Privacy Notice for Job Applicants

Aura Home, Inc., Job Applicant Privacy Notice

This Job Applicant Privacy Notice (“Notice”) describes how Aura Home, Inc. and its affiliates and subsidiaries (collectively “Aura,” “we,” “us,” or “our”) collects, uses, and discloses personal information about applicants who apply for jobs with us, or otherwise interact with us in connection with recruiting (“Applicants”). This Notice is provided pursuant to the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the “CCPA”).

California Notice at Collection

We collect personal information you submit as part of your application to evaluate your candidacy, communicate with you, administer recruiting, maintain security, and comply with law. Details about categories, retention, disclosures, and your rights are provided in this Notice.

Applicants in Other States

Applicants in other jurisdictions may have additional rights under applicable law.

For information about our consumer website privacy practices, please see our general Privacy Policy: https://auraframes.com/privacy.

Personal information we collect: We collect the following categories of personal information from Applicants. We do not collect every category from every Applicant.
Identifiers: Examples: name, email address, phone number, mailing address, online identifiers, account login information (where applicable).
Applicant and employment-related information: Examples: résumé/CV, cover letter, work history, education, certifications, licenses, references, writing samples/portfolios, interview notes, job preferences, compensation expectations.
Protected classification characteristics (only if you choose to provide them and where permitted by law): Examples: race/ethnicity, sex/gender, veteran status, disability status.
Internet or other electronic network activity information: Examples: interactions with our careers site and application portal, device information, log data, cookie identifiers.
Audio/visual information: Examples: voicemails; interview recordings where permitted and with any required notice.
Sensitive personal information (“SPI”) (as defined by the CCPA): Examples may include government ID numbers (for identity verification or where required), account login credentials, and information regarding disability/accommodations when you request an accommodation. We use and disclose SPI only as permitted by the CCPA and do not use it to infer characteristics about you.
Inferences: Examples: inferences drawn from application materials and interview interactions relating to professional aptitudes and role fit.
Sources of personal information

We may collect personal information from:

You, through your application, resume, interviews, and communications;
Recruiters, referrals, or references (as permitted);
Service providers supporting recruiting (e.g., applicant tracking system, scheduling tools);
Background check / credential verification providers where applicable and permitted by law; and
Publicly available sources (e.g., professional networking sites) where relevant and permitted.

How we use personal information

We use Applicants’ personal information for the following business and commercial purposes:

Recruiting and hiring, including evaluating qualifications and selecting candidates;
Communicating with you, including interview scheduling and updates;
Verifying information and conducting screenings (e.g., references, work eligibility, and background checks where permitted/required);
Operating, maintaining, and securing our systems and recruiting tools;
Improving our recruiting process, including troubleshooting and analytics;
Complying with law, enforcing policies, and maintaining required records; and
Protecting rights and safety, including preventing fraud or misuse.

How we disclose personal information

We may disclose personal information to the following categories of recipients:

Service providers/contractors that perform services on our behalf (e.g., applicant tracking system, recruiting platforms, scheduling tools, assessments, background check providers, IT/security, analytics providers);
Professional advisors, such as attorneys, auditors, insurers, and consultants;
Affiliates within our corporate group; and
Government and law enforcement agencies when required or permitted by law.

We disclose personal information only as reasonably necessary for recruiting and business operations, and we require service providers/contractors to protect personal information consistent with applicable law.

“Sale” / “Sharing” of personal information

We do not sell Applicants’ personal information or share it for cross-context behavioral advertising as those terms are defined by the CCPA.

Retention

We retain Applicants’ personal information for as long as reasonably necessary to: evaluate your candidacy; administer recruitment; comply with legal and reporting obligations; resolve disputes; and enforce our policies. Retention periods may vary depending on the position and applicable legal requirements.

California Privacy Rights

Subject to certain exceptions, California residents may have the right to:

Know / Access: request information about the categories and specific pieces of personal information we collected about you;
Delete: request deletion of personal information we collected from you;
Correct: request correction of inaccurate personal information;
Opt out of sale/sharing: opt out of sale or sharing of personal information (if applicable);
Limit use and disclosure of SPI: request limitation of certain uses/disclosures of sensitive personal information; and
Non-discrimination: you will not be discriminated against for exercising your rights under the CCPA.

These rights are not absolute and may be subject to legal limitations (for example, where we must retain information for legal compliance or to defend against legal claims).

Other California Privacy Rights

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our website that are California residents to request certain information regarding our disclosure of personal data to third parties for their direct marketing purposes. To make such a request, please send an email to privacy@auraframes.com.

How to exercise your rights

In line with the CCPA and the California Privacy Rights Act (CPRA), to submit a request to know, delete, or correct your personal information, please email privacy@auraframes.com.

US Applicants can submit a Do-Not-Sell-or-Share-My-Data request to privacy@auraframes.com.

To further reduce your general exposure to interest-based advertising, you can use the tools made available by the Digital Advertising Alliance and Network Advertising Initiative:

We will verify your identity before processing certain requests. If you use an authorized agent, the agent must provide proof of authorization, and we may request that you verify your identity directly with us.

GPC Signal

We respond to the Global Privacy Control (“GPC”) signal. The GPC signal is a browser-level signal that can reflect the desire to opt-out of having Personal Data shared or sold. Some browsers allow transmission of GPC signal. By broadcasting this signal, we will not transmit your Personal Data to third parties who perform analytics services or who advertise to you based on this information.

Questions

If you have questions about this Notice, please contact us at: privacy@auraframes.com

Effective Date: Month Day, 2026

Last Updated: January 20, 2026