Applicant Privacy Notice
Abnormal AI, Inc. Applicant Privacy Notice
Last updated: 19 May 2025
Personal Data We Collect
This Applicant Privacy Notice explains how Abnormal AI, Inc. (“Abnormal,” “we,” or “us”) and its affiliates, collect, use, share, and otherwise processes your personal information (also known as personal data) during our recruitment processes, such as when you apply for an open role with us, or when you express interest in future Abnormal opportunities, as well as referrals and recruitment through third party agencies. It also contains information about your choices and privacy rights.
This Applicant Privacy Notice applies in addition to our general
Privacy Notice. Please refer to the
Privacy Notice for our practices related to personal data submitted for other purposes.
We recommend that you read this Applicant Privacy Notice in full to ensure that you are informed.
Information We Collect About You
Information that we collect from or about you includes information you provide, information we collect automatically, and information we receive from other sources.
Information You Provide to Us
- Contact data: your full name, pronouns, phone number, address, email address, job site information (e.g., LinkedIn profile), and onsite badge information (if you visit us onsite).
- Government-issued ID number and right to work status: your identification details, such as government identification documents, citizenship status, residency, and work permit status.
- Professional and employment information: your resume or CV, work experience, skills, employment references, compensation information, and achievements or other information about your professional background.
- Educational information: your educational background, technical or professional achievements, qualifications, and certifications.
- Interview notes and assessments: if you interview with us, we may collect information from you when you participate in any assessments relevant to the role you apply for, and interview notes.
- Sensitive information: that you may choose to provide to us during the recruitment process, such as demographic information, or information about your gender, race, ethnicity, health, and disabilities. Please note this is not visible to your manager.
- Other information: if you choose to submit to us as part of your application.
Information We Collect from Other Sources
We may combine personal information we receive from you with personal information we obtain from other sources (in each case, where permissible and in accordance with applicable law), such as:
- From referrals: If you are referred for a role by someone else, we collect information from the individual who referred you.
- From references: We may receive references from your previous employers or academic supervisors. These references are received under confidentiality obligations.
- From background check providers: We may receive background check information from background check providers and identity verification services.
- From recruitment and staffing partners or other job websites: We may collect information from recruitment and staffing partners or other job websites (e.g., LinkedIn) if you use or otherwise apply to us through those sources.
- From professional licensing and certification bodies: where it is relevant for the position, we may receive information from professional licensing and certification bodies, and educational and training institutions.
- During interviews and assessments: if you interview with us, we will collect information during the interview and application process, which may include confidential interviewer opinions, interview notes and recordings, and screenshots recorded via video.
- From publicly available sources: We may receive information from other publicly available sources, such as information that you have chosen to make public online (e.g., your public LinkedIn profile).
Information We Collect Automatically
When you use the careers pages on our website, we automatically collect information sent to us by the device you use, for example, your IP address. For more information about the personal information we collect through our websites and how we use cookies and online identifiers, please see the ‘Information We Collect Automatically’ and ‘Cookies and Online Identifiers’ sections of our
Privacy Notice.
Declining To Provide Information
To process your application, we ask you to provide personal information about yourself. You provide your information voluntarily, and you determine the extent of information you provide to Abnormal. However, we may need to collect certain personal information to assess your eligibility for a particular role. If you do not provide the information we identify as required or mandatory, we may not be able to proceed with your job application. If we ask you to provide any such information, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).
How We Use Your Information
When you use the careers pages on our website, we automatically collect information sent to us by the device you use, for example, your IP address. For more information about the personal information we collect through our websites and how we use cookies and online identifiers, please see the ‘Information We Collect Automatically’ and ‘Cookies and Online Identifiers’ sections of our
Privacy Notice.
- To proactively contact you: where we have identified you as a potential candidate from information we've collected from public sources or third parties, we may use your personal information to suggest opportunities for you (e.g., by getting in touch with you about an opportunity). If you have previously applied for a role with Abnormal, we may contact you about future career opportunities that may interest you.
- To evaluate your application and make an employment decision: We use your personal information to evaluate your application for a role at Abnormal and make hiring decisions.
- For secure hiring practices: As part of our secure hiring practices, we conduct video interviews and validate applicant identity at various stages through our recruitment process. If your application is successful and Abnormal makes a conditional offer of employment, we will carry out pre-employment checks, which must be successfully completed to progress to a final offer. All processes and pre-employment checks are in line with prevailing legislation and our policies relevant to our security and privacy standards.
