California Job Applicant Privacy Notice

January 1, 2023

This Privacy Notice explains how InvoiceCloud and its affiliates (collectively, “InvoiceCloud,” “we,” “our,” or “us”) collects, uses, discloses, and otherwise processes personal data about our California based recruits and job applicants.

This Privacy Notice is not a contract and does not create any legal rights or obligations. This Privacy Notice also is not intended to replace other notices or disclosures we may provide to an individual in connection with their application for a job or eventual role in our organization, which will supersede any conflicting disclosures contained in this Privacy Notice.

What is Personal Data? 

When we use the term “personal data” in this Privacy Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual within the context of the individual acting as a recruit or job applicant of InvoiceCloud. It does not include aggregated or de-identified information that is maintained in a form that cannot reasonably be used to infer information about, or otherwise be linked to, a particular individual. Where we maintain de-identified data, we will maintain and use the data in de-identified form and not attempt to re-identify the data except as required or permitted by law.

Our Collection and Use of Personal Data

During the recruiting process and when an individual applies for a job with us, we collect the following professional or employment-related personal data:

  • Contact Information: such as full name, email address, home address and telephone number.
  • Professional History & Qualifications: such as previous employers, positions and work experience, professional licenses, certificates or other qualifications, employment references or referrals, and information relating to potential conflicts with the role the individual is applying or being considered for.
  • Educational History & Qualifications: such as highest level of education, the schools the individual attended and when they were in attendance, degrees, certificates, or other educational qualifications the individual earned, and the individual’s transcripts or educational references.
  • Compensation Information: such as previous or desired salary, bonus, benefits, expenses, and stock or equity grants, as permitted by law.
  • Equal Opportunity Information: such as age, race, ethnicity, national origin, citizenship, sex, gender identity or transgender status, sexual orientation, religion, disability, or accommodation request, or marital or veteran status when an individual chooses to provide it, but it will not be used in the hiring decision unless specifically permitted by law.
  • Web-Related Information: such as technical details about the individual’s visit to our online services contained in log files or analytics data relating to their usage and activity on our online services. For more information, please refer to the general Privacy Notice on our website. The Privacy Notice governs our use of information collected from our website visitors. If there is any conflict between our website Privacy Notice and this Job Applicant Privacy Notice, the Job Applicant Privacy Notice will govern with respect to our use of personal data in connection with recruiting and job applications.
  • Other Application and Interview Information: any personal data the individual chooses to share with us in their interview or application, CV, resume, transcripts, or other supporting documentation.
  • Inferences: we may generate inferences or predictions about recruits and job applicants, and their abilities, interests, or preferences based on the other personal data we collect and the interactions we have with them.

Although we often collect the personal data described above directly from the individual, we may also collect certain information from references, recruiters, job-related social media sites (such as LinkedIn), and publicly available sources (such as government records and social media sites). In addition, we may also collect this information through service providers and other third parties that collect it on our behalf, such as communications providers, scheduling providers and application providers.

Use of Personal Data 

We use the personal data we collect during the recruiting process and when an individual applies for a job with us to:

  • Identify the individual as a potential candidate and review their application for a position with us;
  • Verify the information provided to us in connection with their application or received from other sources;
  • Determine their eligibility and suitability for the potential position or other opportunities with us;
  • Facilitate the recruiting and interview process;
  • Communicate with the individual about the status of their application or other opportunities with us that may be of interest to them;
  • Assess and improve the performance and success of our recruiting and hiring process;
  • Conduct internal investigations, audits, compliance, risk management, problem resolution and security operations;
  • Fulfill contractual obligations to recruits, applicants and other third parties;
  • Comply with applicable law, rule, regulation, legal proceeding, and government investigations, including relating to tax reporting and immigration.

Please note that if an individual accepts an offer from us, we may transfer the personal data we collected about them during the recruiting and job application process to their personnel file with us.

Our Disclosure of Personal Data 

We may share your personal data with the following third parties for the purposes described below:

  • Within InvoiceCloud: We share personal data relating to recruits and job applicants within our family of companies for internal administrative purposes and uses that are consistent with this Privacy Notice. For example, the InvoiceCloud entity responsible for the job posting may share personal data about an applicant with another InvoiceCloud entity that is responsible for our organization-wide recruiting and employment decisions.
  • Recruiters and Job Application Providers: We often engage recruiters and job application providers to assist us in identifying potential job applicants and processing job applications we receive. In order for these third parties to assist us in the recruiting and job application process, we share personal data about potential and current personnel with them.
  • Other Service Providers: In addition to the third parties identified above, we engage other third parties to perform certain functions on our behalf in connection with the uses of personal data described in the Our Collection and Use of Personal Data section above, including assisting us with our recruiting process, personnel management, benefits and services offerings and other related business operations. Depending on the function the third party serves, the service provider may process personal data on our behalf or have access to personal data while performing functions on our behalf.
  • Business Transaction or Reorganization: We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose personal data to a third-party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal data may also be disclosed in the event of insolvency, bankruptcy, or receivership.
  • Legal Obligations and Rights: We may disclose personal data to third parties, such as legal advisors and law enforcement:
    • in connection with the establishment, exercise, or defense of legal claims;
    • to comply with laws and regulations or to respond to lawful requests and legal process;
    • to protect our rights and property and the rights and property of our agents, customers, and others, including to enforce our agreements, policies, and terms of use;
    • to detect, suppress, or prevent fraud;
    • to reduce credit risk and collect debts owed to us;
    • to protect the health and safety of us, our customers, or any person; or
    • as otherwise required by applicable law.
  • Otherwise with Consent or Direction: We may disclose personal data about our recruits and job applicants to certain other third parties with their consent or direction.

