Effective as of August 14, 2026
1. Purpose
As part of its recruitment and talent-evaluation processes, Sawtooth Software Inc., Sawtooth Software UK Limited, and our affiliates (“Sawtooth”) collect, use, store, and transfer personal information relating to job applicants. Sawtooth may also share such information with others where necessary for recruitment or where required by law.
By submitting an application — whether directly through Sawtooth’s careers portal or via an authorized third party — Sawtooth will process and transfer your personal information to the United States (“US”). This Privacy Notice, together with its United Kingdom Addendum, explains Sawtooth’s policies and practices regarding the collection and processing of your personal information and describes your rights under applicable data protection laws.
If you have questions or concerns about this Privacy Notice, please contact Sawtooth using the details provided at the end of this document.
Sawtooth processes candidate data in accordance with this Privacy Notice unless doing so would conflict with applicable law, in which case the applicable law prevails.
Sawtooth accepts applications only through its careers portal at sawtoothsoftware.com/jobs to ensure all personal data is processed in accordance with its data protection policies.
2. Personal Information Sawtooth Collects
Except as otherwise described in the Addendum, Sawtooth may collect, use, store, and share the following categories of personal information during the recruitment process:
Application Data
- Name, residential address, email address, phone number
- Resume/CV content, cover letter, academic and professional qualifications
- Work history, skills, certifications, compensation expectations
- Diversity information (e.g., age, gender) where voluntarily provided or required by law
- Citizenship and right-to-work information
- Any other information you choose to submit as part of your application
Assessment Data
- Interview notes and recordings (where applicable)
- Technical or behavioral assessment results
- Any other information collected to evaluate your suitability for a role
Pre-Employment Screening Data
- Date of birth, personal identification details
- Employment verification, criminal record information (where permitted by law)
- Bank account information (only where required for pre-employment checks)
- Citizenship/residency status
- Location information
- Dependents information (only where required for benefits eligibility)
Information Sources
Sawtooth may collect personal information directly from you, from Sawtooth personnel, or from legitimate third-party sources such as:
- Recruiters or staffing agencies
- Online professional networks
- Public databases or search engines
- Background-screening vendors (with your authorization)
3. Why Sawtooth Uses Your Personal Information
Legitimate Interests (Recruitment and Talent Evaluation)
Sawtooth processes personal information to:
- Manage and administer the recruitment process
- Assess and confirm your suitability for employment or engagement
- Communicate with you throughout the recruitment process
- Make hiring decisions and extend offers
Legal Obligations
Sawtooth may process personal information to comply with legal, regulatory, or corporate governance requirements, including right-to-work verification and equal-opportunity reporting obligations.
Consent
Sawtooth generally processes sensitive personal information only with your explicit consent or where necessary to carry out its legal obligations or exercise its legal rights. Exceptions are described in the Addendum.
4. How Sawtooth Shares Your Personal Information
Sawtooth may disclose your personal information:
- When required by law, court order, or governmental/law-enforcement request
- To other Sawtooth group companies involved in evaluating your application
- To trusted third-party service providers performing recruitment-related services (e.g., background-checking agencies, data-storage providers)
Sawtooth requires all recipients — internal and external — to protect the confidentiality and security of your personal information and to use it only for the purposes for which it was shared.
5. International Transfers
Sawtooth may transfer your personal information to countries outside the European Economic Area (“EEA”), including the UK and the US, which may not have been granted an adequacy decision by the European Commission.
Sawtooth uses appropriate safeguards under GDPR Article 46 — including the European Commission Standard Contractual Clauses and Sawtooth’s group data-transfer agreement — to ensure your personal information remains adequately protected.
Your personal information will be transferred to the US. The US does not currently have an EU adequacy decision. Sawtooth is not a participating organization in the Data Privacy Framework and therefore does not rely on it for cross-border transfers.
For more information about Sawtooth’s transfer safeguards, please email privacy@sawtoothsoftware.com.
6. Data Retention
If your application is unsuccessful or you submit a general application, Sawtooth retains your personal information for 12 months after the end of the recruitment process, consistent with US Code of Federal Regulations, 29 CFR Part 1602, unless otherwise required by applicable law.
If your application is successful, Sawtooth retains recruitment-related personal information as part of your employment record. Retention periods will be provided in the employee privacy notice.
7. How Sawtooth Protects Your Personal Information
Sawtooth implements technical, administrative, and physical safeguards designed to protect personal information from unauthorized access, misuse, loss, or destruction. These include:
- Access controls and authorization procedures
- Employee training on confidentiality and data protection
- Encryption and secure storage practices
- Regular security risk assessments
- Policies and procedures aligned with industry best practices and evolving regulatory guidance
8. Your Rights
Subject to certain limitations, you have the right to:
- Confirm whether Sawtooth processes your personal information
- Access your personal information
- Rectify inaccurate personal information
- Request erasure of your personal information
- Restrict processing in certain circumstances
- Object to processing, including for direct marketing
- Request data portability (where applicable)
These rights apply only where exercised in good faith and balanced against Sawtooth’s legitimate interests or legal obligations.
To exercise your rights, contact Sawtooth using the details at the end of this Privacy Notice.
9. Updates to This Privacy Notice
Sawtooth may update this Privacy Notice as its practices evolve or as legal requirements change. You are encouraged to review this Privacy Notice periodically.
10. Questions, Concerns, and Complaints
If you have questions or wish to lodge a complaint about Sawtooth’s use of your personal information, please contact Sawtooth using the details below. You also have the right to lodge a complaint with your local supervisory authority.
11. Contact Information
Email: privacy@sawtoothsoftware.com