- To communicate with you regarding job opportunities and the recruitment process: We may send you emails or otherwise communicate with you in response to your questions, feedback, comments, and your application. Where we use a recruitment agency or employment business partner, we may also communicate through that third party.
- To conduct interviews and assessments: We may use your personal information to facilitate the recruiting process, including scheduling interviews and communicating with you.
- To produce an offer letter and employment contract: If your application is successful, we will use your information to prepare an offer letter and employment contract.
- To improve and report on our recruitment process and analyze hiring trends: We may use information you provide to us during your application process to provide management reports containing analysis related to recruiting metrics, such as the length of the recruiting process, and conduct other analyses to improve our recruiting processes. Where appropriate, we will remove personal identifiers from data containing personal information so that it cannot be traced back to an individual and aggregate it by combining it with the data from multiple sources and/or individuals.
- To protect our interests: we may use your personal information to protect our interests, which may include protecting our legal rights and maintaining the security and integrity of our facilities, equipment, and electronic platforms.
- For legal reasons: We may use your personal information to comply with applicable laws, such as immigration and/or employment laws or regulations. We may also use your personal information to respond to, investigate, or participate in valid legal processes and proceedings, including those from law enforcement or government agencies, to detect, prevent, or investigate potential fraud, and to resolve disputes and enforce agreements.
How We Share Your Information
We only share your personal information with trusted third parties. We may share personal information about you with third parties, for the purposes described above, in the following circumstances:
- With our affiliates: We may share your personal information with relevant teams at other companies in the Abnormal group, for example, with the people team, legal and finance teams, your hiring manager, and IT staff, if access to the data is necessary for the performance of their roles. As a global company, we have employees employed by affiliate companies across the world.
- With our service providers and business partners: We may share your personal information with our service providers and business partners, to facilitate the recruitment process, for example, recruiters and employment agencies, HR and recruitment platform providers, IT service providers, and background checking services.
- Your references and previous employers: We may contact your references and your previous or current employers to perform professional reference and employment checks.
- For legal reasons: We may share your personal information with law enforcement or governmental entities for compliance with the law or to investigate legal claims. In the event of confirmed fraudulent activity, we may also exchange information with other companies and organizations for fraud protection.
- Through business transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, acquisition, dissolution, corporate reorganization, or similar event.
We will not share any of the information you provide with any third parties for marketing purposes.
In some cases, we may ask for your consent to collect, use, or share your personal information. When we do that, we will always record your consent, and you may change your mind and opt out by contacting us at
privacy@abnormalsecurity.com.
International Transfers
We only share your personal information with trusted third parties. We may share personal information about you with third parties, for the purposes described above, in the following circumstances:
Abnormal may transfer your personal information to countries other than your country of residence. In particular, we may transfer your personal information to the United States and other countries where our affiliates, business partners, and service providers are located. These countries may not have equivalent data protection laws to the country where you reside.
Wherever we process your personal information, we take appropriate steps to ensure it is protected in accordance with this Applicant Privacy Notice and applicable data protection laws. These safeguards include implementing the European Commission’s Standard Contractual Clauses for transfers of personal information from the European Economic Area or Switzerland between us and our business partners and service providers, and equivalent measures for transfers of personal information from the United Kingdom.
How We Keep Your Personal Information Secure
We take appropriate security measures, including organizational, technical, and physical safeguards, designed to protect against unauthorized access to, alteration of, or destruction of your personal information.
While we follow industry standards to protect your data, unfortunately, no transmission of data over the Internet or any public network can be guaranteed to be 100% secure, so we encourage you to take care when disclosing personal information online.
How Long We Keep Your Personal Information
We will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, and as required or permitted under applicable law.
- If you are successful in your application for a position at Abnormal: We will retain the information that you provide during the application process, and information about your application process, as part of your employee records, and you will receive a separate privacy notice from us explaining how we process the personal information of our employees.
- If your application is not successful or you withdraw from the process: We will retain your information for the purposes described in this Applicant Privacy Notice, such as to keep you in mind for future roles, to comply with our legal obligations, or to establish, exercise, or defend legal challenges related to our recruitment processes.
If you do not want us to retain your information for consideration for other roles, or want us to update it, please contact us at
privacy@abnormalsecurity.comTo determine the appropriate retention period for how long we will retain your personal information we will consider factors such as the volume, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for processing, whether those purposes can be achieved through other means, and compliance with our obligations under applicable law.
Your Choices and Rights
Depending on applicable law, you may have certain rights over your personal data. For example, you may have the right to request a copy of your personal data that we hold, to update your personal data if it is inaccurate or out of date, or to delete your personal data.
