Effective as of September 8, 2023
ThoughtSpot, Inc. and its subsidiaries (collectively “ThoughtSpot”, “we”, “our”, or “us”) is committed to protecting your privacy and Personal Data (as defined below). This Candidate Privacy Notice (“Notice”) covers our privacy practices with respect to the collection and use of information obtained or produced when you apply for a job or other role with us or participate in the recruitment process (“Personal Data”) and the rights you have in connection with that information.
ThoughtSpot collects Personal Data directly from you, as a job applicant, or may receive Personal Data from third parties, for example, in connection with a background, employment, or reference check, subject to your consent where required by law. Personal Data excludes anonymous or de-identified data that is not associated with a particular individual.
We may collect, store, and process the following categories of Personal Data directly from you, in connection with our application and recruiting activities:
To the extent we collect sensitive data, we do so for the purposes described in this Notice and, where required by applicable data protection or privacy law, we will obtain your consent to our use of your sensitive Personal Data.
We may also collect the following types of Personal Data about you from other sources during the recruitment process:
Some of the Personal Data listed in this Notice is mandatory in connection with our recruiting activities. Failure to provide or allow us to process mandatory Personal Data may affect our ability to accomplish the purposes stated in this Notice.
As you navigate through our website, we may also collect certain information from you about your visit to our websites using "cookies" and other similar tracking technologies. For further information, please consult our Cookie Policy.
We only process your Personal Data where applicable law permits or requires it in connection with carrying out our application and recruitment process. Certain countries require us to have a legal basis to process your Personal Data. The precise legal bases might vary by country, but in general, our legal bases to process your Personal Data are: to take steps necessary to enter into an employment contract with you, to comply with a legal obligation that applies to us, for our legitimate interests (we put in place safeguards to ensure that your privacy or other fundamental rights and freedoms are not overridden by our legitimate interest) or the legitimate interests of third parties, or with your consent if applicable law requires consent. We may process your Personal Data for the following legitimate business purposes:
We may also process your Personal Data for our own legitimate interests, including for the following purposes:
We may also deidentify or anonymize your information in such a way that you may not reasonably be re-identified by us or another party, and we may use this deidentified data for any purpose. To the extent we deidentify any data originally based on personal data, we will maintain and use such information in deidentified form and will not attempt to reidentify the data.
ThoughtSpot does not “sell” or “share” job candidate information as those terms are defined under applicable law. ThoughtSpot may, however, disclose your Personal Data to others in limited situations as follows for our business purposes. ThoughtSpot takes appropriate steps to ensure that people who receive your information are bound to maintain confidentiality of the information. With those safeguards in place, ThoughtSpot may disclose your Personal Data to those individuals or entities described below for the following additional purposes, where permitted or required by applicable law:
We may also share your information for additional purposes with your consent where such consent is required by law and, in rare circumstances, during emergency situations or where necessary to protect the safety of persons.
We implement physical, administrative, and technical safeguards designed to protect your Personal Data from unauthorized access, use, or disclosure. We also contractually require that our service providers protect such information from unauthorized access, use, and disclosure. In addition, we limit access to Personal Data to those employees, agents, contractors, and other third parties that have a legitimate business need for such access. For more information about our security practices, please visit the Trust Center at www.thoughtspot.com/legal/trust.
Except as otherwise permitted or required by applicable law or regulation, we will retain your Personal Data as needed to fulfill the purposes for which it was collected. We retain this information for various reasons, including in case we face a legal challenge in respect of a recruitment decision, to consider you for other current or future jobs at ThoughtSpot and to help us better understand, analyze, and improve our recruitment processes. When we have no ongoing legitimate business need to process your Personal Data, we will either delete it, anonymize it, or securely store your Personal Data and isolate it from any further processing until deletion is possible. We reserve the right to use such anonymous and de-identified data for any legitimate business purpose without further notice to you or your consent.
If you are offered and accept employment with ThoughtSpot, the Personal Data we collected during the application and recruitment process will become part of your employment record, and we may use it in connection with your employment consistent with our employee Personal Data policies. If you do not become an employee, or, once you are no longer an employee of ThoughtSpot, we will retain and securely destroy your Personal Data in accordance with our document retention policy and applicable laws and regulations. If there is any data that we are unable, for legal compliance or technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further processing or use of the Personal Data.
Certain jurisdictions, for example the European Economic Area and California, provide their residents certain privacy rights under applicable law. Subject to applicable local law, you may have the right to access, delete, receive a copy of, or object to or restrict the processing of Personal Data, to data portability, to request that we correct any inaccuracies or otherwise update your Personal Data, or to request an explanation of the rules governing the processing of your Personal Data.
These rights may be limited or denied in some circumstances. For example, we may retain your Personal Data where required or permitted by applicable law. As noted above, in such situations we will put in place appropriate measures to prevent any further processing or use of the Personal Data.
You may contact us to exercise your rights using the contact details in the section titled “How to Contact Us” below. We will respond to such requests in accordance with the requirements of applicable data protection laws. Please note that in order to fulfill your request, we may need you to provide certain information to verify your identity. When you or your authorized agent contacts us in connection with your Personal Data under applicable local law, we will ask you to validate your identity before fulfilling your request. Authorized agents may also be required to provide a copy of the consumer’s signed permission authorizing the agent to submit requests on the consumer’s behalf.
We will not discriminate against you if you choose to exercise your privacy rights.
We do not make recruiting or hiring decisions based solely on automated decision-making or profiling (as those terms are defined under applicable local laws). If we choose to rely solely on automated decision-making and that could have a significant impact on you, or you could be subject to profiling, we will apply the appropriate safeguards as may be required by applicable laws.
ThoughtSpot stores and processes any information collected in: (i) any country where we have facilities; or (ii) any country in which we engage service providers. A list of ThoughtSpot global offices is available here.
If you are a candidate from the European Economic Area, we will protect your Personal Data when it is transferred outside of the European Economic Area by:
If you require further information about our international transfers of Personal Data, please contact us using the contact details in the section titled “How to Contact Us” below.
The California Consumer Privacy Act (“CCPA”) requires businesses to provide additional disclosures of California consumer rights relating to the sharing of, access to, and deletion of Personal Data that is collected. We may share or disclose the Personal Data listed in the section above titled “Collection of Your Personal Data” for our business purposes.
California consumers have a right to request information about the collection of your Personal Data, and access to and deletion of your Personal Data under the CCPA. We do not sell the Personal Data of California consumers and do not discriminate in response to privacy rights requests.
If you are a California consumer and you or your authorized agent would like to exercise your privacy rights, please contact us using the contact details in the section titled “How to Contact Us” below. We may need to verify your identity and place of residence before completing your rights request.
ThoughtSpot may modify or update this Candidate Privacy Notice from time to time to reflect the changes in our business and practices, and so you may request updated versions using the section titled “How to Contact Us” below.
If you have any questions about this Notice or our privacy practices, please email us at [email protected], call us at (800) 508-7008, or write to us at:
ThoughtSpot, Inc.
Attn: General Counsel
444 Castro Street
Suite 1000
Mountain View, CA 94041