Plain-language summary
When you apply through this site, your application is sent to NetSpeek via Workable, our applicant tracking system. Workable stores your application; NetSpeek's hiring team reads it inside Workable. This microsite (build.netspeek.ai) does not store your data after your submission is forwarded.
Below is the longer version, written to satisfy GDPR (Article 13) and CCPA (Cal. Civ. Code § 1798.100) — and to be honest about what we do.
Who's collecting your data
NetSpeek is the controller of the data you submit through this site. Our principal place of business is in the United States.
Workable Software Limited is the data processor that hosts our applicant tracking system. Workable's privacy posture is documented at https://www.workable.com/privacy.
What data we collect
When you submit an application or a Field Note response, you provide some or all of:
- Identity: first name, last name, email address.
- Location: country, optional city.
- Right to work: a yes/no on whether you have right to work in the location you indicated.
- Public profiles: optional GitHub handle, optional LinkedIn URL.
- Resume URL: an optional link to your resume (we don't accept file uploads in v1).
- Screening answers: your responses to the 5–7 screening questions on the role's application form.
- Free text: your "anything else" field, your Field Note essay (if you take that path), or your Incident Lab response (if you ran a scenario).
- Technical metadata: standard server logs from this site (IP address, user agent, timestamp) — kept for 30 days for abuse detection, then deleted. No analytics or marketing cookies.
We don't ask for, and don't want, demographic data (race, gender, age, disability status). Workable's separate EEO module is voluntary and decoupled from the application data the hiring team sees.
How we use it
Your application data is used for:
- Reviewing your candidacy for the role you applied to.
- Reaching out about other open roles, only if you opt in during application or in a follow-up.
- Internal hiring analytics (aggregated, no individual decisions).
We don't sell your data. We don't share it with third parties for marketing. We don't pass it to data brokers.
How long we keep it
- Active candidacy: while your application is under consideration.
- After decision (not hired): up to 12 months from your last activity in our pipeline, inside Workable, in case the role re-opens or a related role becomes available. After 12 months, your application is deleted from Workable.
- After decision (hired): your application moves into our employment records and follows our employment retention policy (longer; legally required for some records).
- Server logs from this site: 30 days.
You can request earlier deletion at any time (see "Your rights," below).
Where your data is stored
- This microsite runs on our US cloud-provider region.
- Workable hosts data primarily in the European Union (Ireland), with US sub-processors used for specific features. Workable's data-residency posture is at the link above.
- Sub-processors are the cloud host above and the email-delivery providers Workable uses for auto-acknowledgments. We do not add other sub-processors on the NetSpeek side.
Automated decisions and AI
We don't use AI to make hiring decisions. Specifically:
- No AI model scores or ranks candidate applications on this site.
- No AI model evaluates Incident Lab responses or Field Note essays.
- No AI model decides whether a candidate proceeds to the next stage.
This is a deliberate policy choice, tied to NYC Local Law 144 and the EU AI Act's risk classification of hiring tools. Humans on the NetSpeek hiring team read every application. If our policy changes, this page will be updated before any AI-driven decision system goes live, and current candidates will be notified.
Background-check processing
If we extend an offer, we'll engage a third-party background-check vendor (named at offer time) to perform identity verification, right-to-work confirmation, employment verification, and — where lawful and role-relevant — a criminal record check. We do not perform credit checks, social media monitoring, or "online reputation" scoring.
The vendor acts as our processor under GDPR Article 28 (or your jurisdiction's equivalent). You'll provide consent and submit information directly to the vendor; NetSpeek receives a structured outcome summary, not the underlying records. You have the right to review, correct, and dispute the report under the FCRA (US) or your local equivalent before any final hiring decision is made.
Background-check data is retained per the vendor's contractual schedule and our SOC 2 program (typically: outcome summary retained for the duration of employment plus the statutory minimum; underlying records retained by the vendor under their schedule). For the full process description, see the Engineering Handbook — Pre-employment checks.
Your rights
Depending on where you live, you have the right to:
- Access the data we hold about you.
- Correct inaccurate data.
- Delete your data ("right to be forgotten" under GDPR; "right to delete" under CCPA).
- Restrict processing while a dispute is resolved.
- Object to processing in some cases.
- Data portability (export of your data in a structured format).
- Withdraw consent at any time.
To exercise any of these rights, email privacy@netspeek.com with your name and the email address you used to apply. We respond within 30 days (GDPR-compliant) and at no cost (CCPA-compliant for two requests per 12-month period). You can also exercise these rights directly through Workable for the records they hold.
Cookies and tracking
This site uses zero third-party cookies and no analytics in v1. The only cookies in use are the technical ones the framework sets for session-less functionality. None of them carry personal identifiers.
We do not use:
- Cross-site analytics suites.
- Marketing pixels.
- Tracking cookies for cross-site advertising.
- Session replay tools.
If we add privacy-friendly analytics in a v2, this page will be updated and the relevant notice will appear before any data is collected.
Contact
- Data protection / privacy: privacy@netspeek.com
- Recruiting questions: see the relevant role page on this site
- General: hello@netspeek.com
If you believe we're handling your data improperly and we haven't resolved your concern, you have the right to complain to your local data protection authority (in the EU, your national supervisory authority; in California, the California Privacy Protection Agency).
When this notice last changed
This notice was last updated at the launch of build.netspeek.ai. Substantive changes are versioned on this page and announced via email to any candidate in an active pipeline at the time of change.