Privacy Policy
Last Updated: October 2, 2026
This Privacy Policy explains how Salary.com, LLC, and its affiliates (collectively, “Salary,” “we,” “us,” or “our”) collect, use, disclose, retain, and otherwise process personal information and personal data through our websites, applications, software, surveys, data products, professional services, and other products and services (collectively, the “Services”).
Our Services span compensation data and benchmarking, compensation planning and management, job architecture and job-description tools, pay equity, pay communications, talent management, recruiting and candidate sourcing, workforce management, employee self-service and related HR capabilities, executive compensation, survey and data products, professional services and training, and individual salary and career resources. Our current product portfolio of Software Solutions, Data Solutions, and Intelligence Layers includes, among other offerings, CompAnalyst, CompAnalyst Market Data and CompAnalyst Market Data Max, CompXL Max, JobArchitect and JobArchitect Max, Pay Equity, Pay Communications, SalaryTalent and its modules, Compdata and Compdata Max, CompAnalyst Executive, IPAS, IPAS Max, Compdata Surveys, Small Business, Personal, SalaryIQ, and Max, Salary.com’s compensation intelligence layer. We may add, retire, rename, or reorganize Services from time to time.
AT A GLANCE. Salary generally acts in two different capacities. The first is when we collect information for our own purposes, such as through our public websites, marketing activities, account administration, or other direct interactions with us, we generally act as a business/controller. The second is when a customer provides employee, candidate, workforce, compensation, or other information to us for use in providing SalaryTalent or another Service, we generally act as the customer’s service provider/processor and process that customer data under the customer’s instructions and our agreement with that customer. This distinction matters. Your employer or other organization may control the information it provides to Salary through SalaryTalent or other Service and may be the party responsible for responding to your privacy requests concerning that information. Where Salary controls the processing, this Policy explains your rights and how to exercise them directly with us.
1. SCOPE AND WHO THIS POLICY APPLIES TO
1.1 This Policy applies to individuals who visit or use Salary websites, create or administer a Salary account, request or purchase a product or service, submit information through a survey or other Salary program, communicate with us, participate in Salary events or training, or otherwise interact with us. It also applies to personal information Salary processes through the Services when Salary acts as a business/controller. The Policy also describes, at a high level, how we handle personal information contained in customer data when we act as a service provider/processor for a customer.
1.2 Different Services involve different types of users and different data. For example, a compensation professional may use CompAnalyst, an HR team may use SalaryTalent, an administrator may use JobArchitect or CompXL, an executive compensation professional may use CompAnalyst Executive, a survey participant may provide compensation data through IPAS or Compdata Surveys, and an individual may use Salary’s public salary and career resources. The organization that purchases or administers a business Service may determine what information is provided, what features are enabled, who may access the information, and how the information is used. That organization may have its own privacy notice and may be the party responsible for responding to privacy requests concerning information it controls.
1.3 This Policy does not apply to information processed by third parties that are not acting on our behalf, including third-party websites, services, applications, recruiting or talent-data sources, HRIS or payroll systems, or other integrations that customers or users choose to connect to a Salary Service. Their own privacy notices govern their processing. We are not responsible for the privacy practices of third parties that are not acting as our service providers. Review the privacy notice of the relevant third party before providing personal information or enabling an integration.
2. INFORMATION WE COLLECT. The information we collect depends on the Service you use, the features enabled, how you interact with us, the information you or your organization provide, and your choices. We do not collect every category described below from every person, and some information is processed only on behalf of a customer.
2.1 Information you provide to us. You may provide information when you create an account, request a demonstration, purchase or participate in a product or service, submit a support request, contact Sales or Customer Success, participate in a compensation or other survey, submit a job or workforce record, communicate with us, attend an event or training session, or use a Salary Service. This may include your name, business or personal contact information, employer and job information, account credentials, preferences, communications, survey responses, job titles, employer names, compensation information, demographic information, marketing preferences, and other information you choose to provide.
