Applicant Privacy Notice

Abnormal AI, Inc. Applicant Privacy Notice Last updated: 19 May 2025

Personal Data We Collect

This Applicant Privacy Notice explains how Abnormal AI, Inc. (“Abnormal,” “we,” or “us”) and its affiliates, collect, use, share, and otherwise processes your personal information (also known as personal data) during our recruitment processes, such as when you apply for an open role with us, or when you express interest in future Abnormal opportunities, as well as referrals and recruitment through third party agencies. It also contains information about your choices and privacy rights.

This Applicant Privacy Notice applies in addition to our general Privacy Notice. Please refer to the Privacy Notice for our practices related to personal data submitted for other purposes.

We recommend that you read this Applicant Privacy Notice in full to ensure that you are informed.

Information We Collect About You

Information that we collect from or about you includes information you provide, information we collect automatically, and information we receive from other sources.

Information You Provide to Us

Contact data: your full name, pronouns, phone number, address, email address, job site information (e.g., LinkedIn profile), and onsite badge information (if you visit us onsite).

Government-issued ID number and right to work status: your identification details, such as government identification documents, citizenship status, residency, and work permit status.

Professional and employment information: your resume or CV, work experience, skills, employment references, compensation information, and achievements or other information about your professional background.

Educational information: your educational background, technical or professional achievements, qualifications, and certifications.

Interview notes and assessments: if you interview with us, we may collect information from you when you participate in any assessments relevant to the role you apply for, and interview notes.

Sensitive information: that you may choose to provide to us during the recruitment process, such as demographic information, or information about your gender, race, ethnicity, health, and disabilities. Please note this is not visible to your manager.

Other information: if you choose to submit to us as part of your application.

Information We Collect from Other Sources

We may combine personal information we receive from you with personal information we obtain from other sources (in each case, where permissible and in accordance with applicable law), such as:

From referrals: If you are referred for a role by someone else, we collect information from the individual who referred you.

From references: We may receive references from your previous employers or academic supervisors. These references are received under confidentiality obligations.

From background check providers: We may receive background check information from background check providers and identity verification services.

From recruitment and staffing partners or other job websites: We may collect information from recruitment and staffing partners or other job websites (e.g., LinkedIn) if you use or otherwise apply to us through those sources.

From professional licensing and certification bodies: where it is relevant for the position, we may receive information from professional licensing and certification bodies, and educational and training institutions.

During interviews and assessments: if you interview with us, we will collect information during the interview and application process, which may include confidential interviewer opinions, interview notes and recordings, and screenshots recorded via video.

From publicly available sources: We may receive information from other publicly available sources, such as information that you have chosen to make public online (e.g., your public LinkedIn profile).

Information We Collect Automatically

When you use the careers pages on our website, we automatically collect information sent to us by the device you use, for example, your IP address. For more information about the personal information we collect through our websites and how we use cookies and online identifiers, please see the ‘Information We Collect Automatically’ and ‘Cookies and Online Identifiers’ sections of our Privacy Notice.

Declining To Provide Information

To process your application, we ask you to provide personal information about yourself. You provide your information voluntarily, and you determine the extent of information you provide to Abnormal. However, we may need to collect certain personal information to assess your eligibility for a particular role. If you do not provide the information we identify as required or mandatory, we may not be able to proceed with your job application. If we ask you to provide any such information, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).

How We Use Your Information

To proactively contact you: where we have identified you as a potential candidate from information we've collected from public sources or third parties, we may use your personal information to suggest opportunities for you (e.g., by getting in touch with you about an opportunity). If you have previously applied for a role with Abnormal, we may contact you about future career opportunities that may interest you.
To evaluate your application and make an employment decision: We use your personal information to evaluate your application for a role at Abnormal and make hiring decisions.
For secure hiring practices: As part of our secure hiring practices, we conduct video interviews and validate applicant identity at various stages through our recruitment process. If your application is successful and Abnormal makes a conditional offer of employment, we will carry out pre-employment checks, which must be successfully completed to progress to a final offer. All processes and pre-employment checks are in line with prevailing legislation and our policies relevant to our security and privacy standards.
To communicate with you regarding job opportunities and the recruitment process: We may send you emails or otherwise communicate with you in response to your questions, feedback, comments, and your application. Where we use a recruitment agency or employment business partner, we may also communicate through that third party.
To conduct interviews and assessments: We may use your personal information to facilitate the recruiting process, including scheduling interviews and communicating with you.
To produce an offer letter and employment contract: If your application is successful, we will use your information to prepare an offer letter and employment contract.
To improve and report on our recruitment process and analyze hiring trends: We may use information you provide to us during your application process to provide management reports containing analysis related to recruiting metrics, such as the length of the recruiting process, and conduct other analyses to improve our recruiting processes. Where appropriate, we will remove personal identifiers from data containing personal information so that it cannot be traced back to an individual and aggregate it by combining it with the data from multiple sources and/or individuals.
To protect our interests: we may use your personal information to protect our interests, which may include protecting our legal rights and maintaining the security and integrity of our facilities, equipment, and electronic platforms.
For legal reasons: We may use your personal information to comply with applicable laws, such as immigration and/or employment laws or regulations. We may also use your personal information to respond to, investigate, or participate in valid legal processes and proceedings, including those from law enforcement or government agencies, to detect, prevent, or investigate potential fraud, and to resolve disputes and enforce agreements.

