This policy explains how The Remote Escape processes personal data when you browse the site, create an account, publish or apply for a gig, send messages, leave reviews, or submit a safety report.
Last updated: 11 August 2026
The Remote Escape is the controller for platform data. Until the operator's full legal name and registered address are finalized, contact info@theremoteescape.com for privacy questions or requests; those identity details must be added before official launch.
We process account and contact details; traveler and business profiles; listing, application, message, review, and safety-report content; uploaded images; verification and moderation records; and technical data such as IP address, timestamps, device/request information, and security logs.
We use data to create and secure accounts, operate applications and messaging, display listings and profiles, send transactional email, moderate content, prevent fraud and abuse, investigate reports, maintain backups, diagnose errors, and comply with legal duties.
Depending on the activity, processing is necessary to perform our contract with you, pursue legitimate interests in operating and securing the platform, comply with law, or establish and defend legal claims. We will ask for consent before using optional analytics or marketing where consent is required.
Public profiles, approved listings, and approved reviews can be seen by visitors. Applications and platform messages are shared with the relevant applicant and business. Do not place sensitive information in public fields. We may disclose data where required by law or necessary to protect users and the service.
Providers supporting the service include Railway for hosting and databases, Cloudflare for security, Turnstile, CDN and R2 storage, Resend for transactional email, Sentry for server-side error monitoring, and OpenStreetMap/Leaflet infrastructure for maps. They process data under their own terms and our applicable arrangements.
Some providers may process data outside your country or the EEA. Where required, we rely on adequacy decisions, approved contractual safeguards, or another lawful transfer mechanism.
We keep personal data only as long as needed for the service, safety, disputes, fraud prevention, accounting, backups, and legal obligations. Deletion requests may not immediately remove limited backup copies or records that must be retained, but those records remain protected and are removed or anonymized when no longer required.
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent where consent is the basis. You may also complain to your local data-protection authority. We may need to verify your identity before acting.
We use access controls, encryption in transit, restricted object storage, encrypted backups, rate limits, CAPTCHA, monitoring, and staff security controls. No service is risk-free. We may update this policy as the platform and providers change.
