This policy explains how RemoteWay ("we") collects, uses and protects personal data on the RemoteWay platform, in line with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.
Who we are
RemoteWay operates RemoteWay, a workforce-management and remote-hiring platform. For data that companies enter about their own employees and candidates, the company is the controller and we process it on its behalf. For your own RemoteWay account and career profile, we are the controller.
Data we collect
- Account data: name, email, phone, password (stored only as a one-way hash) and language.
- Company data entered by your employer: job, department, attendance, leave, payroll, documents, performance and learning records.
- Career profile data you add yourself: photo, CV, skills, experience, education and job applications.
- Technical data: IP address, browser, sign-in times and a security log of important actions.
- Billing data: invoices and payment status. Card details are entered on the payment provider's page and never reach our servers.
Why we use it
- To provide the service you or your employer signed up for.
- To keep accounts secure (sign-in checks, two-step verification, fraud prevention).
- To send service messages such as invitations, password resets and invoices.
- To show your career profile to companies, only when you choose to make it visible.
- To meet legal and tax obligations.
We do not sell personal data, and we do not use it for advertising.
Artificial intelligence
Some features use an AI provider to summarise or suggest. Only the text needed for the request is sent, results are suggestions for a person to review, and no automatic decision with legal effect is made about you.
Sharing
We share data only with service providers needed to run the platform (hosting, email, SMS, payment gateways, AI provider), under contracts that protect it, or when the law requires it. If data is transferred outside the Kingdom, we do so only as the PDPL allows.
Client logos
When you register a company on RemoteWay, you agree that we may show the company's name and logo in the "Our clients" section of our website and in material that introduces the platform. Nothing else about your company or its employees is shown. You can ask us to stop showing the logo at any time by writing to the contact form on the platform.
How long we keep it
Account data is kept while the account is active. When an account is deleted, personal details are removed or anonymised within 30 days, except records we must keep by law (for example invoices). Company data is kept for as long as the company's subscription requires and is deleted on its request.
Your rights
Under the PDPL you have the right to be informed, to access your data, to get a copy, to correct it, and to ask for its deletion. You can download your data and delete your account at any time from "Account security" in your account. For company records (such as payroll), contact your employer, who controls them. You may also complain to the Saudi Data & AI Authority (SDAIA).
Security
We use encrypted connections (HTTPS), hashed passwords, optional two-step verification, encrypted storage of secrets, role-based access and daily backups.
Cookies
We use only essential cookies: one to keep you signed in, and others to remember your language and theme. We do not use advertising or tracking cookies.
Contact
For privacy questions or requests: the contact form on the platform.
We may update this policy; the date below shows the latest version. Last updated: 2026-10-01.