2.2 Customer and workforce information. Customers, survey participants, and other organizations may provide personal information about employees, applicants, candidates, contractors, executives, survey respondents, and other individuals so that Salary can provide the Services. Depending on the Service, that information may include names and contact details; employment, organizational, job, demographic, benefits, performance, and compensation information; job descriptions and skills; performance and career information; recruiting and candidate information; time, attendance, scheduling, leave, and workforce information; payroll, tax, and benefits information; equity and bonus information; survey responses; documents; emergency-contact information; and other information an organization chooses to submit, connect, or store. Candidate Sourcing functionality may collect or receive professional-profile information, employment-history information, skills information, contact information, and related candidate information from customer-provided sources and third-party data providers.
2.3 Compensation, survey, and market intelligence data. Salary’s business includes compensation data, surveys, benchmarks, labor-market information, job-posting information, and analytics. Depending on the Service and the source, this information may relate to an identified person, a role or job, an employer, a survey participant, or an aggregated or de-identified population. Salary may receive compensation information directly from organizations or survey participants, from customers using our Services, from public or licensed sources, or through integrations and other providers. We use and disclose this information according to the role we are performing, the applicable agreement, the source and permitted use of the information, and applicable law.
2.4 Sensitive and highly sensitive information. Some Services may process information that is sensitive under applicable privacy laws. Depending on the Service and the information provided by a customer, survey respondent, employee, applicant, candidate, or other user, this may include government identifiers; financial account information; precise location information; health or disability information; racial or ethnic information; union membership; sexual orientation information; information about compensation or benefits; and other information that a law treats as sensitive personal information or special-category personal data. We use such information only for disclosed purposes, in accordance with applicable agreements and law, and with any consent or other legal basis required. Certain SalaryTalent modules are not currently available in all environments or to all customers. Categories of information processed will vary based on the modules implemented by the customer.
2.5 Technical/Usage Data. When you use our websites, applications, or other online Services, we may collect technical and usage information, such as IP address, browser type, device type, operating system, unique device or account identifiers, pages or screens viewed, links clicked, approximate location derived from IP address, dates and times of access, error information, and information about how you interact with our Services. We may use cookies, pixels, SDKs, local storage, log files, and similar technologies for functionality, analytics, security, personalization, and advertising, as described in our Privacy Controls and any applicable notices.
2.6 Location information in certain Services. Some Services may use location information. For example, SalaryTalent’s timekeeping functionality may capture a device’s precise location when an employee records a time punch so the employer can compare the punch with a configured work zone. A separate optional location-reminder feature may use device operating-system location services to recognize entry into or exit from an employer-configured work zone. Location practices vary by Service and configuration. Salary does not currently collect precise geolocation coordinates through its products and services.
3. HOW WE USE PERSONAL INFORMATION
3.1 We may receive information from employers and customers, business partners, service providers, integrations, survey participants, recruiting or talent-data providers, public sources, licensed data sources, and other third parties. For example, SalaryTalent Candidate Sourcing allows customers to search an external talent pool using information such as role, skills, experience, and location and may display candidate reports that include estimated market pay. Other Services may incorporate survey, labor-market, job-posting, or other third-party data.
3.2 We use personal information to provide the Services and operate our business. Depending on the Service and our role in processing the information, this includes administering accounts; authenticating users; providing customer support and implementation services; communicating about accounts, subscriptions, renewals, service changes and security matters; and delivering the compensation, talent, workforce, recruiting, job architecture, pay equity, pay communication, benchmarking, survey, executive compensation, salary, career, training and related capabilities selected by a customer or user.
3.3 We process and analyze compensation, job, workforce, recruiting, performance, survey, labor-market and related information to provide the benchmarks, reports, recommendations, insights and other outputs included in the applicable Service. We may process time, attendance, scheduling, leave, payroll, tax, direct-deposit and related information where those features or integrations are enabled.
3.4 We also use personal information to maintain, secure, troubleshoot, test, monitor performance of, and improve our websites, applications, data products and other Services; understand how our Services are used; develop new features and products; detect, prevent, investigate and respond to fraud, security incidents, misuse and other unlawful or unauthorized activity; and protect Salary, our customers, users and others.
