Last updated September 3, 2026
1. Scope
This policy describes information handled by RemoteAttorneyJobs.com for visitors, candidates, employer users, staff, and administrators. A connected provider may also process information under its own privacy notice.
2. Information collected
Depending on your use, we collect identifiers and account details; résumé documents and extracted professional history; candidate corrections and confirmations; bar-admission and mobility inputs; profile and job preferences; saved jobs, application tracking, Speed Apply authorizations and statuses; employer profiles and job drafts; community discussion messages and reports; aggregate job views and application-source visits; verified phone state; subscription and transaction identifiers; communications choices; security, audit, device, and diagnostic data; and privacy requests.
3. Sources
Information comes from you, authorized employer and job-feed sources, identity and communications providers, payment processors, résumé and mobility services, and ordinary service interactions. Inferred facts are labeled separately from candidate-confirmed or officially verified facts.
4. Uses
We use information to authenticate users; operate profiles, job search, saved jobs, alerts, application tracking, Speed Apply, employer workflows, billing, phone verification, and support; classify and secure the service; prevent abuse; keep audit records; comply with law; and improve reliability. We do not treat an inference as a verified professional credential.
5. Résumés and Speed Apply
Résumé documents are sent to a restricted processing service and are private by default. The application keeps workflow identifiers, structured profile facts, answers, visibility and sharing choices, and version references. Candidates may separately choose visibility to verified employers and consent to consideration by BCG Attorney Search; either choice can be withdrawn prospectively. A Speed Apply request records the job, selected processed résumé, profile revision, contact email, authorization version, note, and review status. External delivery occurs only if separately performed and recorded by an authorized operator.
6. Sharing and service providers
Information may be shared with identity, hosting, database, résumé processing, mobility, payment, email, SMS, security, analytics, and support providers only as needed for requested services. Candidate information is shared with an employer, BCG Attorney Search, or another recruiter only when the candidate has authorized the applicable visibility, application, introduction, or referral workflow, or where disclosure is otherwise legally permitted. Enabling general verified-employer visibility does not itself authorize BCG sharing, and BCG consent does not make a résumé public. We do not sell personal information in the ordinary meaning of that term.
7. Payments, discussions, analytics, and communications
Stripe or PayPal receives payment details; RemoteAttorneyJobs stores provider transaction, customer, subscription, checkout, posting, and status identifiers rather than full card numbers. Approved discussion messages appear publicly under a generic role label; rejected, hidden, and reported messages may be retained for moderation and safety. Job views and application-source visits are stored as daily aggregate counts and are not presented as unique people or completed applications. Twilio Verify receives a phone number and code-check request when verification is enabled. Phone verification does not create marketing consent. Mailchimp receives email and first name only for the communication preference you request.
8. Retention
Information is kept only as long as reasonably needed for the feature, account, security, audit, dispute, legal, and compliance purposes for which it was collected. Final production periods must be approved in a retention schedule. Deletion requests are queued across applicable systems and are not complete until confirmed; backup, fraud-prevention, transaction, or legal records may remain where required.
9. Security
Controls include role and ownership checks, administrator MFA, restricted document storage, encrypted transport, signed provider webhooks, secret-backed integrations, cross-site request protections, bounded inputs, rate limits for phone verification, audit records, and fail-closed vendor gates. No system can guarantee absolute security.
10. Cookies and local storage
Strictly necessary cookies support authentication, OAuth state, security, and session continuity. Production analytics or advertising cookies must not be enabled until their purpose, provider, duration, consent requirements, and opt-out controls are documented here and implemented.
11. Your choices and rights
Authenticated controls let candidates review certain account information, download structured application data, manage communications, and request deletion. Depending on location, you may also have rights to access, correct, delete, receive, restrict, object to, or appeal processing, and to opt out of certain sharing or targeted advertising. We may verify identity and may deny or limit a request where law permits.
12. Children and sensitive information
The service is intended for working professionals and not children under 16. Do not upload unnecessary sensitive personal information. Professional licensing data may be public or regulated, but is handled as account information within the service.
13. California and other U.S. state notices
The categories above may include identifiers, professional or employment information, internet activity, commercial information, and inferences. The final notice must state the operator’s applicable state-law status, request methods, authorized-agent process, appeal route, and metrics or disclosures required by law. These items require counsel review before public launch.
14. Changes and contact
Material changes will be posted with an updated date and additional notice where required. Until the legal operator name and privacy contact methods are approved and published, use the support channel associated with your account for privacy requests and do not treat this draft as a final production notice.