Privacy Policy
RemoteMaroc connects companies with remote workers based in Morocco. This policy explains what personal data we collect, why, who can see it and how you control it. It follows Moroccan law 09-08 on the protection of personal data and, for visitors in the European Union, the General Data Protection Regulation (GDPR).
Who we are
RemoteMaroc (remotemaroc.com) is responsible for the data described here.
What we collect
Every account
- Email address and password (stored encrypted by our login provider), or your Google or LinkedIn sign-in
- Your role (candidate or company), the language you use and the date of your last visit
Candidates
- Full name, headline, category and skills, years of experience, availability, expected salary and languages
- Optional: profile photo, short bio, LinkedIn, GitHub and portfolio links. If you choose "Import from LinkedIn", we copy the name and photo LinkedIn shares with your sign-in into your profile form; nothing else from LinkedIn is used.
- Your CV (PDF)
- Your WhatsApp number, if you add it: only you and the RemoteMaroc team see it, to reach out about opportunities. Companies never see it
Companies
- Company name, website and logo
- The jobs you post, and a log of the candidate contact details you reveal (which profile, and when)
Everyone
- Reports sent about a job, with the optional note
- If you ask to hear when the recruiting service launches: your email and whether you're hiring or looking for work, kept only to send you that one email
- Technical data needed to run the site safely, such as IP addresses in server logs and limits against abuse
We don't buy data, we don't sell data and we don't use advertising trackers. Our site analytics (Cloudflare Web Analytics) don't use cookies and don't identify you. When you're logged in, PostHog (EU servers) counts which dashboard pages you open, linked to your account ID and whether you're a candidate or a company, so we know how many people use RemoteMaroc each month. No cookies, no email, no recordings.
Why we use it
- To run your account and let you log in
- To show candidate profiles to companies and jobs to candidates, which is the service itself
- To review jobs, fight spam and fraud, and keep the site secure
- To send service emails: account confirmation, password reset and updates about your jobs
The legal basis is the contract you accept when you sign up, our legitimate interest in keeping the service safe, and your consent where it is asked for.
Who can see your data
Candidate profiles. Anyone can see your public card: photo, first name, headline, category, skills, experience, availability, expected salary, languages and bio. Your full name, email, CV and links are never public. Only companies logged in to RemoteMaroc can see them, within a daily limit, and every reveal is logged. If you hide your profile, it no longer appears in the talent list. Profiles inactive for 6 months are hidden until you log in again.
Company jobs are public, so that candidates can apply.
Service providers process data for us, only to run the site: Supabase (database, file storage and login), Netlify (hosting), Resend (emails), Cloudflare and PostHog (analytics) and, if you choose them, Google or LinkedIn for sign-in. Some of them store data outside Morocco and the European Union; we rely on their contractual safeguards for these transfers.
We may disclose data when the law requires it.
How long we keep it
We keep your data as long as your account exists. When you delete your account, your login, profile, CV, photo and logo are deleted at once. Server logs are kept for a short time for security only.
Your rights
You can access, correct and delete your data, object to its use, and ask for a copy. Most of this you can do yourself: edit your profile in your dashboard, hide it at any time, and delete your account in Settings.
If you think we got something wrong, you can complain to Morocco's data protection authority, the CNDP (www.cndp.ma), or, in the European Union, to your country's data protection authority.
Cookies
We only use the cookies needed to keep you logged in, plus one when you open a friend's invite link: it remembers who invited you until you sign up (30 days at most). There are no advertising or tracking cookies, so there is no cookie banner.
Changes
If we change this policy, we will update the date at the top of this page and, for important changes, tell account holders by email.