have rights over your personal data under laws such as the GDPR — to see it, correct it, have it deleted, or object to how it is used. The address above is how you exercise any of them with us.

9. When a company is hiring through us

If you applied through a careers page carrying a company's branding, both that company and Remotiv hold your application. The company decides who to hire; we provide the system that stores and processes the data, under this policy. The company may keep its own records outside our system, which are governed by that company's own privacy practices, not this page. If you want to reach them, contact them directly; if you want to reach us, use talent@remotiv.work.

10. Security

Data is encrypted in transit. CVs and interview recordings are held in private storage and reachable only through short-lived, individually generated links. Access by a company or by Remotiv staff is recorded. Using the hiring product requires an account, and each company can see only its own candidates.

11. Children

Remotiv is a service for working professionals. We do not ask your age and we have no way to verify it, so we are not going to claim we prevent anyone under 16 from applying. What we can say is that we do not knowingly collect data from children, and that if you tell us we are holding a child's data we will delete it. Email talent@remotiv.work.

12. Changes to this policy

If we change what we collect, how long we keep it, or who receives it, we will update this page and the date at the top. The retention periods stated here are enforced in code, so a change to them is a change to the system, not only to this document.

13. Google user data

This section applies to people at companies hiring through Remotiv who connect a Google Calendar from Settings. Candidates never connect a Google account. We use Google data for one purpose: scheduling candidate interviews. That means offering a candidate times when the interviewer is free, and putting the booked interview on the interviewer's calendar with a Google Meet link.

What we ask Google for, and why

Calendar events (the calendar.events permission): to create the interview events Remotiv books, move them when an interview is rescheduled, and delete them when it is cancelled. We do not change or delete any other event.
Read access to your calendars (the calendar.readonly permission): to read your primary calendar's ID and time zone, and its free/busy information. Free/busy is only the start and end times of busy periods, with no titles, descriptions, attendees or locations. We do not list or read your events.
Your email address (the userinfo.email permission, which Google grants together with the basic openid sign-in identifier): to show which Google account is connected on your Settings page.

What we read

When you connect: your Google account email, and your primary calendar's ID and time zone.
Each time a candidate opens a booking link or picks a time: the free/busy information for your primary calendar over the dates being offered. We use it to work out which times to offer, and we do not store it.

What we write to your calendar

When a candidate books an interview with you, we create one event on your primary calendar. It has a title naming the candidate and the role, a short description (the role, the candidate's time zone, and that it was arranged through Remotiv), the time, you and the candidate as attendees, and a Google Meet link where your account allows Meet. Google sends the invitation to both attendees. If the candidate reschedules, we move that event. If you or the candidate cancel, we delete it.

What we store, and for how long

Your connection:the access and refresh tokens Google issues, when they expire, the permissions you granted, your Google account email, your primary calendar's ID and time zone, the connection status, and the most recent error Google returned, if any. These are stored with Supabase (section 2), used only by our servers, never sent to your browser, and never written to our logs. We keep them until you disconnect.
Each booked interview: the Google event ID, the Meet link, the time and both time zones. These are kept with the application, like the other application records described in section 3.
Free/busy information is used at the moment it is read and is never stored.

What we never do with it

We do not sell Google data, we do not use it for advertising, and we do not use it to train AI models, ours or anyone else's. None of it is sent to our AI providers. No one at Remotiv reads your calendar data, except where you ask us to for support, where it is needed for security, or where the law requires it.

Who it is shared with

Only as needed to schedule the interview:

The candidate sees the times you are free to be booked, never what fills the rest of your calendar, and receives the interview time and Meet link on the booking page and in the confirmation email.
Your hiring team in Remotiv sees the interview time and Meet link on the application.
Supabase stores the connection and booking details, and Resend delivers the confirmation emails that carry the time and Meet link, as described in section 6.
We disclose it to anyone else only if the law requires us to.

Disconnecting, and what is deleted

In Settings, use Disconnect on your calendar. We ask Google to revoke Remotiv's access, then delete your stored connection: the tokens, your Google account email, and your calendar's ID and time zone. We delete it even if Google does not confirm the revocation, and in that case Settings tells you to remove Remotiv from your Google account permissions, which ends the access for certain.

You can also remove Remotiv from your Google account permissions directly. We then can no longer use the connection; disconnect in Settings as well to delete the stored details. Disconnecting does not remove interview events already on your calendar, or the records of interviews already booked. To have those deleted too, email talent@remotiv.work.

Remotiv's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

14. Final interview recordings

Some companies hiring through Remotiv hold a final interview with you on a Google Meet call with members of their hiring team. When they do, Remotiv records that call. This is separate from the recorded video interviews described in sections 1 and 3.

What is recorded. The video and audio of the Google Meet call, including everyone taking part: you and the interviewers.
Who records it.An automated participant called Remotiv Recorder joins the call. It is run through Recall.ai, which processes the recording on Remotiv's behalf, in its Tokyo (Japan) region.
How you are told. Before you can choose a time, the booking page tells you the interview will be recorded, and you must confirm that you understand. We keep a record of when you confirmed and which version of the notice you saw. The interviewers are told in the calendar invitation. Remotiv Recorder appears in the call under that name, and where the meeting asks guests to wait to be let in, the host admits it from the Google Meet waiting room.
Where it is stored.When the call ends, the recording is copied into Remotiv's private storage with Supabase in Japan. Recall.ai's copy is deleted as soon as Remotiv has saved its own, and in any case within 7 days.
Who can watch it. Only authorized members of the hiring team of the company that held the interview. When an authorized user requests a viewing link, we record who requested it and when. The link is valid for up to 3 hours.
How long we keep it. It is deleted automatically 3 months after the interview, or sooner if your application is deleted. A record that the recording existed and was deleted is kept.
What it is not used for. Remotiv does not transcribe final interview recordings, does not score them with AI, and does not use them to train AI models.

To ask for a recording to be deleted sooner, email talent@remotiv.work.

15. Contact

For anything in this policy — access, correction, deletion, or a question about what we hold — email talent@remotiv.work. For anything else, our contact page is the place to start.