How We Share Your Information

We only share your personal information with trusted third parties. We may share personal information about you with third parties, for the purposes described above, in the following circumstances:

With our affiliates: We may share your personal information with relevant teams at other companies in the Abnormal group, for example, with the people team, legal and finance teams, your hiring manager, and IT staff, if access to the data is necessary for the performance of their roles. As a global company, we have employees employed by affiliate companies across the world.
With our service providers and business partners: We may share your personal information with our service providers and business partners, to facilitate the recruitment process, for example, recruiters and employment agencies, HR and recruitment platform providers, IT service providers, and background checking services.
Your references and previous employers: We may contact your references and your previous or current employers to perform professional reference and employment checks.
For legal reasons: We may share your personal information with law enforcement or governmental entities for compliance with the law or to investigate legal claims. In the event of confirmed fraudulent activity, we may also exchange information with other companies and organizations for fraud protection.
Through business transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, acquisition, dissolution, corporate reorganization, or similar event.

We will not share any of the information you provide with any third parties for marketing purposes.

In some cases, we may ask for your consent to collect, use, or share your personal information. When we do that, we will always record your consent, and you may change your mind and opt out by contacting us at privacy@abnormalsecurity.com.

International Transfers

We only share your personal information with trusted third parties. We may share personal information about you with third parties, for the purposes described above, in the following circumstances:

Abnormal may transfer your personal information to countries other than your country of residence. In particular, we may transfer your personal information to the United States and other countries where our affiliates, business partners, and service providers are located. These countries may not have equivalent data protection laws to the country where you reside.

Wherever we process your personal information, we take appropriate steps to ensure it is protected in accordance with this Applicant Privacy Notice and applicable data protection laws. These safeguards include implementing the European Commission’s Standard Contractual Clauses for transfers of personal information from the European Economic Area or Switzerland between us and our business partners and service providers, and equivalent measures for transfers of personal information from the United Kingdom.

How We Keep Your Personal Information Secure

We take appropriate security measures, including organizational, technical, and physical safeguards, designed to protect against unauthorized access to, alteration of, or destruction of your personal information.

While we follow industry standards to protect your data, unfortunately, no transmission of data over the Internet or any public network can be guaranteed to be 100% secure, so we encourage you to take care when disclosing personal information online.

How Long We Keep Your Personal Information

We will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, and as required or permitted under applicable law.

If you are successful in your application for a position at Abnormal: We will retain the information that you provide during the application process, and information about your application process, as part of your employee records, and you will receive a separate privacy notice from us explaining how we process the personal information of our employees.
If your application is not successful or you withdraw from the process: We will retain your information for the purposes described in this Applicant Privacy Notice, such as to keep you in mind for future roles, to comply with our legal obligations, or to establish, exercise, or defend legal challenges related to our recruitment processes.

If you do not want us to retain your information for consideration for other roles, or want us to update it, please contact us at privacy@abnormalsecurity.com

To determine the appropriate retention period for how long we will retain your personal information we will consider factors such as the volume, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for processing, whether those purposes can be achieved through other means, and compliance with our obligations under applicable law.

Your Choices and Rights

Depending on applicable law, you may have certain rights over your personal data. For example, you may have the right to request a copy of your personal data that we hold, to update your personal data if it is inaccurate or out of date, or to delete your personal data.

These rights are not absolute, and not all jurisdictions provide these rights to their residents. Therefore, we may decline your request in certain circumstances, as permitted by applicable law.

Under certain circumstances we will not be able to fulfill your request, such as if it interferes with our regulatory obligations, affects legal matters, we cannot verify your identity, or fulfillment involves disproportionate cost or effort, but in any event, we will respond to your request within a reasonable timeframe (and in accordance with applicable laws) and provide you an explanation.

