Class Specifications

Effective date: August 19, 2025 NEOGOV PRIVACY POLICY Contents - 1.Introduction; Scope of this Policy. - 2.Where We Are a Service Provider. - 3.Personal Data We Collect About You and Why. - 4.Cookies and Similar Tracking Technologies. - 5.Online Analytics and Advertising. - 6.Information We Disclose. - 7.International Users. - 8.Your Data Rights and Choices. - 9.Notice to California Residents. - 10.Your Rights and Control under EU GDPR. - 11.Data Security and Integrity. - 12.Retention and Removal. - 13.Right to Revise. - 14.Contact Details. - 15.Privacy Contacts. Introduction; Scope of this Policy. The purpose of this Privacy Policy (the “Policy”) is to describe how we collect, use, store, protect, and disclose personal data online and offline either via our websites or related applications. This Policy applies to personal data we collect or use, and applications owned or controlled by Governmentjobs.com, Inc. (DBA “NEOGOV”), including our related brands NEOGOV.com, NEOED.com, PowerDMS.com, Governmentjobs.com, Schooljobs.com, and our mobile app(s) (collectively referred to as the “Services”), or affiliated companies (collectively referred to herein as “Governmentjobs”, "Schooljobs", “NEOGOV”, “NEOED”, “PowerDMS”, “we”, “us”, or “our”). By using any part of the Services you agree that you have read this Policy, your personal data will be processed as described herein, and you agree to be bound by this Policy. This Policy is incorporated into our Terms of Use. Definitions not explicitly defined herein shall retain the meaning as prescribed in the Terms of Use. Any dispute related to privacy is subject to the Terms of Use and this Policy, including limitations on liability. This Policy does not apply to (1) personal data controlled by our Customers (employers that utilize our Services, described further below), which is governed by our separate agreements and related data processing agreements with such Customers; (2) personal data collected by unaffiliated sites that link to or are accessible from our Services; (3) personal data our partners may collect directly from you and control; (4) personal data collected and processed by us about our employees or job applicants responding to our job offers; and, (5) non-personal data derived from personal data, including any data that is aggregated, de-identified, or anonymized, statistical data, insights, or other predictive data that is sufficiently different from your personal data that it cannot be reversed engineered through reasonable means, or otherwise identified from analysis or further processing of the derived data (collectively referred to as the “De-Identified Platform Data”). We use De-Identified Platform Data to provide Customers with useful and relevant insights, build features and data services, and improve our Services. Because De-Identified Platform Data does not identify you personally, we can use and disclose it in our discretion. We are the controller for the personal data discussed in this Policy, except as noted in the “Where We Are a Service Provider” section below. Where We Are a Service Provider Our Customers are organizations such as federal, state, local, tribal, or other municipal government agencies (including administrative agencies, departments, and offices thereof), private businesses, and educational institutions (including without limitation K-12 schools, colleges, universities, and vocational schools), who use our Services to evaluate job applicants and/or manage their relationship with their personnel. When we provide our Services to our Customers, the Customer generally controls and manages the personal data (which may include sensitive personal data such as biometric information or your precise geolocation information for timeclock tracking, health information, and demographic information like race and ethnicity related to the employment relationship), and we process personal data as a "data processor" or "service provider" (as these terms are defined in applicable data protection laws). Any use of analytics or engagement technologies that process personal data, including tools that analyze user behavior or associate usage with identifiers, are implemented solely as a data processor or service provider in these scenarios, and such data is not used by NEOGOV for its own commercial purposes. Our legal obligations as a processor and service provider are set out in our Customer contracts and policies. Our Customers, and not us, decide what types of personal data to collect to manage their relationships with you. For example, a Customer may choose to enable collection of biometric or precise location data for its employees using our time and attendance product. We process such data only at the direction of that Customer and do not use it for our own purposes. Further, if you apply to a job or your employer utilizes our Services to manage their relationship with you, the personal data collected about you is generally controlled by the