Your email address, a one-way hash of your password, and your name if you give one. Anything you save here: job statuses, your own notes, saved searches. If you upload a CV, the file, the text we read from it, and any profile details you add — phone, location, LinkedIn, portfolio. Your Fit Checks, and any documents the writing tools produce for you. If you use follow-ups to keep track of people you’ve been in touch with about a job, the names, companies, roles, email addresses, phone numbers, links and notes you enter about them — so an account can hold details about other people, which only you can see. Each time you use them, a record of when it happened and which job it was for, which we keep to run the service and to bill correctly. And the search terms the AI used on the web while working for you — the terms, not what it found. Those can include things from your CV, such as your name or a former employer, and the names of people at the company, such as a hiring manager. We keep them for a limited time, set out below, so we can check what was searched on your behalf.
Ratings you give. If you rate a Fit Check, CV or cover letter, we keep your rating, any comment you add, and when you gave them. We use them to judge and improve what we produce, including comparing them with what each result cost us to make and with where its job description came from. Nobody outside Remuda sees them. We look at ratings in total, and we read individual comments one by one. If we ever want to use comments for anything else — having an AI summarise them, for example — we’ll tell you before we do, and you’ll be able to say no. We never quote or publish a comment unless you agree to that specific quote. If you run a Fit Check again, or generate a CV or cover letter again, the new result gets its own rating, and we keep your rating of the earlier one, with its comment: it still counts in our totals. You can see all your ratings, earlier ones included, in My documents, and remove any rating there along with its comment. To remove the rating and comment on the result in front of you, tap your choice again. A removed rating no longer counts in our totals. We delete a comment’s text after 12 months, and it’s gone from our backups within a week after that; the rating itself stays. Everything is deleted with your account, or sooner if you ask us through the feedback form.
Saved JDs. The first time you make a Fit Check, tailored CV or cover letter for a job, we also save a copy of the job posting as it looked then, called a Saved JD, in your My documents, so you can still read it after the employer takes it down. If we can’t open the posting, we make the copy from the job description we already hold. Only you can see it. It can include names or work contact details of people at the employer that the posting shows. It’s deleted when you delete your account.
We keep a daily tally of how often each page was viewed — the date, the page, whether the viewer was signed in, and whether we served it from memory. That is the whole record. There is no IP address, no browser, no cookie, no account, no time of day and no search terms, because the table has no column for any of them. We cannot ask it what one person did, and we could not reconstruct it. Nothing loads in your browser to make this happen: no script, no tag, nobody else involved. We keep the daily counts for 400 days and then delete them.
If you use the “generate with your own AI” panel, your CV stays in your browser — we never receive it. Tick “remember” and it is saved there for next time; leave it unticked and it goes when you close the tab. When you generate, the prompt including your CV is copied to your clipboard so you can paste it into ChatGPT or Claude yourself. What happens there is between you and them. Your city and theme choices are stored the same way. None of those three ever reach us.
One thing your browser does send us: a cookie that keeps you signed in. It carries your account id, we read it on every request, and that is how the site knows it is you. Signing out clears it.
Two kinds, both about your account: one to confirm your email address, and one to reset your password when you ask. You can’t turn these off while you have an account. Apart from those, we only email you to reply when you’ve written to us.
Anthropic. When you run a Fit Check, we send the full text of your CV and the job description, together with any notes you have added on how you want to come across. Before it goes, we remove the email addresses and phone numbers we find in your CV; your name and everything else on it are sent as they are. When you generate a CV or cover letter, we also send your name, email, phone number, location, LinkedIn and portfolio links, because they go on the document. That is how the tools work — there is no version that reads your CV without sending it. Anthropic and the cloud companies it uses may process it outside Singapore, including in the United States. Anthropic’s contract with us requires encryption in transit and at rest, and their policy is to delete what we send within 30 days — longer only if their own rules or the law require it.
Cloudflare. The site sits behind them, so they see the IP address of anyone who visits. Their network runs worldwide, so your visit may be handled outside Singapore. We use your IP address ourselves only when you sign in, sign up, reset a password or send feedback, to stop abuse — held in memory for a few minutes and never written to disk. When you sign up, we also use the country Cloudflare works out from your IP address, to check you aren’t in the United Kingdom, where accounts aren’t available. We use it only for that check and don’t store or log it.
Hetzner. Our server is rented from Hetzner, in a data centre in Helsinki, Finland. The site, its database and your files are stored there: your account, your CV, your saved jobs and notes, and your documents.
Backblaze. Each night we send an encrypted copy to Backblaze, which stores it in the eastern United States. It holds your account and saved data, including the text of your CV and your Fit Checks, and the files you upload and the CV and cover letter files we make. The copy is encrypted before it leaves our server, with a key only we hold.
Postmark. Postmark, in the United States, sends the emails that confirm your address and reset your password, so it receives your email address and that email, including its link.
Proton. Proton, a Swiss company, hosts the mailbox for contact@remudajobs.com, so it holds anything you write to that address.
Nobody else gets your details. We don’t sell data, nothing on our pages reports to a third party, we run no advertising trackers, and we never pass your details to an employer or a recruiter. When you apply for a job you leave our site and apply on theirs.
When the AI runs a Fit Check or writes for you, it can search the web. It decides what to search for, so we can’t tell you in advance exactly what gets sent — but we keep a record of the search terms it used, for the time set out just below. The searches are run for Anthropic by the search companies it uses, which are in the United States. If that isn’t something you want, don’t use the Fit Check or the writing tools — browsing, searching and saving jobs send nothing anywhere.
Until you delete it, with one exception: the search terms the AI used for you are removed after 30 days, and are gone from our backups within a week after that. Deleting your account removes them sooner.
You can delete your account yourself. On your account page, choose Delete my account and confirm with your password. That removes your account, your CV and every file you uploaded, your documents, your usage records and your saved data — saved jobs, notes, follow-ups and the contact details in them, searches and credit history — and any feedback sent from your account’s email address. We check that each of these is gone before we tell you it is done.
If you can’t sign in, use the feedback form, include the email address on your account, and we will delete it for you.
To delete just your CV, choose Delete my CV on your profile page. That removes the file, the text we read from it and its name, and we check they are gone before we tell you it is done. Documents the tools have already written from it — your Fit Checks, tailored CVs and cover letters — stay until you delete your account. Uploading a new CV replaces the old one, and the old file is removed.
Our nightly backups keep seven days, so a deletion is fully gone within a week.
Data Protection Officer: contact@remudajobs.com. Write to this address with any question about your data, or to ask to see or correct what we hold about you. You can also use the feedback form.
Last updated 18 September 2026: we now say that the nightly backup holds the files you upload and the documents we make for you, as well as the database. Earlier, we said how long Anthropic keeps what we send, and earlier still, we named every company that stores or handles your data for us, and where: Hetzner stores it in Finland, Backblaze keeps our encrypted backups in the United States, Postmark sends our account emails from the United States, Proton hosts our contact mailbox, and Anthropic, the search companies it uses and Cloudflare may handle it outside Singapore. Earlier, we said that we save a copy of the job posting (a Saved JD) when you make a Fit Check, CV or cover letter, and who can see it, that sign-up checks which country you’re connecting from (accounts aren’t available in the UK), that follow-ups can hold contact details you enter about other people, listed the emails we send, named our Data Protection Officer, added ratings for Fit Checks, CVs and cover letters, started keeping the search terms the AI uses on the web while it works for you, for a limited time, began sending Anthropic less for a Fit Check, and started counting page views. If we change what we do with your data we will say so here and date it. If the change is significant we’ll email you rather than expect you to check.