The following disclosures only apply to residents of the State of California.

Sensitive Information of Recruits and Job Applicants

The following personal data elements we collect may be classified as “sensitive” under certain privacy laws (“sensitive information”):

  • Information relating to racial and ethnic origin, religious beliefs, health, disabilities, sexual orientation, gender identity and transgender status.

We use this sensitive information for the purposes set forth in the Our Collection and Use of Personal Data section above.

We do not sell sensitive information, and we do not process or otherwise share sensitive information for the purpose of targeted advertising. However, subject to certain legal limitations and exceptions, you may be able to limit our processing of sensitive information (as described in the Your Privacy Choices section below).

Retention of Personal Data

We retain personal data only for as long as is reasonably necessary to fulfil the purpose for which it was collected. However, if necessary, we may retain personal data for longer periods of time, until set retention periods and deadlines expire, for instance where we are required to do so in accordance with legal, tax and accounting requirements set by a legislature, regulator, or other government authority.

To determine the appropriate duration of the retention of personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations.

Once retention of the personal data is no longer necessary for the purposes outlined above, we will either delete or deidentify the personal data or, if this is not possible (for example, because personal data has been stored in backup archives), then we will securely store the personal data and isolate it from further processing until deletion or deidentification is possible.

Your Privacy Choices

InvoiceCloud Personnel who are California residents you may exercise the below consumer rights granted under the California Privacy Rights Act (“CPRA”):

  • The right to know. You have the right to request to know (i) the specific pieces of personal information we have about you; (ii) the categories of personal information we have collected about you in the last 12 months; (iii) the categories of sources from which that personal information was collected; (iv) the categories of your personal information that we sold or disclosed in the last 12 months; (v) the categories of third parties to whom your personal information was sold or disclosed in the last 12 months; and (vi) the purpose for collecting and selling your personal information.
  • The right to deletion. You have the right to request that we delete the personal information that we have collected or maintain about you. We may deny your request under certain circumstances, such as if we need to comply with our legal obligations or manage your employment for which your personal information was collected. If we deny your request for deletion, we will let you know the reason why.
  • The right to correction. You have the right to request that we correct your personal information if it is inaccurate taking into account the nature of the personal data and the purposes of the processing of the personal data.
  • The right to control over sensitive information. You may limit the use and disclosure of sensitive information to uses necessary to provide the services reasonably expected by you, and for certain other purposes such as helping to ensure data security and integrity. We do not use any sensitive personal information outside of the business purposes listed above.
  • The right to access & portability. You have the right to obtain access to the personal data we have collected about you, and where required by law, the right to obtain a copy of the personal data in a portable and m to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hinderance.
  • The right to Control Over Automated Decision – Making/Profiling. The right to direct us not to use automated decision making or other profiling for certain purposes.
  • The right to equal service. You have the right not to received retaliatory or discretionary treatment in connection with a request to exercise the above rights.

Submitting Privacy Rights Requests 

For InvoiceCloud California Personnel who wish to exercise one of the privacy rights identified above, please:

  • Complete this request form or Call 1(888)-354-6412.

Before processing your request, we will need to verify your identity and confirm you are a resident of the State of California. In order to verify your identity, we will generally either require the successful authentication of your work-related account, or the matching of sufficient information you provide us to the information we maintain about you in our systems. As a result, we require requests to include your full name, work or personal email, confirmation that you reside in California. We may at times need to request additional personal data from you, taking into consideration our relationship with you and the sensitivity of your request.

In certain circumstances, we may decline a privacy rights request, particularly where you are not a resident of the State of California or where we are unable to verify your identity.

Submitting Authorized Agent Requests

In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent’s authority to act on your behalf. In order to verify the authorized agent’s authority, we generally require evidence of either (i) a valid power of attorney or (ii) a signed letter containing your name and contact information, the name and contact information of the authorized agent, and a statement of authorization for the request. Depending on the evidence provided, we may still need to separately reach out to you to confirm the authorized agent has permission to act on your behalf and to verify your identity in connection with the request.

Appealing Privacy Rights Decisions

Depending on your state of residency, you may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted using our online form or by calling 1(888)-354-6412.

Updates to this Privacy Notice 

We will update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the “Last Updated” date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify you by email, by prominent posting on www.invoicecloud.net, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided in the notification.