To exercise your rights, please contact us at privacy@abnormalsecurity.com

Artificial Intelligence Tools

Our commitment to transparency and responsible data handling extends to the use of Artificial Intelligence Tools (AI Tools) within our recruitment process.

As part of our recruitment process, we use carefully selected AI Tools to assist our team during the recruitment process. We use AI Tools to assist our talent acquisition team members and support their human judgment and valuable experience. Additionally, a human in the loop is reviewing all outcomes and decisions.

Candidates are not subject to decisions based solely on automated processing, including profiling, and we do not use AI Tools to infer personal information from interviews, nor do we perform any biometric analysis (e.g., emotion recognition, facial analysis, or voice profiling).

We currently use the following third-party AI Tools:

Video interview platforms: we conduct structured interviews, some of which are recorded using third-party video platforms, which also produce AI-generated note-taking summaries. These recordings and note-taking summaries are intended to help ensure consistency and fairness in our hiring process by enabling the interviewer to focus on the candidate instead of taking notes, and allowing multiple team members to review interviews, assess qualifications and provide feedback.
CV/resume analysis tool: For some roles, we receive very large volumes of applications, so to process these, we may use AI Tools that support our talent acquisition team in assessing how closely candidate applications align with the job requirements. Use of this AI Tool is intended to help improve consistency, accuracy, and speed in the recruitment process and reduce the potential for human bias or errors.

The output of any AI Tool is only used in a way that is designed to assist our talented team and is only one of several factors considered throughout the recruitment process. Abnormal hiring managers, prospective teammates, and the talent acquisition team are central to ultimate hiring decisions across all stages of the hiring process.

When we use such AI Tools, we will do so in a way that is consistent with the requirements of applicable privacy and employment laws.

Children’s Data

Our careers websites are not directed to anyone under the age of 18. A parent or guardian who becomes aware that his or her child under the age of 18 has provided us with personal information may contact us at privacy@abnormalsecurity.com, and we will delete the child’s data.

Additional Information for Certain Jurisdictions

Depending upon your place of residence, you may have additional rights in relation to your personal information. Please review the jurisdiction-specific sections below.

California Residents

The disclosures in this section apply only to California residents and are intended to supplement this Applicant Privacy Notice with information required by California law.

Categories of CCPA personal information

The below table summarizes:

the categories of personal information collected by Abnormal in the past 12 months; and
the categories of personal information disclosed for business purposes by Abnormal (including to third parties) in the past 12 months.

Please see the following sections of this Applicant Privacy Policy for information about the sources from which personal data is collected, the business purposes for which data is collected and used, and the third parties with whom we share your personal information:

sources: the ‘Information We Collect About You’ section above describes the sources from which personal information is collected.
business purposes: the ‘How We Use Your Information’ section above describes the business purposes for which we collect and use your personal information.
third party sharing: the ‘How We Share Your Information’ section above third parties with whom we share your personal information.

Category of personal information

Description

Identifiers

Information such as, full name, alias, email address, phone number, address, contact details, job site information (e.g., LinkedIn), national insurance number, social security number, pronouns and date of birth.

Personal information described under Cal. Civ. Code § 1798.80 to the extent not already included in other categories here

Information such as, your signature if you sign an offer letter or any documents during the recruitment process, passport number, driver’s license or state identification, financial information, medical information, or health insurance information.

Commercial information

Information such as, your bank details used to reimburse you for any agreed travel and expenses.

Internet or other electronic network activity

Information such as, interactions with our job application portals, career site usage data, and communication logs.

Audio, electronic, or visual Information

Information such as, your likeness, interview recordings, transcripts, voicemail, and communication logs.

Professional or employment-related information

Information such as, your resumes/CVs, cover letter, job history, skills, qualifications, educational background, employment references, compensation information and achievements.

Inferences drawn from other information

Information such as, inferences drawn from assessments, background checks (where permitted), and interview evaluations.

Sensitive personal information

Information such as, government IDs, racial or ethnic origin, disability status, and other voluntary disclosures for equal opportunity purposes.

Your additional California rights

If you are a California resident, some additional rights may be available to you under the California Consumer Protection Act (CCPA), including rights:

to know what personal information is being collected, for what purpose and the sources from which personal information is collected and the categories of recipients of your personal information.
to request deletion, correction and access of your personal information.
to know what personal information is being "sold" or "shared", for what purpose and the categories of recipients of your personal information.
to opt out of the sale or sharing of your personal information.
to limit the use of your sensitive personal information.
to not be discriminated against for exercising one of your CCPA privacy rights.

