Privacy Notice for Job Applicants in California

Effective as of July 24, 2026.

1. PURPOSE

This Notice explains how Sawtooth Software (“Sawtooth”) collects, uses, discloses, and protects personal information relating to applicants for roles within our business. It applies to individuals who reside in California and applies solely to personal information processed in connection with your job application. This Notice also serves as our Notice at Collection under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”).

Sawtooth may update this Notice at any time. If material changes occur, Sawtooth will inform Applicants whose personal information continues to be processed and provide an opportunity to exercise applicable rights. Applicants acknowledge that Sawtooth processes their personal information in accordance with this Notice.

2. OUR PRIVACY PRINCIPLES

Sawtooth is committed to protecting Applicant personal information and adheres to the privacy principles of the Sawtooth Software Global Privacy Program, including fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, confidentiality, integrity, and accountability.

3. DEFINITIONS

Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with a particular consumer or household. Sensitive Personal Information has the meaning provided under the CCPA and includes certain categories such as government identifiers, financial account information, precise geolocation, racial or ethnic origin, and health information. Processing means any operation performed on personal information, including collection, storage, use, disclosure, or deletion.

4. CATEGORIES OF PERSONAL INFORMATION WE COLLECT

Sawtooth may collect the following categories of personal information for the purposes described in Section 6:

  • Personal Identifiers (e.g., name, address, phone number, email, date of birth, driver’s license or passport number, device identifiers).
  • Personal Information under Cal. Civ. Code §1798.80(e) (e.g., age, race, ethnicity, marital status, sex, gender).
  • Protected Classifications under California or federal law.
  • Professional or Employment-Related Information (e.g., academic background, employment history, references, achievements).
  • Education Information (e.g., transcripts, certifications, training records).
  • Sensory Data (e.g., interview recordings, CCTV footage).
  • Inferences drawn from other personal information to create a profile.
  • Sensitive Personal Information as defined under the CCPA.

Sawtooth may also collect interview notes, background-screening information, test results, and other information you provide during the application process.

5. SOURCES OF PERSONAL INFORMATION

Sawtooth collects personal information directly from Applicants and may also receive information from:

  • Recruitment partners
  • Academic institutions
  • Social media platforms or publicly available sources
  • Previous employers and references
  • Background-check vendors
  • Accreditation boards and similar sources

Some information is mandatory for the application process; where optional, Sawtooth will inform you.

6. BUSINESS PURPOSES FOR PROCESSING PERSONAL INFORMATION

Sawtooth processes Applicant personal information for the following business purposes:

  • Recruitment and hiring, including evaluating qualifications, arranging interviews, and communicating with you.
  • Screening and background checks.
  • Equal opportunity compliance and reporting.
  • Compliance with applicable laws, responding to legal requests, and exercising legal rights.
  • Security and fraud prevention, including internal investigations, whistleblowing management, and protection of Sawtooth personnel and assets.

Sawtooth does not use Applicant personal information for cross-context behavioral advertising.

7. DISCLOSURE OF PERSONAL INFORMATION

Sawtooth may disclose personal information to:

  • Affiliates and subsidiaries
  • Service providers (e.g., recruiters, background-check vendors, payroll or benefits vendors)
  • Professional advisors (e.g., auditors, legal counsel)
  • Parties to corporate transactions (e.g., mergers, acquisitions, reorganizations)

Sawtooth does not sell or share Applicant personal information as those terms are defined under the CCPA.

8. PURPOSE LIMITATION

Sawtooth will only process personal information for the purposes disclosed in this Notice or as otherwise permitted by law.

9. DATA MINIMIZATION

Sawtooth will process personal information only to the extent necessary for the purposes described.

10. DATA ACCURACY

Sawtooth will maintain accurate and up-to-date personal information. Applicants should notify Sawtooth of any changes or inaccuracies.

11. STORAGE LIMITATION

Sawtooth retains Applicant personal information only as long as necessary for the purposes described or as required by law. Sawtooth is required under 29 CFR §1602 to retain application materials for at least one year.

12. YOUR RIGHTS UNDER THE CCPA/CPRA

California Applicants have the following rights:

  • Right to Know the categories and specific pieces of personal information collected, used, disclosed, or shared.
  • Right to Delete personal information, subject to legal exceptions.
  • Right to Correct inaccurate personal information.
  • Right to Opt-Out of Sale or Sharing (Sawtooth does not sell or share Applicant data).
  • Right to Limit Use of Sensitive Personal Information (Sawtooth does not use sensitive personal information for purposes that trigger this right).
  • Right to Non-Discrimination for exercising CCPA rights.

Sawtooth will verify your identity before processing a rights request and may require additional information. You may authorize an agent to submit a request on your behalf with appropriate documentation.

13. DATA SECURITY

Sawtooth implements appropriate technical and organizational measures to protect personal information against unauthorized access, unlawful processing, accidental loss, or damage. Sawtooth requires third parties handling personal information to maintain adequate security measures.

14. CONTACT AND QUERIES

Sawtooth will not discriminate or retaliate against Applicants who exercise their CCPA rights. For questions regarding this Notice or Sawtooth’s processing of Applicant personal information, contact: privacy@sawtoothsoftware.com.