Job Applicant Privacy Notice
Last updated: August 20, 2026
Persona Identities, Inc. (“Persona,” “we,” “us,” or “our”) provides this Job Applicant Privacy Notice (“Notice”) to explain how we process personal information about individuals who apply for jobs with us through Persona’s careers page or otherwise participate in our recruiting process. For information about how we process your data in connection with your use of our job matching tool, please visit Applicant Privacy Notice - Job Matching Tool.
1. Personal Information We Collect
We may collect the following categories of personal information in connection with your application and our recruiting process:
Any content in the resume you upload, including name, contact information, employment history, education history, qualifications.
Any content in the reference check provided by the reference(s) you have selected.
Information related to any screenings, interviews, and assessments you may go through, including audio and video recordings and transcriptions.
Any sensitive data you may provide, including citizenship and immigration status, or medical or health information (e.g., for accommodations).
Publicly available information, such as your website or portfolio.
Communications with us, such as emails or messages in our portal, along with associated metadata.
Inferences drawn from the information above.
We also use cookies and similar technologies to operate our website and to help collect data, such as usage data, identifiers, and device information. For more information about what cookies and similar technologies we use and how we use them, see our Cookie Policy.
If your application is moved forward, we may also conduct a background check. Disclosures regarding this process is provided at the time of the background check.
If you verify your identity as part of the application process, we may collect the following categories of personal information:
Contact information, including email address, postal address, and phone number.
Demographic data, including sex, birthdate and age.
Uploaded content, including a photo or video of you (i.e. selfie), a photo or video of your government issued identity document (such as driver’s license or passport), any personal data contained on the face of the document and within the NFC chip that corresponds to the information on the face of the document (if your identity document is NFC compatible), and any other relevant documents depending on your verification request. Your fingerprints are not collected.
Government identifiers, such as national ID numbers.
Facial scans, which we use for the purpose of uniquely identifying an individual.
Device information and usage data: Internet Protocol (IP) address and information about your device, including device identifiers and configuration; activity during the verification process.
Additional identity data: We may verify personal information about you with our network of trusted third-party data sources, including the following: publicly available sources (such as open government databases), government and national ID registries, consumer credit bureaus, utility companies, mobile network providers and postal address databases. These checks will vary depending on the verification checks available in the particular country.
We may collect this information directly from you, from recruiters, references or referrals, from publicly available sources, from service providers, and from other third parties involved in the recruiting process.
2. How We Use Personal Information
We use personal information about job applicants for the following purposes:
Review and evaluate your application;
Communicate with you about your application and the recruiting process;
Conduct reference checks, background checks or other pre-employment checks where applicable and permitted by law;
Evaluate or complete a business transaction, such as a merger, acquisition, reorganization, or sale of all or part of our business or assets;
Comply with applicable legal, regulatory, and reporting obligations, or protect our rights, interests, and security;
If you verified your identity, we use associated personal information for purposes of identity verification and fraud prevention; and
For other purposes described to you at the time of collection.
For each of the purposes, we rely on the following legal bases: to take steps prior to entering into an employment relationship with you, our legitimate interests in evaluating candidates and managing our recruiting process, and/or where required or permitted by law, your consent. Where we process special categories of personal information, such as health information provided in connection with an accommodation request, we do so only where permitted or required by applicable law, including where necessary to provide accommodations or comply with employment, social security, or social protection laws, or with your explicit consent where required.
3. How We Disclose Personal Information
We may disclose your personal information to:
Persona personnel involved in recruiting, hiring, human resources, legal, compliance, security, and related functions;
Service providers and third parties that help us operate our careers page and facilitate the recruitment and application process;
Professional advisors, such as legal counsel, auditors, and consultants;
Government authorities or other third parties where required by law or necessary to protect our rights; and
Other parties with your consent or as otherwise permitted by law.
4. Facial Scans
Persona collects and processes your facial scan, which is used to verify your identity and prevent fraud. Your facial scans are deleted upon completion of verification or within 90 days of your last interaction with Persona for fraud prevention purposes. Persona may use one or more secure cloud service providers to process facial scans for purposes of identity verification and fraud prevention, including: (i) Amazon Web Services (AWS); (ii) Google Cloud; and (iii) MongoDB.
5. Retention
We retain personal information for as long as reasonably necessary for the recruiting process as described in this Notice, to consider you for future opportunities where permitted, to comply with legal obligations, and to resolve disputes.
6. Your Privacy Rights
We provide a variety of ways for you to control the personal information we hold about you, including choices about how we use that data. In some jurisdictions, these controls and choices may be enforceable as rights under applicable law. We respond to all requests we receive from individuals in accordance with applicable laws.
Depending on where you are located and subject to applicable privacy laws, you may have the following privacy rights:
To access, correct, update or request deletion of your personal information.
To object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information (i.e., your data to be transferred in a readable and standardised format).
If we have collected and processed your personal information with your consent, then you can withdraw consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
We do not “sell”, “share” or otherwise process for consideration including monetary value or targeted advertising the personal information of individuals subject to this Notice.
You also have the right to lodge a complaint with your local supervisory authority, but we encourage you to first contact us with any questions or concerns. For more information, please contact your local supervisory authority. If you are a UK resident, you may lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk/.
If we decline to take action on a request, you may have the right to appeal our decision. In these cases, we will notify you providing our reasons for denying the request and instructions for how you can appeal the decision in accordance with applicable law.
To exercise any of your privacy rights, please contact us through the Privacy Portal. When contacting us, please do not send us any personal information beyond what is required for us to communicate with you, such as copies of your government ID.
Residents of California may have certain additional privacy rights. Please refer to the Supplemental California Consumer Privacy Act Privacy Policy for more information.
7. Processing Locations and Data Transfers
Persona is headquartered in the United States, with offices in San Francisco and New York City as well as employees globally.
The personal information we collect may be stored and processed in your country or region, or in any other country where we or our affiliates, subsidiaries, service providers or third-party data partners process data. This means that we may process your personal information in and transfer your personal information to countries outside of the country in which you are based. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective). We take steps designed to ensure that personal information is processed and protected as described in this policy and in accordance with applicable law wherever the data is located.
Currently, we primarily use data centers in the United States and Germany to host your personal information. The storage location(s) are chosen to operate efficiently and improve performance.
We transfer personal information from the European Economic Area (EEA), United Kingdom (UK), and Switzerland to other countries, some of which have not been determined by the European Commission to have an adequate level of data protection. When we do so, we use the European Commission’s Standard Contractual Clauses (and similar measures in the UK and Switzerland) or other available transfer mechanisms, to help ensure your rights and protections.
8. Changes to This Notice
We may update this Notice from time to time. The “Last updated” date above indicates when this notice was last revised.
9. Contact Us
Our postal address is Persona Identities, Inc., 981 Mission Street #95, San Francisco, CA 94103, United States.
Our data protection representative for the European Economic Area and Switzerland is Darina Byrne, 88 Harcourt Street, Dublin 2, DUBLIN, Ireland, D02 DK18. To make an inquiry to Darina Byrne, please contact idv-privacy@withpersona.com.
Our data protection representative for the UK is: S. Alec Lawton, Graigwen, Plasycoed road, Pontypool Torfaen, NP4 6QH, UK. To make an inquiry to S. Alec Lawton, please contact idv-privacy@withpersona.com.
To contact our data protection office (DPO) please feel free to contact them at dpo@withpersona.com