Remo
Sign in Sign up

Legal

Privacy Policy

Last updated: 16 July 2026

The short version

Remo helps you find jobs and apply to them. To do that it holds the CV, contact details and saved answers you give it, and it uses them to score roles, tailor résumés and fill in application forms. We do not sell your personal data, we do not advertise to you, and Remo does not train AI models on your content. You can delete everything at any time by deleting your account, and you can ask us for a copy of your data.

1. Who this covers

This policy covers the Remo web app at app.go-remo.com, this website, and the Remo browser extension. Where we say "we", we mean Remo, the controller of the personal data described here.

2. What we collect

  • Account details — your email address, display name, and an optional profile photo. Passwords are handled by our authentication provider and are never visible to us.
  • Your profile and CV — the master CV you write or upload, plus work history, education, skills, location, phone number and any links you add.
  • Job preferences — target roles, salary expectations, work mode, and any deal-breakers you set, used to score listings for you.
  • Saved answers — your knowledge base: application questions and the answers you save, so you don't retype them on every form.
  • What you produce in Remo — tailored résumés and cover letters, the jobs on your board, application status, and interview notes.
  • Application-form content — when you use the extension, the labels and question text of the form you are filling. See section 4.
  • Billing details — if you subscribe, our payment processor handles your card. We receive the subscription status, not your card number.
  • Technical data — session tokens and server logs needed to keep the service running and secure.

We do not use tracking or advertising cookies, and we do not build an advertising profile of you.

3. Why we use it, and our legal basis

  • To provide the service — matching jobs, generating and tailoring résumés, filling forms, tracking your applications. Legal basis: performance of a contract.
  • Optional features you switch on — AI-drafted answers, and the "new strong matches" email digest. Legal basis: consent, which you can withdraw at any time.
  • Keeping Remo secure and working — preventing abuse, diagnosing faults, enforcing usage limits. Legal basis: legitimate interests.
  • Payments and records — where we must keep transaction records. Legal basis: legal obligation.

4. The Remo browser extension

The extension exists for one purpose: to fill in job-application forms using the details you have already saved in your Remo account, so you don't retype them. You review every field and submit the application yourself — the extension never submits on your behalf.

  • It does nothing until you ask it to. It is installed with access to websites because job applications live on thousands of different company career sites and we cannot know in advance which one you'll open. Until you click "Fill this page" — or open an application from your own Remo board — it reads nothing and sends nothing.
  • What it reads. When you invoke it, it reads the structure of the form in front of you: field labels, screener questions, and their answer options. It uses these to work out which field is which.
  • What it sends. Question text and answer options are sent to your own Remo account so they can be saved to your knowledge base for you to review. Field labels and attributes are sent to identify fields. Field values are never sent — only the labels.
  • What it never does. It does not read what you type into a form, it does not record your browsing history, and it does not monitor clicks, scrolling or keystrokes. It is not active on pages you have not asked it to fill.
  • What it stores on your device. Three things only: the access token created when you connect it to your account, the résumé you last chose, and a note that you dismissed an upgrade prompt. No CV or profile data is cached on your device.
  • Sensitive questions are never auto-answered. Questions about salary, visa status, citizenship, gender, race, ethnicity, veteran status or disability are always left for you to answer yourself.
  • No remote code. The extension runs only the code shipped inside it. It does not download or execute code from anywhere.

All of this happens between your browser and your own Remo account, authorised by a token you create by explicitly connecting the extension. You can disconnect it at any time from Settings, which revokes that token. Data the extension handles is used only to fill your forms and populate your knowledge base — never sold, and never shared with anyone else.

5. AI features

Résumé tailoring, answer drafting and job-fit insights send the relevant content — your CV, the job description, or a specific question — to an AI provider to generate a result. Which provider depends on your plan:

  • Your own key (BYOK) — content goes directly to the provider you chose under your own account and their terms. Your key is encrypted (AES-256-GCM) before it is stored, and is never shown back to you in full.
  • Managed plans — we route the request through our own provider account on your behalf.

Remo does not train AI models — not on your CV, your saved answers, or anything else you put into it. Content sent to an AI provider is then handled under that provider's own terms: for your own key, the terms of the account you connected; for Managed plans, the terms of the provider we route to. The major providers do not train on content submitted through their APIs by default, but the provider's terms govern, so it is worth reading the terms of the one you choose.

6. Who we share it with

We do not sell your personal data. We share it only with the providers that run Remo:

  • Supabase — database, authentication, and file storage for your résumé PDFs and profile photo.
  • Render — hosting for the Remo application.
  • Stripe — subscription payments. Stripe handles your card details; we never receive them.
  • Resend — sending account and notification emails, and receiving job links you forward to Remo.
  • Anthropic, OpenAI, Google, OpenRouter — the AI features described in section 5.
  • Tavily — web search used to research a company when you request an interview brief.

We may also disclose data if the law requires it, or to protect the rights and safety of our users.

7. Job listings

Listings are aggregated from third-party job boards and company career pages — including Greenhouse, Ashby, Lever, Workable, Remotive, Remote OK, Working Nomads, Jobicy, Adzuna and USAJOBS. Browsing a listing inside Remo does not tell the employer anything about you. Once you apply — on the employer's own site, with your own submission — that application is between you and them, under their privacy practices, not ours.

8. Sensitive information

Application forms often ask equal-opportunity questions about race, ethnicity, gender, disability or veteran status. If you choose to save an answer to one of these in your knowledge base, that is special category data, and we hold it only on the basis of your explicit consent, solely so it can be offered back to you when a form asks the same question. Remo never generates or guesses an answer to these questions, and you can delete any saved answer at any time.

9. Storage, security and retention

Your data is stored in our providers' infrastructure (section 6). Résumé PDFs are held in private storage that is not publicly accessible. Profile photos are held in public storage so they can be displayed in the app, which means the image URL is reachable by anyone who has it — don't upload a photo you wouldn't want shared. AI provider keys are encrypted at rest. Access to your account requires your password.

We keep your data for as long as your account exists. Deleting your account removes your account and the data linked to it, including your profile, CV, saved answers, résumés and board. Some records — such as payment and tax records — may be retained where the law requires it. No system is perfectly secure, and we cannot guarantee absolute security.

10. Your rights

If you are in the UK or the EEA, you have the right to access your data, correct it, delete it, receive a portable copy, restrict or object to how we use it, and withdraw consent for anything based on consent. Several of these you can exercise yourself, immediately, in the app:

  • Access and correct — your profile, CV and saved answers are editable at any time.
  • Withdraw consent — disconnect AI provider keys, turn off the email digest, or disconnect the extension in Settings.
  • Delete — deleting your account removes your data, as described in section 9.

For anything else, email privacy@go-remo.com. We will respond within one month, as required by UK/EU GDPR. If you are not satisfied, you can complain to your local supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk).

11. International transfers

Some of the providers in section 6 process data outside the UK and EEA, including in the United States. Where that happens, transfers are made under appropriate safeguards, such as the provider's standard contractual clauses or an applicable adequacy decision.

12. Children

Remo is not intended for anyone under 16, and we do not knowingly collect their data.

13. Changes

We may update this policy as Remo changes. The date at the top always reflects the current version, and we will tell you about material changes where it is reasonable to do so.

14. Contact

Questions, requests, or anything you think this page gets wrong: privacy@go-remo.com.