Applicant Privacy Notice

Last Updated: September 10, 2026

Scope

This Privacy Notice applies to all job candidates who apply for, are referred to, or are contacted by Mozilla Corporation or one of its affiliates, about one or more positions, including candidates considered for future positions. If the job candidate is offered employment, the Mozilla Employee Privacy Notice, Mozilla Foundation Privacy Notice, or other applicable Mozilla employee privacy notice will then also apply.

Overview

This Privacy Notice describes how Mozilla collects, uses, discloses, transfers,  and retains your Personal Information (as defined below) about job candidates and the rights available to the candidates.

In this Privacy Notice the terms “Mozilla”, “we”, “us”, and “our” refers to the Mozilla Corporation and its parents, subsidiaries, and affiliates globally. The Mozilla entity identified in the job posting or recruitment communication is responsible as data controller for the processing of Personal Information relating to its own employees.

Mozilla has its headquarters in the United States. If you apply for a Mozilla position and reside outside of the United States, your Personal Information may be transferred to and stored on servers located in the United States or another country outside your country of residence. By submitting your application, you acknowledge that your data may be transferred outside of your country of residence for processing by Mozilla in accordance with this Privacy Notice, as further described below.

Defining Personal Information

For the purposes of this Privacy Notice, “Personal Information” includes the definitions of “personal information” and “personal data” under applicable privacy and data protection laws.

Depending on applicable law, for purposes of this Privacy Notice, Personal Information does not include:

• Publicly Available Information. Information that is lawfully made available from government records, information we have a reasonable basis to believe is lawfully made available to the general public by you or by widely distributed media, or by a person to whom you have disclosed the information and not restricted it to a specific audience.
• Deidentified Information. Information that is deidentified in accordance with applicable laws.
• Aggregated Information. Information relates to a group from which individual identities have been removed.

Security & Data Protection

To help protect the privacy of Personal Information in our care, Mozilla maintains reasonable and appropriate administrative, physical, and technical safeguards. No security measure is infallible, and Mozilla cannot guarantee the security of your Personal Information.  Mozilla does not sell the Personal Information, including any Sensitive Personal Information (as defined under applicable law), collected about our applicants for employment or share it with third parties for cross-context behavioral advertising.

Data Integrity, Purpose Limitation, and Storage Limitation

Mozilla endeavors to keep the Personal Information we process current, accurate, and complete so that we can process it reliably. You can always correct your Personal Information to help assure the integrity and accuracy of the information you provide us.

Mozilla will not use your Personal Information for any purpose that is incompatible with this Privacy Notice unless:

• It is required by law;
• Separately authorized by you; or
• Is in your own vital interest (e.g., in the case of a medical emergency).

We will only keep or retain your Personal Information for as long as reasonably necessary to fulfill the purposes set out in this Privacy Notice, including the recruitment process, any period during which we consider you for future positions, applicable legal or recordkeeping requirements, and the establishment, exercise, or defense of legal claims, or as otherwise required by law. Interview recordings and transcripts are retained only for the period necessary for the interview process, unless applicable law requires longer retention.

Why Does Mozilla Need This Information?

Mozilla collects and processes your data for the following reasons:

1. It is necessary to enter or potentially enter into a contract with us. Either you have asked for something to be done so you can enter into an employment contract with us (such as a job application) or it is necessary for actually entering into an employment contract with you.
2. The processing is necessary to comply with a legal obligation (e.g., work authorization verification, including via third party service providers and voluntary collection of gender identification data in California).
3. The processing is necessary to protect your vital interests (see Data Integrity & Purpose Limitation above).
4. Mozilla’s legitimate interests, including managing recruitment, considering candidates for future positions, improving the diversity and inclusivity of our applicant pipeline, and tracking our recruitment and hiring efforts towards our Diversity and Inclusion initiatives. Mozilla’s legitimate interests also may include verifying a candidate’s identity and qualifications, assessing eligibility and suitability for a particular position, preventing fraud or misconduct, and protecting Mozilla’s workforce, systems, information, and assets. Where background checks involve criminal records or other sensitive information, Mozilla will process that information only as permitted by applicable law.

With the exception of certain information that is necessary to fulfill our contractual or legal obligations, your decision to provide Personal Information is voluntary. If you choose not to provide certain information, we may not be able to process your job application. Demographic information is voluntary, and declining to provide it will not affect your application.

How Does Mozilla Collect this Information?

Generally, we collect Personal Information directly from you (such as during the application process). However, in some instances, the Personal Information we collect has been inferred about you based on other information you provide us, through your working relationship with Mozilla, or from third parties (e.g., LinkedIn or recruiting agencies).

When we collect your Personal Information from a source other than you, it is because:

• You’ve given us express consent to do so; or
• Your consent is clearly implied by your actions (e.g., you use a third-party employee service available to you through Mozilla); or
• You provided explicit or implied consent to a third party to share the information with us (e.g., employment search firm, temporary agencies, public social networks, etc.).

What Personal Information Do We Collect?

