Effective date: 15 August 2023

Introduction

Stripe takes data privacy seriously. This California Applicant Personal Information Notice (“Notice”) explains our collection, use, and disclosure of personal information relating to applicants and prospective applicants (“you” or “applicant”). 

This Notice is designed to comply with the California Consumer Privacy Act of 2018, as amended (“CCPA”).  You can find specific disclosures regarding how we collect, use, retain, disclose, and sell or share personal information by selecting the provided links.

What personal information is collected?

Personal information is information that identifies, relates to, describes, is reasonably capable of being associated with, or could be reasonably linked, directly or indirectly, with a particular applicant but does not include deidentified information. The personal information we collect may include: 

• Contact information and identifiers (such as first and last name, postal or physical address, email address, and phone number);
• Information subject to Cal. Civ. Code §1798.80 such as signature and state identification card; 
• Demographic information, some of which may be protected classifications under California or federal law) such as race, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, disability, citizenship status, and military and veteran status; 
• Online activity information such as devices and browsers across our websites and other online services and usage data associated with those devices and browsers; including IP address, browser types, language used and pages visited. Please see our Cookie Policy for more information;
• Geolocation information, such as approximate location data based on your IP address;
• Professional or employment-related information including:
  • Professional and background information (such as education, skills, work experience and/or CVs, photograph, references, employee records and appraisals);
  • Work permit status (such as immigration, residency, and related information);
  • Education information such as education background and qualifications, trainings, or certifications
• Background screening information and results;
• Social media public profiles or other publicly available data; 
• Travel itinerary and booking information if applicable as part of the recruitment process;
• Content and communications such as interview records, assessment responses, recordings (if applicable) and results including for psychometric and ability tests (if applicable); communications or documents in relation to recruitment activities; 
• Other information necessary for making a recruitment decision or otherwise voluntarily provided by you
• Inferences we derive or generate from the information we collect or create in connection with your application; 

Sensitive personal information

To support our legal and business activities, and as permitted by law, we may collect sensitive personal information as part of our employment recruitment process.

Examples include:

• Government-issued identifiers, such as social security information, driver’s license information, state identification card, or passport information;
• Financial account information (e.g. for the purposes of reimbursing travel and other expenses associated with the recruitment process)
• Sensitive demographic information such as racial or ethnic origin, religious or philosophical beliefs, sexual orientation, or union membership;
• Health information (such as information you disclose regarding an accommodation request).

Sources of personal information

We also collect personal information from a variety of third-party sources, including:

• Directly or automatically collected from you;
• Service providers (e.g., recruiters or recruiting services);
• Individuals you have identified as a reference;
• Background screening and travel providers;
• Online sources including social media (e.g., LinkedIn); 
• Online activity information;
• Open government databases and other publicly available sources.

How and why is my personal information used?

Stripe collects, uses, and retains personal information as appropriate to administer and carry out the recruitment and hiring process, including for human resources purposes, for Stripe’s operational business, safety, and security purposes, and as otherwise described in this Notice and below. 

The personal information requested or provided as part of the application process is to allow Stripe to assess your application for employment. If you do not provide some or all of this personal information, it may affect our ability to process your application or enter into an employment agreement with you. 

If you become a Stripe employee, personal information that we collected as part of the recruitment, application, and hiring process will become part of your personnel file and will be used, disclosed, and retained by Stripe in accordance with our CCPA Personal Information Notice.

How is personal information disclosed? 

Stripe shares personal information for the purposes described in this Notice, and with individuals in roles requiring access to this information.

Stripe may also disclose personal information (including sensitive personal information) with the following categories of recipients, for the business and commercial purposes described in this Notice:

• Our affiliates for purposes identified in this Notice; 
• Service providers that process personal information on Stripe’s behalf, including recruiting, HR tools, background screening, and travel providers
• Parties to a corporate transaction, as part of a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets;
• Government regulators, law enforcement, court officials and others, in connection with audits, investigations, or other legal or regulatory purposes; and
• Professional Advisors, including lawyers, immigration advisors, and other professional advisors.

We may also access, transfer, disclose, and preserve personal information when we believe that doing so is necessary to:

• evaluate applications for employment;
• comply with legal and regulatory obligations;
• comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies;
• operate and maintain the security of Stripe’s systems, including to prevent or stop an attack on our computer systems or networks; 
• protect Stripe and the rights or property of ourselves or others, including enforcing our agreements, terms, and policies; or
• act in urgent circumstances such as protecting the health or personal safety of an applicant, employee, agent, customer, user of our applications or services, or member of the public.

Stripe does not sell personal information as defined by the CCPA. 

Finally, we may use and disclose aggregated information in accordance with applicable state, federal, or country-specific laws. 

Retention of personal information

We retain personal information in accordance with our obligations under applicable labor and employment law and as necessary to administer and carry out our recruitment, application, and hiring practices. 

Your privacy rights

• We provide applicants with notice about the personal information we collect, how it will be used, and with whom we disclose personal information, such as through this Notice.
• We will get consent from applicants for the collection and use of personal information where such consent is required by applicable law. Failure to provide necessary personal information may disqualify an applicant from employment or restrict participation in certain plans or programs. 
• Right to know. You have a right to request that we disclose the personal information we have collected about you. You also have a right to request additional information about our collection, use, disclosure, sale, or sharing of personal information. Note that we have provided much of this information in this Notice. 
• Right to request correction. You have the right to request the correction of inaccurate personal information. 
• Right to request deletion. You also have a right to request that we delete personal information under certain circumstances provided by law. 
• Right to opt-out from a sale. We do not sell personal data as defined by the CCPA and have not done so in the past 12 months. 
• Right to opt-out of sharing of cross-context behavioral advertising. Learn more here and in our Cookie Policy. 

Right to limit use and disclosure of sensitive personal information. 

We use or disclose sensitive personal information to infer individual characteristics or for purposes other than those permitted by CCPA, you have a right to request that we limit our use and disclosure of such sensitive personal information. 

• Right to notice. You have a right to receive notice of our personal information collection, use, retention, and disclosure practices at or before the collection of personal information;
• Right to non-discrimination. You have a right not to be discriminated against for exercising these rights;
• Right to appeal. You have the right to appeal any decision made by Stripe relating to these rights.

How to Exercise Your Rights

• To exercise any of the rights described above, please contact applicant-privacy@stripe.com. We will need to verify your identity to the degree of certainty required by law. We will verify requests by asking you to send the request from the email address associated with your application or by requiring you to provide additional information reasonably necessary to verify your identity. 
• You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Before accepting such a request from an agent, we will require the agent to provide proof that you have authorized it to act on your behalf. We may need you to verify your identity directly with us and confirm that you provided the authorized agent permission to submit the request.
• Metrics. To learn more about Stripe’s California privacy rights metrics, see here.
• Do not track and signals. Learn more about how we honor “do not track” and other signals.

Updates to this Notice

We may occasionally update this Notice from time to time to reflect changes required by law or our practices or procedures. The “effective date” at the top of this Notice indicates when this Notice was last revised. Any changes are effective when we post the revised policy on the website or otherwise provide notice of the update as required by law. 

Who should I contact with questions?

For further information regarding Stripe’s collection, use, or disclosure of your personal information or questions related to Stripe’s compliance with this Notice, please contact applicant-privacy@stripe.com.