Please note: not all of the above rights are absolute. There may be occasions whereby we cannot carry out your request however, we will always provide an explanation where this is the case.

You will not be discriminated against for exercising any of your privacy rights under the CCPA.

Sale and sharing of personal information

Abnormal does not sell or share applicant data for cross-context behavioral advertising. The Abnormal websites and recruitment process are not directed to anyone under the age of 16 and Abnormal has no actual knowledge that it sells or shares the personal information of individuals under 16 years of age.

How to Exercise Your California Privacy Rights

You may exercise your California Privacy Rights by emailing us at: privacy@abnormalsecurity.com

We will need to verify your identity to process your request and we reserve the right to confirm your California residency. Government identification may be required. If you wish to designate an authorized agent to make a request on your behalf, we will need to verify both your and your agent’s identities, which may require submission of government identification. Your agent must also provide valid power of attorney or other proof of authority acceptable to us in our sole discretion. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it. In certain cases, we may be permitted by law to deny your request.

Other US States

Depending on applicable laws in your state of residence, you may request to (1) confirm whether or not we process your personal information; (2) access, correct, or delete the personal information we maintain about you; (3) receive a portable copy of such personal information; and/or (4) restrict or opt out of certain processing of your personal information, such as targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects. If we refuse to take action on a request, we will provide instructions on how you may appeal the decision. We will respond to requests consistent with applicable law.

European Economic Area, UK and Switzerland

The information in this section applies only to individuals in the EEA, Switzerland or UK and is intended to supplement this Applicant Privacy Notice with information required by applicable law in those jurisdictions.

Legal basis for processing

We collect your personal information if we have a legal basis for doing so. The legal basis we rely on depends on the personal information and the specific context in which we collect it.

Generally, we collect and process your personal information where:

we need it to enter or perform a contract with you.
we need to process your personal information to comply with a legal obligation, for example – to comply with employment and immigration laws or to conduct legally required background checks.
where we have a legitimate interest, which is not overridden by your privacy rights, for example - assessing your suitability for an open role and reaching a hiring decision, communicating with you, evaluating our recruiting processes, to detect and prevent fraud, and to defend our interests and rights.
you give us consent, for example – to record calls or interviews.

In addition, when we collect special category data, such as health, religious, sexual orientation or ethnicity information, we do so where:

we need it to satisfy employment law rights and obligations - to the extent necessary under applicable employment laws.
necessary to establish, exercise or defend legal claims - to the extent necessary to process your sensitive personal information.
you give us explicit consent, for example – as part of a demographic survey.

Your additional EEA, Swiss and UK privacy rights

If you are resident in the European Economic Area, Switzerland, or United Kingdom, you have additional data privacy rights. If you have consented to our use of your personal information for a specific purpose, you have the right to change your mind at any time, but this will not affect our processing of your information that has already taken place. You also have the following rights with respect to your personal information:

the right to access, correct, update, or request deletion of your personal information.
the right to object to the processing of your personal information.
the right to withdraw your consent to the processing of your personal information at any time, if we collected and processed your personal information with your consent.
the right to restrict processing of your personal information, and temporarily limit the way we use it, for example - whilst you check that the personal information we hold for you is correct.
to request portability of your personal information.
opt out of marketing communications we send you at any time, for example – if you no longer want to see job alerts.
the right to lodge a complaint with your national data protection authority or equivalent regulatory body.

Please note: not all of the above rights are absolute. There may be occasions whereby we cannot carry out your request however, we will always provide an explanation where this is the case.

If you wish to exercise any of your rights under data protection laws, please contact us at privacy@abnormalsecurity.com

Changes to This Privacy Notice

Abnormal may change this Applicant Privacy Notice from time to time. We will post any changes on this page and, if we make material changes, provide a more prominent notice. You can see the date on which the latest version of this Applicant Privacy Notice was posted above.

How To Contact Us

Please contact us at privacy@abnormalsecurity.com if you have any questions about our privacy practices or this Applicant Privacy Notice. You can also write to us at:

Abnormal AI, Inc. 8474 Rozita Lee Ave, Suite 420, Las Vegas, NV 89113 Attn: Privacy Counsel

Applicant Privacy Notice

Effective Date: July 2023 At Abnormal AI, we are committed to protecting the privacy and personal information of our applicants and candidates. This Applicant Privacy Policy outlines how we collect, use, store, and share your personal data during the application process. Please read this policy carefully to understand our practices regarding your personal data. By submitting your application, you acknowledge and agree to the terms described herein.