These rights are not absolute, and not all jurisdictions provide these rights to their residents. Therefore, we may decline your request in certain circumstances, as permitted by applicable law.
Under certain circumstances we will not be able to fulfill your request, such as if it interferes with our regulatory obligations, affects legal matters, we cannot verify your identity, or fulfillment involves disproportionate cost or effort, but in any event, we will respond to your request within a reasonable timeframe (and in accordance with applicable laws) and provide you an explanation.
Artificial Intelligence Tools
Our commitment to transparency and responsible data handling extends to the use of Artificial Intelligence Tools (AI Tools) within our recruitment process.
As part of our recruitment process, we use carefully selected AI Tools to assist our team during the recruitment process. We use AI Tools to assist our talent acquisition team members and support their human judgment and valuable experience. Additionally, a human in the loop is reviewing all outcomes and decisions.
Candidates are not subject to decisions based solely on automated processing, including profiling, and we do not use AI Tools to infer personal information from interviews, nor do we perform any biometric analysis (e.g., emotion recognition, facial analysis, or voice profiling).
We currently use the following third-party AI Tools:
- Video interview platforms: we conduct structured interviews, some of which are recorded using third-party video platforms, which also produce AI-generated note-taking summaries. These recordings and note-taking summaries are intended to help ensure consistency and fairness in our hiring process by enabling the interviewer to focus on the candidate instead of taking notes, and allowing multiple team members to review interviews, assess qualifications and provide feedback.
- CV/resume analysis tool: For some roles, we receive very large volumes of applications, so to process these, we may use AI Tools that support our talent acquisition team in assessing how closely candidate applications align with the job requirements. Use of this AI Tool is intended to help improve consistency, accuracy, and speed in the recruitment process and reduce the potential for human bias or errors.
The output of any AI Tool is only used in a way that is designed to assist our talented team and is only one of several factors considered throughout the recruitment process. Abnormal hiring managers, prospective teammates, and the talent acquisition team are central to ultimate hiring decisions across all stages of the hiring process.
When we use such AI Tools, we will do so in a way that is consistent with the requirements of applicable privacy and employment laws.
Children’s Data
Our careers websites are not directed to anyone under the age of 18. A parent or guardian who becomes aware that his or her child under the age of 18 has provided us with personal information may contact us at
privacy@abnormalsecurity.com, and we will delete the child’s data.
Additional Information for Certain Jurisdictions
Depending upon your place of residence, you may have additional rights in relation to your personal information. Please review the jurisdiction-specific sections below.
California Residents
The disclosures in this section apply only to California residents and are intended to supplement this Applicant Privacy Notice with information required by California law.
Categories of CCPA personal information
The below table summarizes:
- the categories of personal information collected by Abnormal in the past 12 months; and
- the categories of personal information disclosed for business purposes by Abnormal (including to third parties) in the past 12 months.
Please see the following sections of this Applicant Privacy Policy for information about the sources from which personal data is collected, the business purposes for which data is collected and used, and the third parties with whom we share your personal information:
- sources: the ‘Information We Collect About You’ section above describes the sources from which personal information is collected.
- business purposes: the ‘How We Use Your Information’ section above describes the business purposes for which we collect and use your personal information.
- third party sharing: the ‘How We Share Your Information’ section above third parties with whom we share your personal information.
Category of personal information
Information such as, full name, alias, email address, phone number, address, contact details, job site information (e.g., LinkedIn), national insurance number, social security number, pronouns and date of birth.
Personal information described under Cal. Civ. Code § 1798.80 to the extent not already included in other categories here
Information such as, your signature if you sign an offer letter or any documents during the recruitment process, passport number, driver’s license or state identification, financial information, medical information, or health insurance information.
Information such as, your bank details used to reimburse you for any agreed travel and expenses.
Internet or other electronic network activity
Information such as, interactions with our job application portals, career site usage data, and communication logs.
Audio, electronic, or visual Information
Information such as, your likeness, interview recordings, transcripts, voicemail, and communication logs.
Professional or employment-related information
Information such as, your resumes/CVs, cover letter, job history, skills, qualifications, educational background, employment references, compensation information and achievements.
Inferences drawn from other information
Information such as, inferences drawn from assessments, background checks (where permitted), and interview evaluations.
Sensitive personal information
Information such as, government IDs, racial or ethnic origin, disability status, and other voluntary disclosures for equal opportunity purposes.
