This statement explains and provides notice on how and why Tecton collects, uses, and discloses your personal information when you apply for a job with us. Here is a brief summary of the information contained in this notice:

• What personal information do we collect? We collect identifiers, applicant records, protected characteristics, professional or employment information, and sensitive personal information.
• Why do we collect and use personal information? We use personal information to make hiring decisions, operate our business, and comply with our legal obligations.
• How long do we retain personal information? We keep personal information for 5 years unless you request that we keep it longer or remove it sooner.
• Why do you keep it for 5 years? Tecton retains applicant data for up to 5 years to support our legitimate interest in building and maintaining a talent pipeline. As we operate in a highly specialised and rapidly evolving market, we often consider previous applicants for future opportunities or receive repeated interest from candidates over time. Retaining data allows us to streamline recruitment, reduce duplicated effort, and ensure consistency in our hiring decisions. We do not retain data longer than necessary and you may request deletion of your data at any time by contacting us at privacy@Tecton.ai.

What personal information does Tecton collect?

We collect (and in the last 12 months we have collected) from applicants the following categories of personal information:

• Identifiers and Applicant Records such as your name, contact information, and employment history, and, if you are offered a job, limited medical information and details about criminal history. Certain roles may be subject to financial, credit or driving record screening.
• Professional or Employment Information including information in your resume, cover letter, or other application materials such as your work history and education background.

Note: If you chose not to provide identifiers, applicant records or professional or employment information, then we will not be able to process your application.

• Protected Characteristics and Sensitive Personal Information such as race, ethnicity, religious beliefs, sexual orientation, and health or medical information. You are not required to provide this information.

Note: We only collect medical information, protected characteristics, or sensitive personal information if you provide it to us. Doing so is voluntary; if you choose not to provide that information, it will not harm your application.

How does Tecton collect my personal information?

We may collect your personal information from you or the following sources:

• Recruitment agencies
• Background check providers
• Professional references you identify
• Publicly accessible sources

How does Tecton use my personal information?

We use personal information we collect to make hiring decisions, operate our business, and fulfill our legal and compliance obligations, including:

• Assessing your skills, qualifications, and suitability for the work
• Completing background and reference checks, where applicable
• Communicating with you or any third parties you’ve engaged (such as agencies) about the recruitment process
• Letting you know about future opportunities, if appropriate
• Tracking our diversity, equal opportunity, and other recruitment objectives (your data is anonymized for the purpose of reporting and used only in aggregate)

When processing your personal information, we strive to ensure that it is:

• Processed lawfully, fairly and in a transparent matter;
• Collected for legitimate purposes that are clearly explained to you;
• Relevant and limited to what is necessary;
• Accurate and kept up to date; and
• Protected using appropriate security measures designed to prevent unauthorized use, access, alteration or disclosure.

We only process your personal information pursuant to one of the following legal bases:

• Consent. You provided us with consent to process your personal information.
• Legitimate Interest. It is necessary for us to process the information in order to determine if we are going to hire you.
• Contract. We may process your personal information to decide whether to enter into an employment contract with you.
• Legal Compliance. We may process your personal information to comply with our legal obligations.

Does Tecton disclose my information?

Tecton does not sell (nor in the last 12 months have we sold) personal information or made it available for targeted advertising, except for use of cookies in compliance with applicable laws. We disclose personal information to our vendors who help process your application including recruitment agencies and third-party software providers. Before we disclose personal information to our vendors, we require them to agree to maintain appropriate safeguards and only process the information per our instructions.

What rights do I have concerning my information?

You have the right to request that we:

• provide you a copy of the personal information we hold about you,
• correct/rectify that information, or
• delete your personal information.

You, your authorized agent, or another person authorized by law may request to exercise the above rights. If you wish to exercise the above rights, please submit via privacy@Tecton.ai

Will Tecton change this policy?

We may change this policy from time to time, such as when the law changes. We will notify applicants of any material changes to the extent required by law, and a current version of our policy will be available online.

Who can I contact with questions or concerns?

If you have questions or concerns, please contact us at privacy@Tecton.ai. If you live in the United Kingdom, you may submit a complaint to the Information Commissioner’s Office (“ICO”) (www.ico.org.uk); however, we request that you first give us an opportunity to address your concerns before you contact the ICO. If you live in the European Union, you may submit a complaint to your local data protection authority under the General Data Protection Regulation (GDPR). A list of supervisory authorities is available at https://edpb.europa.eu/about-edpb/board/members_en. However, we encourage you to contact us at privacy@Tecton.ai first so we can address your concerns directly. If you live in Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access and correct your personal information and to challenge its accuracy and completeness. You may contact us at privacy@Tecton.ai to exercise these rights. You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada (www.priv.gc.ca), but we welcome the opportunity to resolve any issues with you directly first We only use sensitive personal information as permitted by California Civil Code section 1798.121(a) and associated regulations.