We collect and process different types of Personal Information about you in accordance with applicable law. Typical information, which may depend on your location, includes but is not limited to:

• Your resume or CV, cover letter, previous and/or relevant work experience or other experience, education, transcripts, or other information you provide to us in support of an application and/or the application and recruitment process, including information from references and employment verification and information from interviews, including recordings, transcripts, summaries, and notes where used.
• Name, home address and telephone number, and where voluntarily provided and permitted by law, gender, sex, sexual orientation, race, and date of birth and/or age.
• Residency and work authorization status, language, and where voluntarily provided and permitted by law, nationality, citizenship, disability status, and passport information.
• Social security or other taxpayer/government identification number.
• Salary or wage expectations.
• Work history, technical skills, educational background, professional certifications and registrations, and required skills to complete the essential functions of the position.
• Background-check information, such as identity-verification information; employment, education, professional qualification, and reference information; and information obtained from criminal, sanctions, or other public or government records. Depending on the position, this may also include driving history. Mozilla or its background-screening service providers may obtain this information from you or from third-party sources.

What Do We Do With Your Personal Information?

Mozilla uses your Personal Information in order to manage all aspects of your potential employment relationship with us. The types of activities include:

1. Engaging Workforce. This means evaluating and selecting the workforce (communicating with you, considering you for future positions where permissible, verification of work authorization after conditional job  offer) and understanding the evolution of the applicant pool of our workforce. In the case of a successful candidacy resulting in an employment relationship, the relevant workforce privacy notice will apply.
2. Compliance Functions. This means complying with legal and other requirements. This generally includes judicial or administrative orders regarding individuals (e.g. garnishments, child support payment), conflict of interest reporting, audits and risk management, immigration visa or work permit applications, employment and tax law, audits and risk management, reporting, and other requests from government or other public authorities, responding to legal process such as subpoenas, pursuing legal rights and remedies, defending litigation and complying with internal initiatives, policies and procedures.
3. Background Checks. Where permitted by applicable law, Mozilla may use Personal Information to conduct background checks in connection with a conditional offer of employment or onboarding. We use this information to verify qualifications, assess eligibility and suitability for the position, protect Mozilla’s workforce, systems, information, and assets, and comply with applicable requirements. Mozilla will provide any additional notices, obtain any authorization or consent, and provide any opportunity to review or dispute the information required by applicable law.

Who Do We Share Your Information With?

Your Personal Information will be shared with Human Resources, hiring managers and Mozilla staff who may participate in the interview and offer process. Your Personal Information may also be shared with third parties as provided in this privacy notice (e.g., third-party work authorization providers). If voluntarily provided by you, demographic data will be aggregated and shared with our Diversity & Inclusion and Talent Acquisition teams for public and internal reporting. If you accept a position or as needed during the hiring process, we may also share this information with the People Team, IT and Legal.

The types of third parties we may share your information with are:

• Service Providers. These are companies who provide products or services to Mozilla. This typically includes services such as applicant tracking, recruiting communications, payroll, pension schemes, benefits providers, human resources services, performance and engagement management, IT systems suppliers and support, third parties assisting with equity compensation programs, medical or health practitioners, trade bodies and associations, work authorization verification after conditional offer of employment, background screening and identity-verification providers and other service providers. We also use professionals who provide expert guidance and advice to Mozilla in all of the countries where Mozilla operates. Professional advisors generally include bankers, attorneys, accountants, auditors, lawyers, and insurers. We may use technology tools, including AI-enabled service providers, to support various aspects of our recruitment process. This may involve processing applicant information, such as name, email address, application materials, and information shared during interviews, for purposes including generating or sending recruitment-related communications and recording interviews or creating transcriptions, summaries, or notes. Where required by law, we will notify you and obtain consent before recording or transcribing an interview. Separately, the applicant tracking system used by Mozilla may automatically close or reject an application after a specified period of inactivity or non-response. We require our service providers to handle your Personal Information in accordance with applicable law and Mozilla's privacy and security requirements, including prohibitions on training AI models using applicant information.
• Public and Governmental Authorities. These are entities that regulate or have jurisdiction over Mozilla. These entities include regulatory authorities, law enforcement, public bodies, and judicial bodies.
• Parties to Corporate Transactions. We may buy or sell businesses and other assets. In such transactions, employee (which may include applicant) information is generally one of the transferred business assets. We reserve the right to include your Personal Information as an asset in any such transfer. Also, in the event that we, or substantially all of our assets, are acquired, your Personal Information may be one of the transferred assets.

AI Tools

Mozilla uses AI-enabled tools to assist our recruiting and hiring teams. These do not evaluate your qualifications or make hiring decisions on our behalf.. However, their use may involve processing applicant information, such as name, email address, application materials, and information shared during interviews, for purposes including generating or sending recruitment-related communications and recording interviews or creating  interview transcriptions, summaries, or notes. Where required by law, we will notify you and obtain consent before recording or transcribing an interview.

