California Privacy Notice

CCPA / CPRA • California Delete Act • DROP

This California Privacy Notice ("Notice") supplements Ninjahire Inc.'s general Privacy Policy and applies to California residents whose personal information Ninjahire collects, uses, discloses, sells, or shares. It explains Ninjahire's practices and California privacy rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), and, where applicable to Ninjahire as a registered data broker, the California Delete Act and the Delete Request and Opt-Out Platform ("DROP").

For purposes of this Notice, "personal information," "sensitive personal information," "sell," "share," "service provider," and "contractor" have the meanings assigned to them under applicable California law. This Notice does not apply to information excluded from or exempted by the CCPA.

1. Our Role and Data Broker Activities

Ninjahire provides recruiting and talent technology services. Depending on the context, we may process information provided directly by candidates, users, customers, or their systems, and we may also maintain professional or employment-related information obtained from public and third-party sources.

Ninjahire is registered as a data broker with the California Privacy Protection Agency (CalPrivacy). California law generally defines a data broker as a business that knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship, subject to statutory exceptions.

2. Categories of Personal Information

The categories below describe personal information Ninjahire may collect or process, depending on the service, source, customer relationship, and individual.

3. Sources of Personal Information

Depending on the relevant service and relationship, Ninjahire may obtain personal information from:

• You directly, including information you provide in a profile, application, interview, communication, privacy request, or account
• Ninjahire customers and their systems, including applicant tracking systems (ATS), vendor management systems (VMS), recruiting systems, and authorized integrations
• Publicly available sources and public professional information, such as professional networking platforms and job boards
• Third-party data, enrichment, sourcing, or business-information providers, including waterfall queries to locate professional contact information when a recruiter requests it
• Service providers and contractors supporting hosting, communications, analytics, security, payments, and other business operations
• Automatically from your interaction with Ninjahire websites, applications, and services, including logs, cookies, and similar technologies

4. Purposes for Collection, Use, and Processing

• Provide, operate, maintain, support, and improve Ninjahire's recruiting and talent technology services
• Create, maintain, search, enrich, deduplicate, and update professional or candidate profiles
• Support candidate sourcing, matching, outreach, screening, interviewing, scheduling, and related recruiting workflows
• Communicate with candidates, users, customers, and prospective customers
• Authenticate users, maintain accounts, process transactions, and provide customer support
• Analyze product usage, troubleshoot, test, conduct quality assurance, and develop or improve features
• Protect the security, integrity, and availability of Ninjahire systems; detect fraud, abuse, and security incidents
• Comply with legal obligations, enforce agreements, respond to lawful process, and protect rights and safety

5. Disclosure, Sale, and Sharing of Personal Information

California law defines "sale" more broadly than an ordinary exchange of personal information for money, and "sharing" can include disclosure for cross-context behavioral advertising.

Ninjahire may disclose personal information to:

• Service providers and contractors that process information on our behalf
• Customers and business partners where necessary to provide recruiting or talent services
• Legal or government authorities where required
• Parties involved in a merger, acquisition, financing, reorganization, or similar transaction

Certain disclosures of professional or employment-related information to third parties may constitute a sale under the CCPA, including in circumstances where Ninjahire acts as a data broker. Where Ninjahire sells or shares personal information as those terms are defined by California law, California residents may exercise the applicable right to opt out.

Ninjahire does not knowingly sell or share the personal information of consumers under 16 years of age without the affirmative authorization required by California law.

6. Retention

Ninjahire retains personal information for no longer than reasonably necessary for the disclosed purpose, taking into account the nature and sensitivity of the information, the purposes for which it is processed, contractual and operational requirements, legal obligations, security needs, and applicable deletion or suppression requirements. Where a California deletion or DROP request requires deletion, Ninjahire will delete applicable non-exempt information and maintain only the information permitted or required to honor the request, document compliance, prevent re-collection or re-sale, or satisfy law.

7. California Privacy Rights

Right to Know / Access

You may request information about the personal information Ninjahire has collected about you, including categories of personal information, categories of sources, purposes for collection/use/sale/sharing, categories of recipients, and, where applicable, specific pieces of personal information.

