Applicant and Candidate Privacy Policy

Last Updated: May 14, 2025

PubMatic, Inc. and its affiliates (“PubMatic,” “we,” “our,” “us”) are committed to protecting your privacy and handling your personal information responsibly. This Applicant and Candidate Privacy Policy (“Policy”) describes how we collect, use, disclose, and protect your personal information when you apply for a job or internship with PubMatic, whether through our Careers Site, third-party job platforms (e.g., LinkedIn), or direct interactions during the recruitment process.

This Policy applies to all employment candidates of PubMatic and its affiliated companies. Additional region- or country-specific notices may apply, such as:

• Notice for Candidates in the European Union or United Kingdom
• California Privacy Notice for Job Applicants

Information We Collect

We may collect and process the following categories of personal data to facilitate the recruitment process and comply with legal obligations:

• Contact Information: Name, address, phone number, email, and contact information.
• Professional Background: CV, resume, cover letter, prior/relevant work experience or other experience, skills, licenses, certifications, transcripts, educational background, or other information you provide to us I support of an application and/or the application and recruitment process.
• Job Preferences: Employment preferences, willingness to relocate, salary expectations, professional memberships, awards.
• Work Authorization: Visa or immigration status where required.
• References: Information from individuals you provide as references.
• Assessments and Interviews: Notes and results from interviews and job-related assessments.
• Background Checks: Information obtained from lawful background checks (where applicable).
• Technical Information: Data collected through cookies and similar technologies (see our Cookie Policy).

We ask that you do not submit sensitive personal information unless legally required, such as race, ethnicity, gender identity, sexual orientation, religion, disability status, or trade union membership.

If you provide us with personal information about others (e.g., references), you confirm that you have obtained their consent before sharing their data.

How We Use Your Information

We process your information to:

• Assess your qualifications and suitability for a role.
• Communicate with you about the recruitment process.
• Conduct reference checks and background screening (where applicable).
• Maintain a talent database for future opportunities (unless you opt out).
• Comply with legal, regulatory, and company policy requirements.
• Protect our legal rights, prevent fraud, and ensure workplace security.

If you are hired, your data will become part of your employee record and be used for employment-related purposes.

How We Share Your Information

We may share your personal data with:

• PubMatic Affiliates: To assess your application for various roles within our global organization.
• Service Providers: Recruiting agencies, background check vendors, IT service providers, and other necessary partners.
• Legal and Regulatory Authorities: When required by law or in response to valid legal requests.
• Business Transfers: In connection with mergers, acquisitions, or corporate restructuring.

We do not sell or rent your personal data for marketing purposes.

International Data Transfers

As a global company, we may transfer your data to locations outside your country of residence. Regardless of where your information is processed, we apply the same protections described in this policy. We comply with certain legal frameworks relating to the transfer of data, including those described below:

• Adequacy Decisions: Including European Commission adequacy decisions, UK adequacy regulations, Swiss adequacy decision
• EU-US and Swiss-US Data Privacy Frameworks: PubMatic, Inc. has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regards to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. PubMatic, Inc. has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regards to the processing of User Information received from Switzerland in reliance on the Swiss-U.S. DPF. Further, PubMatic is responsible for the processing of personal data it receives, under the EU-U.S. DPF, and subsequently transfers to a third party acting as an agent on its behalf. PubMatic complies with EU-U.S. DPF Principles for all onward transfers of personal data from the EU, including the onward transfer liability provisions. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the applicable Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/
• Standard Contractual Clauses

Data Retention

We retain your information for as long as necessary for recruitment and legal purposes. We retain this information for several reasons, including in the event of a legal challenge in respect of a recruitment decision, to consider you for other current or future jobs at PubMatic and to help us better understand, analyze and improve our recruitment processes. If you wish to be removed from our talent database, contact us at pubmaticprivacy[at]pubmatic[.]com. However, we may retain some information to the extent such is required by law or as necessary in relation to legal claims.

Your Privacy Rights

Depending on your location, you may have rights under applicable laws, including:

• Access & Correction: Request access to or correction of your personal data.
• Deletion: Request deletion of your personal information.
• Restriction & Objection: Object to or restrict processing under certain conditions.
• Data Portability: Request a copy of your data in a structured format.

To exercise your rights, contact us at pubmaticprivacy[at]pubmatic[.]com. We may verify your identity before processing requests.

Security Measures

We implement technical and organizational measures to protect your personal information. However, no method of transmission over the Internet is 100% secure. If you believe your information has been compromised, please contact us immediately.

Third-Party Websites

Our Careers Site may contain links to external websites. This Policy does not cover third-party sites, and we encourage you to review their privacy policies before submitting personal data.

Minors

We do not knowingly collect applications from individuals under the age of 18.

Changes to This Policy

We may update this Policy from time to time. Changes will be posted on our Careers Site with the revised “Last Updated” date. Continued use of our services after changes constitutes acceptance of the revised Policy.

Contact Us

For questions about this Policy or to exercise your rights, contact:
PubMatic, Inc.
c/o Privacy Office
601 Marshall Street, Redwood City, CA 94063, USA
Email: pubmaticprivacy@pubmatic.com

Notice for Candidates in the European Union or United Kingdom

When you apply to a job through PubMatic’s Careers site, the personal data contained in your application will be collected by PubMatic, Inc. (“Controller”), located at 601 Marshall St, Redwood City, CA 94063, and can be contacted by emailing talentacquisition@PubMatic.com . Your personal data will be processed for recruitment-related activities, including setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as needed in the recruitment and hiring processes. This processing is legally permissible under Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation), and, in respect of the United Kingdom, GDPR as it forms part of United Kingdom law pursuant to Section 3 of the European Union (Withdrawal) Act 2018(together, “the GDPR“).

Your personal data will be shared with Greenhouse Software, Inc., a cloud services provider located in the United States of America, engaged by Controller to manage recruitment and hiring on Controller’s behalf. If you are located outside of the United States, your personal data will be transferred to the United States upon submission. The transfer will be subject to additional safeguards described in the PubMatic Candidate Privacy Policy.

Your personal data will be retained by Controller as necessary for evaluating your application or considering you for future opportunities. Under the GDPR, you have the right to request access, rectification, or erasure of your personal data and restricted processing. You also have a right to data portability.

Individuals located in the European and UK Countries can contact our Data Protection Officer at dpo@pubmatic.com with questions or concerns about personal data processing. If unresolved, individuals can lodge a complaint with their local data privacy authority by visiting the European Data Protection Board member list.

California Privacy Notice for Job Applicants

Pursuant to the California Consumer Privacy Act (CCPA), PubMatic, Inc. is providing you with this notice to inform you about the categories of personal information we may collect and how we may use that information as part of our application and recruitment process.

Categories of Personal Information We May Collect:

• Identifiers, such as your government-issued identification numbers (if applicable)
• Characteristics of protected classifications under California or federal law, such as gender, race, or veteran status (if you choose to provide this information)
• Internet or other electronic network activity information, such as interactions with our online application portal
• Audio, electronic, or visual information, if you participate in recorded interviews or assessments
• Inferences, drawn from the information we collect, to assess your suitability for the role

Purposes for Collecting Personal Information:

• Evaluate your qualifications and eligibility for employment
• Conduct background checks (where applicable and permitted by law)
• Comply with legal obligations and internal policies