International Transfers

Mozilla is a global organization. For the purpose of processing your application, we may transfer, store, or process your Personal Information in a country different from the one in which you reside or apply. For transfers to countries not subject to an adequacy decision or otherwise recognized as providing adequate protection, we use a lawful transfer mechanism and, where required, appropriate safeguards, such as standard contractual clauses. You can request information about the applicable safeguards by emailing us at compliance@mozilla.com.

Your Rights

Residents of certain jurisdictions may have additional rights under applicable privacy laws, including the following:

• Right to Know/Access. You have the right to request (subject to certain exemptions):

• The categories of Personal Information we collected about you;
• The sources from which we have collected that Personal Information;
• Our business or commercial purpose for collecting, selling, or sharing that Personal Information;
• The categories of third parties to whom we have disclosed that Personal Information; and
• A copy of the specific pieces of Personal Information we have collected.

• Right to Correct. You have the right to request that we correct inaccuracies in your Personal Information. Applicants merely seeking to update their information may do so at any time by using the processes described in this Notice. Applicants seeking to update background-check information must contact the applicable background-check agency directly.
• Right to Delete. Subject to certain exceptions, you have the right to request deletion of Personal Information that we have collected from you. Please note, we are not obligated to delete Personal Information that is necessary to provide services that you request or required to comply with applicable laws.
• Right to Opt-Out. Under the California Consumer Privacy Act (“CCPA”), California residents may have the right to opt-out of the “sale” or “sharing” of their Personal Information. CCPA defines a "sale" as disclosing or making available to a third-party Personal Information in exchange for monetary or other valuable consideration, and “sharing” include disclosing or making available Personal Information to a third party for purposes of cross-context behavioral advertising. We do not sell or share Applicant Personal Information or Sensitive Personal Information, nor do we have actual knowledge that we sell or share the Personal Information of individuals under 16 years of age.
• Rights Relating to Automated Decisions. Where applicable law gives you rights in relation to a decision based exclusively on automated processing, you may request information about the decision, correct the Personal Information used, provide comments, and request human review.

You can access, correct, or delete Personal Information as described below. Your ability to access, correct or delete Personal Information is not absolute. There are instances where applicable law or regulatory requirements allow or require us to refuse to provide some or all of the Personal Information we hold about you. In addition, the Personal Information may have been destroyed, erased or made anonymous.

Accessing Your Personal Information

You can access your Personal Information via your Greenhouse or Ashby job post.

If there is personal data you want to review, verify or correct that is outside Greenhouse or Ashby but is in Mozilla’s control, please contact compliance@mozilla.com to request the revision or correction or submit a request here.

Correcting Your Personal Information

If you believe your Personal Information is incorrect, incomplete, or outdated, you can usually correct that information via your job post in Greenhouse or Ashby. If the information is in a system that does not provide you direct access, you may request the revision or correction of that information by contacting compliance@mozilla.com or by submitting a request here.

If it is determined that Personal Information is inaccurate, incomplete or outdated, Mozilla will revise it. If necessary, we will also inform agents, service providers or other third parties who may have also have this information so records in their possession may be corrected or updated. We reserve the right not to change any Personal Information Mozilla considers accurate.

Deleting Your Personal Information

You can request we delete the Personal Information that Mozilla holds about you. Contact compliance@mozilla.com for help with these requests or submit a request here. Please state that you are a job applicant.

Any request by you to delete your Personal Information will not result in deletion of any information submitted directly by you to a third-party provider (e.g., placement firms etc.) If you require the third-party to delete any of your Personal Information, you must contact the third party directly to request such deletion.

Objecting to or Requesting the Restriction of Processing

You can object to, or request the restriction of, the processing of your personal data that Mozilla uses for its legitimate interest. Contact compliance@mozilla.com for help with these requests.

Data Portability

You can move, copy, or transmit personal data you provided to Mozilla for processing related to our performance of your employment application. Contact compliance@mozilla.com or submit a request here for help with these requests.

Third-Party Services

As noted above, Mozilla uses third-party service providers to perform services on our behalf, such as Greenhouse or Ashby for applicant data, TrustID for work authorization, Checkr for background checks, and CoderPad for code challenges. These providers may separately process your Personal Information as independent controllers or businesses, as permitted by applicable law.To learn more about how data is handled by the application or service provider, please read the applicable privacy policy for Greenhouse, Ashby, TrustID, Checkr, and CoderPad.

Resolving Concerns/Questions/Contacts

If you have any questions or concerns regarding the handling of your Personal Information, please contact your recruiter. Alternatively, you may report complaints or concerns to Mozilla at compliance@mozilla.com or by submitting a request here.

Individuals in the European Economic Area or United Kingdom who believe a privacy complaint is unresolved have the right to lodge a complaint with Mozilla’s Data Protection Officer or the supervisory authority where they live or work. The DPO’s details are as follows:

Bird & Bird Privacy Solutions

Bird & Bird DPO Services SRL

Avenue Louise 235 Box 1

1050 Brussels

Belgium

Changes to Privacy Notice

We may change this Privacy Notice at any time. The effective date of each version of this Privacy Notice is identified above.