Personal Data We Collect

During the application and recruitment process, we may collect the following types of personal data: ● Personal identification information (such as name, contact details, and identification documents) ● Professional information (such as resumes/CVs, work history, educational background, and skills) ● References ● Background checks (where permitted by law) ● Publicly available information ● Employment preferences ● Interview notes and assessments ● Correspondence and communication exchanged during the application process ● Any other information you voluntarily provide to us during the application and recruitment process

Purpose and Lawful Basis for Processing

We collect and process personal data for the following purposes, relying on one or more lawful bases: ● Evaluating your application and determining your suitability for the position. ● Contacting you for interview scheduling and updates. ● Arranging and conducting assessments. ● Conducting background checks (where permitted by law) or verification as required. ● Evaluating and improving our application and recruitment processes. ● Complying with legal obligations and internal policies.

Consent and Withdrawal

By submitting your application, you provide consent to the collection, processing, and storage of your personal data as outlined in this policy. You have the right to withdraw your consent at any time. To withdraw your consent or request the deletion of your data, please contact us using the information provided below.

Data Security

We implement reasonable security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, access controls, regular security audits, and employee training. However, please note that no data transmission over the internet or storage method is 100% secure, and we cannot guarantee the absolute security of your data.

Data Storage and Retention Period

Data Storage We store personal data in our secure servers or cloud-based platforms with appropriate safeguards to protect against unauthorized access, disclosure, alteration, or destruction. Retention Period We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. The specific retention period may vary depending on the nature of the personal data and legal requirements in the jurisdictions where we operate. Reasons for Retention We retain applicant information for the following reasons: ● Compliance with Legal Obligations. We may be required to retain certain personal data to comply with applicable laws and regulations, such as employment laws, tax laws, or record-keeping obligations. ● Establishment, Exercise, or Defense of Legal Claims. In some cases, we may need to retain applicant information for the establishment, exercise, or defense of legal claims. This may include situations where there is a dispute regarding the hiring process or employment-related matters. ● Ongoing Consideration for Future Opportunities. With the applicant’s consent, we may retain personal data for a longer period to consider the applicant for future job opportunities that may arise. This allows us to reach out to qualified candidates who have express interest in our organization. ● Statistical and Analytical Purposes. We may retain aggregated and anonymized data for statistical and analytical purposes. This data does not identify individuals and is used to analyze recruitment trends, assess the effectiveness of our hiring processes, and make informed business decisions.

Secure Disposal or Anonymization

Once the personal data has fulfilled its purpose or the retention period has expired, we will securely dispose of or anonymize the data. Secure disposal methods may include permanent deletion from our systems or the use of data destruction techniques to ensure that the data cannot be reconstructed or accessed.

Data Sharing and Third Parties

We only share your personal data with third parties that have appropriate safeguards in place to protect your information. We may share your personal data with third parties for the following purposes: ● Conducting background checks or verification services. ● Complying with legal obligations or responding to lawful requests. ● Assisting in the evaluation and selection process.

International Transfers

In some cases, your personal data may be transferred to and processed in countries outside your own. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your personal data. Abnormal has entered into agreements ensuring appropriate and suitable safeguards with its entities and service providers, including entering into the European Commission’s Standard Contractual Clauses where appropriate.

Your Rights

You have the rights regarding your personal data: ● Right to Access. Request access to the personal data we hold about you. ● Right to Rectification. Request correction or update inaccurate or incomplete information. ● Right to Erasure. Request deletion of your personal data, subject to legal requirements. ● Right to Restrict Processing. Request the limitation of processing of your personal data. ● Right to Object. Object to the processing of your personal data for specific purposes. ● Right to Data Portability. Request the transfer of your personal data to another party. To exercise any of your rights or make related inquiries please contact us using the information provided below.

Changes to the Privacy Policy

At Abnormal AI, we are committed to keeping our Applicant Privacy Policy up to date and in line with evolving privacy laws and industry best practices. As a result, we may make changes to this policy from time to time. We encourage you to review this policy periodically to stay informed about how we collect, use, disclose, and protect your personal data during the application and recruitment process. When we update this policy, we will revise the “Effective Date” at the beginning of the policy to indicate the date on which the changes take effect. In addition, we may provide notice of material changes through our website, by email, or through other appropriate means. It is important that you read and understand any updates or changes to this policy. By continuing to engage in the application and recruitment process after the Effective Date of the updated policy, you signify acceptance of the revised terms.

More Information

If you have any questions, concerns, or requests regarding this privacy policy or the processing of our personal data, please contact us at privacy@abnormalsecurity.com. By submitting your application, you acknowledge that you have read, understood, and agree to this Applicant Privacy Policy.

Open Roles