RECRUITMENT PRIVACY NOTICE

Last updated: January 25, 2021

WHO WE ARE

MX Technologies, Inc., (“MX”) is a software development company in the United States that develops and licenses personal finance software for financial institutions to offer to their customers for personal finance management. MX puts a user’s data on center stage, molding it into a cohesive, intelligible, and interactive visualization. As a result, users engage more often and more deeply with other digital banking products. MX software enables financial institutions to better utilize data and provide customers with a superior platform to manage their personal finances through data cleansing, categorization and classification. Data is sourced from the records of the financial institution with an optional software feature for users to add external accounts such as credit cards, loans, mortgages, and accounts from other financial institutions, for a user’s all-inclusive financial management view.

This Privacy Notice applies to all personal data of job applicants processed by MX or in connection with the Open Positions pages on the MX website, mx.com/company#careers.

ABOUT THE OPEN POSITIONS SECTION OF THE MX WEBSITE

You can apply for an open position within MX through our online recruitment system on the Open Positions section of our website. You may apply for specific vacancies posted by submitting your application online hosted by our third-party processor, which is currently Workday, Inc. We also have features that allow you to share a link to a job vacancy through social media or refer another person for a specific job vacancy.

Our goal at MX is to recruit excellent talent to join our team. Our teams are made up of employees who value feedback, collaboration and growth. We look to recruit people who have a drive to excel and a strong desire to change the world for the better. To achieve these goals, MX collects and processes personal information about its applicants.

INFORMATION WE COLLECT

We and our service providers collect personal data for recruitment purposes through our online application process either directly or by communicating through email or via LinkedIn or Indeed. The categories of personal data collected are:

Contact Information Resume Education Work Experience Professional Certifications and Licenses Skills Attributes Job-related Qualifications Preferences Social Media Account Other information pertinent to a job application

We invite you to upload your resume and other relevant documents and ask you to provide us information about your work experience and education, as well as other information that you want us to view as part of your application including any social media accounts you wish to share (e.g., LinkedIn or Facebook). We ask that you provide contact information (including your email, phone number, and the city, state and country you are located) and references. We also ask whether or not you were referred to MX. You may also upload a picture.

As required under law, we invite you to participate in an EEOC Voluntary Self-Identification survey and notify you of your rights pursuant to federal labor laws. Participation in this survey is voluntary.

If you choose to connect your LinkedIn or Indeed profile upon applying for a position on the MX website, you will share certain personal data from your social media account with us, such as your name, e-mail address, skills, and any other information you choose to make accessible to use when you connect your LinkedIn or Indeed account.

We use cookies and other similar technologies to collect certain technical and usage information. For more information regarding our data collection using these technologies, please see our Privacy Policy, which is available on our website, https://www.mx.com/privacy-policy/.

HOW WE USE COLLECTED INFORMATION

We collect and process personal information for recruitment purposes, including information that helps us manage applications and determine how you meet our organizational and job role selection criteria. We also communicate with you about your application including requests for additional information, interviews and notifications regarding the process. We also process personal information as we, in our sole discretion, otherwise determine to be necessary to comply with applicable law.

We process your personal data as described above according to one or more of the following lawful bases, depending on each specific context and the types of personal information concerned: • Processing in our legitimate interests (not superseded by your rights) of operating a business, including recruiting talent to fill vacant positions. • Processing as necessary to comply with legal obligations. For example, in the event that you are hired, we process as necessary to establish and fulfill a contract of employment with you.

HOW YOUR PERSONAL DATA IS SHARED

We share your personal data with the following types of recipients: • Third-party service providers. We currently utilize Workday for our online recruitment, which is an enterprise-focused software-as-a-service (“Saas”) recruitment platform of Workday, Inc., located at 6110 Stoneridge Mall Road, Pleasanton, CA 94588 in the United States. Workday, Inc., is committed to complying with data protection principles outlined in the GDPR, including entering into EU standard contractual clauses or taking other measures to provide an adequate level of data protection under EU law. We encourage you to visit their website at https://www.workday.com/en-us/privacy.html and review their privacy policy before applying for a job and providing your personal data. Please note we may change to a different recruitment services provider at any time without notice to you, but will take steps to ensure that protection of your data privacy rights is not impaired by such change. In addition, we use third-party service providers for services like cloud hosting, analytics or other technical tools. These service providers only process your data as directed by us. We do not sell your personal information to third parties. • Law enforcement or regulatory authorities, government agencies, courts of law or other third parties.

STORAGE OF YOUR PERSONAL DATA

We store information on servers located in the United States. We do not transfer your personal data outside of the United States. However, as described above, we do use a third-party service provider to process job applications, who may make such transfers. Workday, Inc., is committed to complying with data protection principles outlined in the GDPR, including for transfers of personal data to countries outside of the EU. Please refer to Workday’s Privacy Policy for information on adequate protections implemented in the event of such transfers.

DATA SECURITY

We use technical and organizational measures to protect the personal data that we store, transmit, or otherwise process against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. The practical reality is, however, no data transmissions over the Internet can be guaranteed to be 100% secure. Therefore, we cannot ensure or warrant the security of any information you transmit to us and you understand that any information that you transfer to us is done at your own risk. If we learn of a data breach that is likely to affect the security of your personal data, we may attempt to notify you electronically via email so that you can take appropriate protective steps and/or by posting a notice on our website if a data breach occurs. Depending on where you live, you may have a legal right to receive notice of a security breach in writing.

DATA RETENTION

We retain your personal data for a reasonable period of time to fulfill the processing purposes outlined above. For example, your personal data is retained directly by MX for up to one year after the application and selection process is finalized for each position posted. In the event you are not selected, MX deletes or destroys your personal data, unless we determine it necessary to retain for longer periods to fulfill our legitimate interests such as resolving disputes. In order to fulfill our obligations under the law including Affirmative Action, MX uses a third-party service provider to process and store the information you submit through the online recruitment process. This information is necessarily retained by the third-party service provider. The Privacy Policy of the third-party service provider may apply to your personal data. You may read their Privacy Policy by clicking on links available on the job posting web pages and electronic forms. In the event you are selected and enter an employment agreement, your personal data is retained further and becomes part of your employment file and also your profile.

YOUR RIGHTS

Depending on your residency, you may have certain rights that you may exercise in relation to your personal data, subject to applicable lawful exemptions. Where the EU General Data Protection Regulation (“GDPR”) applies, your rights consist of:

The right to be informed;
The right of access;
The right to rectification;
The right to erasure;
The right to restrict processing;
The right to data portability;
The right to object; and
The rights in relation to automated decision making and profiling.

Where the California Consumer Privacy Act (“CCPA”) applies, your rights consist of:

The right to notice;
The right to access;
The right to opt out (or right to opt in);
The right to request deletion; and
The right to equal services and prices.

You may also have a right to lodge a complaint with a supervisory authority or other regulatory agency if you believe that we have violated any of the rights concerning personal data about you. We encourage you to first reach out to us so we have an opportunity to address your concerns directly before you do so. You may also contact us with your personal data inquiries or for assistance in modifying or updating your personal data and to exercise your rights. Our contact details are provided at the end of this Privacy Notice.

EFFECTIVE DATE AND AMENDMENTS

This document is effective as of the date indicated at the top of this Privacy Policy under “Last updated.” This document may be amended from time to time.

CONTACT US

Inquiries may be made to:

Organization: MX Technologies, Inc.

Contact: Data Privacy Team

Address: 3401 North Thanksgiving Way Suite 500, Lehi, UT 84043

E-mail: termsofuse@mx.com

Phone: 801-669-5500