Right to Delete

You may request deletion of personal information Ninjahire collected from or about you, subject to applicable exceptions. For data-broker information, California residents may also use DROP as described in Section 9.

Right to Correct

You may request correction of inaccurate personal information that Ninjahire maintains about you, subject to applicable law.

Right to Opt Out of Sale or Sharing

You may direct Ninjahire not to sell or share your personal information where Ninjahire engages in activity that constitutes sale or sharing under the CCPA. Ninjahire will honor legally valid opt-out preference signals where required.

Right to Limit Use and Disclosure of Sensitive Personal Information

Where Ninjahire uses or discloses sensitive personal information in a manner that gives rise to the CCPA right to limit, you may exercise that right. This right does not apply to uses for which California law does not require a limitation mechanism.

Right to Non-Discrimination

Ninjahire will not discriminate against you for exercising a California privacy right.

8. How to Exercise Your Rights

You may submit a California privacy request using the following methods:

• Online form: Submit a privacy request
• Email: [email protected]
• Phone: +1-512-963-3956
• Mail: Ninjahire Inc., Data Protection Officer, 4328 Trinity Woods St, Leander, TX 78641, United States

Please describe the right you wish to exercise and provide information reasonably necessary to locate the relevant record. Ninjahire will verify requests to the degree required by applicable law. Ninjahire will respond within the time required by applicable California law.

9. California Delete Act and DROP

Ninjahire is a registered California data broker. California's Delete Act created the Delete Request and Opt-Out Platform ("DROP"), administered by CalPrivacy, through which a California consumer can submit a single deletion request to registered data brokers.

Registered data brokers are required to access DROP at least once every 45 days and process applicable consumer deletion requests. When Ninjahire retrieves a DROP request and identifies a match as required by applicable law, Ninjahire will delete the consumer's non-exempt personal information, including applicable inferences, and take required steps with service providers and contractors. Ninjahire will report request status through DROP as required.

Ninjahire maintains information about DROP deletion requests as necessary to ensure that information subject to a deletion request remains deleted and is not later reintroduced into covered data-broker activities, except where California law permits otherwise.

Consumers may use DROP at the State of California's consumer privacy portal. A consumer may also submit applicable CCPA requests directly to Ninjahire using the methods in Section 8.

10. Authorized Agents

You may use an authorized agent to submit a request where permitted by California law. Ninjahire may require proof that the agent is authorized and may require the consumer to verify their identity or confirm the authorization, except where different rules apply under law. Requests submitted through DROP are processed under the Delete Act and DROP requirements.

11. Data Broker Registration

Ninjahire registers with the California Privacy Protection Agency as required by the California Delete Act and applicable data-broker law. Ninjahire's registration disclosures are kept consistent with this Notice, including the names and websites under which Ninjahire conducts data-broker activities, the categories of information collected, and the nature of sale or sharing activities.

12. Annual California Data Broker Consumer-Request Metrics

California data brokers must publish specified consumer-request metrics in their website privacy policy by July 1 each year for the previous calendar year. The table below reflects Ninjahire's metrics for calendar year 2025. Ninjahire was incorporated and began operations in fall 2025; no California consumer privacy requests were received during that period.

13. Children's Privacy

Ninjahire does not knowingly sell or share the personal information of consumers under 16 years of age without the affirmative authorization required by California law. If you believe Ninjahire has information about a child that is being handled inconsistently with applicable law, contact [email protected].

14. Changes to This Notice

Ninjahire may update this Notice to reflect changes in its practices, services, or legal obligations. When the Notice is updated, Ninjahire will revise the "Last updated" date and provide any additional notice required by law.

15. Contact Us

Questions or California privacy requests may be directed to:

Ninjahire Inc. — Data Protection Officer

Email: [email protected] Phone: +1-512-963-3956 Address: 4328 Trinity Woods St, Leander, TX 78641, United States

16. Related Notices

This California Privacy Notice supplements Ninjahire's general Privacy Policy, Cookie Policy, AI Interview Notice, and other applicable notices. If this Notice conflicts with a general notice regarding a California privacy right, this Notice controls to the extent required by California law.

For more information about our privacy practices, please review our:

• General Privacy Policy
• EU Privacy Policy