Login
Book a demo

Iterable, Inc, Recruiting Privacy Policy

Iterable, Inc. (“Iterable,” “we,” “us,” or “our”), located at 201 Spear Street, Suite 1050, San Francisco, CA 94105, is the controller of your personal data for purposes of this Notice. This Notice explains how we collect, use, share, and protect personal data when you apply for a role at Iterable or are considered as a candidate for employment.

Data Protection Officer. You may contact our Data Protection Officer at dpo@iterable.com or by writing to the address above, Attn: Data Protection Officer.

  1. Categories of Personal Data We Collect

We may collect the following categories of personal data about you during the recruitment process:

CategoryExamples
IdentifiersName, email address, phone number, postal address, online profile URLs
Professional and employment informationResume/CV, cover letter, work history, job titles, employer names, professional qualifications, licenses, certifications
Education informationDegrees, institutions attended, dates of attendance
Assessment and interview informationInterview notes, test results, work samples, assessment scores
Pre-hire screening informationBackground check results, reference check responses, where permitted by applicable law
CommunicationsCorrespondence between you and Iterable relating to your application
InferencesAssessments of your qualifications, skills, and suitability for a role, including outputs generated by automated decision making tools
Protected classification characteristicsInformation voluntarily provided for equal opportunity monitoring purposes, such as gender, race/ethnicity, veteran status, and disability status
Sensitive personal informationGovernment-issued identifiers (e.g., Social Security number, passport number) collected where required for background checks or right-to-work verification
  1. Data Collection. We obtain your personal data from the following sources:
  • Directly from you, when you submit an application, communicate with our recruiting team, or participate in interviews or assessments.
  • Publicly available sources, such as professional networking sites (e.g., LinkedIn) and public portfolios or websites.
  • Recruitment agencies and service providers who refer you for potential employment.
  • Your references, individuals you have identified or who are otherwise known to us.
  • Our service providers, such as background check providers and recruiting platforms, who process data on our behalf.
  1. Data Processing Purposes We process your personal data for the following purposes:
  • Evaluating your candidacy: Reviewing applications, conducting interviews and assessments, evaluating qualifications, and making hiring decisions.
  • Managing the recruitment process: Scheduling interviews, communicating with you about your application status, and coordinating with hiring managers.
  • Conducting pre-hire checks: Verifying references, conducting background checks, and confirming right-to-work eligibility where applicable and permitted by law.
  • Equal opportunity monitoring: Processing voluntary diversity and inclusion information to monitor and improve our hiring practices, where permitted by law.
  • Automated screening and assessment: Using automated decision-making technologies, including AI, to assist in evaluating applications and facilitating recruitment 
  • Legal compliance: Complying with applicable laws, regulations, and legal processes, including record retention obligations.
  • Defending legal claims: Establishing, exercising, or defending legal claims arising from the recruitment process.

Your personal data is not sold or shared (as those terms are defined under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) for cross-context behavioral advertising purposes.

Whether you provide your personal data is voluntary. However, if you do not provide certain information (such as your name, contact details, and work history), we may be unable to evaluate your candidacy or progress your application.

  1. Data Sharing. Your personal data needs to be shared with cloud service providers located in the United States of America (US) and engaged by Iterable to help manage our recruitment and hiring processes. 
  2. Automated Decisioning Notice. We leverage Automated Decision Making Technologies (ADMT) including AI to facilitate recruitment efforts. You may request an alternative method to ADMT reviews and you always have the right to know the ADMT output about you. We require a human with meaningful involvement when using automation tools in an employment context.
  3. Anti-Bias and Anti-Discrimination. Where AI is used in ADMTs, we ensure that Large Language Models (LLMs) can evidence anti-bias testing or similar proactive efforts to avoid unlawful discrimination against an applicant or class of applicants on a basis protected by law. 
  4. EU/EEA and UK Applicant Data Processing: Lawful Basis. If you are applying from one of the European Union (EU) or European Economic Area (EEA) or the United Kingdom (UK) we process your personal data under the legitimate interests basis for the solicitation, evaluation, and selection of applicants for employment available through  Art. 6(1)(f) of the Regulation (EU) 2016/679 General Data Protection Regulation (GDPR).
  5. Data Transfers to the US. If you are located outside of the US, your personal data will be transferred to the US  because we use job applicant platforms in the US to process applications (see ‘Data Sharing’ above). The European Commission has determined that US data privacy laws do not ensure an adequate level of protection for personal data collected from EU data subjects, therefore Iterable has implemented appropriate additional data protection safeguards through the European Commission’s approved standard contractual clauses (SCCs) or the UK Information Commissioner’s Office SCC Addendum. 
  6. Data Retention. Your personal data will be retained by Iterable for six months (unless legally required to keep it longer) starting from when you apply to Iterable. See ‘Your Privacy Rights’ below for other data deletion options. 
  7. 10. Your Privacy Rights. Under the GDPR and certain US state laws, you have the right to request access to your personal data, to request that your personal data be rectified or erased, and to request that processing of your personal data be restricted. Privacy requests are processed by Iterable using this link: https://preferences.iterable.com/privacy. Iterable will take reasonable steps to verify the requestor’s identity and we may ask for proof of identity to responsibly respond to privacy requests. Applicants have the right to lodge a complaint with their local data protection authority if we have not satisfactorily responded to their data request or complaint about how we process their personal data. 

11. Contact Us. If you have any queries in relation to the use of your candidate information, please contact peopleops@iterable.com or our data protection officer at dpo@iterable.