Your additional California rights
If you are a California resident, some additional rights may be available to you under the California Consumer Protection Act (CCPA), including rights:
- to know what personal information is being collected, for what purpose and the sources from which personal information is collected and the categories of recipients of your personal information.
- to request deletion, correction and access of your personal information.
- to know what personal information is being "sold" or "shared", for what purpose and the categories of recipients of your personal information.
- to opt out of the sale or sharing of your personal information.
- to limit the use of your sensitive personal information.
- to not be discriminated against for exercising one of your CCPA privacy rights.
Please note: not all of the above rights are absolute. There may be occasions whereby we cannot carry out your request however, we will always provide an explanation where this is the case.
You will not be discriminated against for exercising any of your privacy rights under the CCPA.
Sale and sharing of personal information
Abnormal does not sell or share applicant data for cross-context behavioral advertising. The Abnormal websites and recruitment process are not directed to anyone under the age of 16 and Abnormal has no actual knowledge that it sells or shares the personal information of individuals under 16 years of age.
How to Exercise Your California Privacy Rights
We will need to verify your identity to process your request and we reserve the right to confirm your California residency. Government identification may be required. If you wish to designate an authorized agent to make a request on your behalf, we will need to verify both your and your agent’s identities, which may require submission of government identification. Your agent must also provide valid power of attorney or other proof of authority acceptable to us in our sole discretion. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it. In certain cases, we may be permitted by law to deny your request.
Other US States
Depending on applicable laws in your state of residence, you may request to (1) confirm whether or not we process your personal information; (2) access, correct, or delete the personal information we maintain about you; (3) receive a portable copy of such personal information; and/or (4) restrict or opt out of certain processing of your personal information, such as targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects. If we refuse to take action on a request, we will provide instructions on how you may appeal the decision. We will respond to requests consistent with applicable law.
European Economic Area, UK and Switzerland
The information in this section applies only to individuals in the EEA, Switzerland or UK and is intended to supplement this Applicant Privacy Notice with information required by applicable law in those jurisdictions.
Legal basis for processing
We collect your personal information if we have a legal basis for doing so. The legal basis we rely on depends on the personal information and the specific context in which we collect it.
Generally, we collect and process your personal information where:
- we need it to enter or perform a contract with you.
- we need to process your personal information to comply with a legal obligation, for example – to comply with employment and immigration laws or to conduct legally required background checks.
- where we have a legitimate interest, which is not overridden by your privacy rights, for example - assessing your suitability for an open role and reaching a hiring decision, communicating with you, evaluating our recruiting processes, to detect and prevent fraud, and to defend our interests and rights.
- you give us consent, for example – to record calls or interviews.
In addition, when we collect special category data, such as health, religious, sexual orientation or ethnicity information, we do so where:
- we need it to satisfy employment law rights and obligations - to the extent necessary under applicable employment laws.
- necessary to establish, exercise or defend legal claims - to the extent necessary to process your sensitive personal information.
- you give us explicit consent, for example – as part of a demographic survey.
Your additional EEA, Swiss and UK privacy rights
If you are resident in the European Economic Area, Switzerland, or United Kingdom, you have additional data privacy rights. If you have consented to our use of your personal information for a specific purpose, you have the right to change your mind at any time, but this will not affect our processing of your information that has already taken place. You also have the following rights with respect to your personal information:
- the right to access, correct, update, or request deletion of your personal information.
- the right to object to the processing of your personal information.
- the right to withdraw your consent to the processing of your personal information at any time, if we collected and processed your personal information with your consent.
- the right to restrict processing of your personal information, and temporarily limit the way we use it, for example - whilst you check that the personal information we hold for you is correct.
- to request portability of your personal information.
- opt out of marketing communications we send you at any time, for example – if you no longer want to see job alerts.
- the right to lodge a complaint with your national data protection authority or equivalent regulatory body.
Please note: not all of the above rights are absolute. There may be occasions whereby we cannot carry out your request however, we will always provide an explanation where this is the case.
Changes to This Privacy Notice
Abnormal may change this Applicant Privacy Notice from time to time. We will post any changes on this page and, if we make material changes, provide a more prominent notice. You can see the date on which the latest version of this Applicant Privacy Notice was posted above.
How To Contact Us
Please contact us at
privacy@abnormalsecurity.com if you have any questions about our privacy practices or this Applicant Privacy Notice. You can also write to us at:
Abnormal AI, Inc.
8474 Rozita Lee Ave, Suite 420,
Las Vegas, NV 89113
Attn: Privacy Counsel