3.5 We may use aggregated, de-identified or otherwise lawfully transformed information to produce market compensation intelligence, analytics, reporting, research and workforce insights, and for other purposes permitted by our agreements and applicable law. We do not use customer data for our own purposes except as authorized by the applicable agreement, as described in this Policy, or as otherwise permitted by law.
3.6 We may send marketing and promotional communications where permitted by law and in accordance with your choices; administer surveys, events and training; conduct business and service analytics; comply with legal, regulatory, tax, accounting, and audit requirements; respond to lawful requests; establish, exercise, or defend legal claims; and support mergers, acquisitions, financing, reorganizations, and other corporate transactions.
4. ARTIFICIAL INTELLIGENCE AND AUTOMATED PROCESSING.
4.1 Salary uses and offers artificial intelligence (“AI”) and machine-learning capabilities in certain Services, including capabilities within our Max intelligence layer and other products. Our AI-enabled features are intended to assist authorized users with tasks such as analyzing compensation or workforce information, generating or summarizing content, identifying patterns, producing recommendations or insights, and supporting recruiting, talent, and other business processes. Where an AI feature is used in connection with employment, compensation, recruiting, performance, or workforce decisions, the customer or other authorized decision-maker remains responsible for the decision and should have appropriate human review. AI outputs may be incomplete, inaccurate, biased or inappropriate and should be reviewed before they are relied upon. Salary does not represent that an AI output is a substitute for professional judgment, that an AI-generated recommendation is necessarily correct, or that using AI judgment without a human-in-the-loop complies with applicable law.
4.2 Salary does not collect, use, or sell personal information to train large language models, except as expressly described here if applicable.
5. HOW WE DISCLOSE PERSONAL INFORMATION. We disclose personal information only as appropriate for the purposes described in this Policy, as directed by our customers where we act as a processor/service provider, as permitted by our contracts, or as required or permitted by law.
5.1 Customers and employers. When a Service is provided to an employer, customer, or other organization, we disclose information within the customer’s account as directed by that customer. Depending on the Service and configuration, authorized administrators, HR personnel, recruiters, managers, compensation professionals, finance personnel, executives, and other authorized users may have access to information contained in the account.
5.2 Service providers and subprocessors. We use vendors, subprocessors, independent contractors, and other service providers to help us operate Salary and deliver the Services. Depending on the service, these providers may host data, provide application or infrastructure services, support payroll or HR integrations, provide analytics or communications, support recruiting or survey services, provide security and fraud-prevention services, or perform other functions on our behalf. Where required, we contractually restrict their use of personal information and require appropriate security and confidentiality protections.
5.3 Business transfers. Personal information may be disclosed to a buyer, investor, lender, successor, or other party in connection with an actual or proposed merger, acquisition, financing, sale of assets, reorganization, bankruptcy, or similar transaction. We will take reasonable steps to require the recipient to use the information consistently with applicable privacy requirements.
5.4 Legal, safety, and security disclosures. We may disclose information when we reasonably believe disclosure is necessary to comply with law or legal process, enforce our agreements, establish or defend legal claims, investigate fraud or security incidents, protect the rights, property, or safety of Salary, our customers, users, or others, or prevent or address unlawful or harmful activity.
6. COOKIES AND SIMILAR TECHNOLOGIES
6.1 Our websites and, where applicable, our Services use cookies and similar technologies to keep services working, remember preferences, understand how users interact with our services, improve performance, conduct testing, personalize content, and support advertising or marketing. Some technologies are provided by third parties, which may receive information about your browser, device, or activity.
6.2 Salary provides privacy controls, including a “Manage Cookie Preferences” tool and, where applicable, a “Do Not Sell or Share My Personal Information” mechanism, through which website visitors can review available privacy choices and exercise applicable opt-out rights.
7. EUROPEAN ECONOMIC AREA AND UNITED KINGDOM: LEGAL BASES FOR PROCESSING
7.1 If the GDPR or UK GDPR applies to our processing, we rely on one or more of the following legal bases, depending on the context and the information involved: performance of a contract, compliance with a legal obligation, our legitimate interests, or consent where consent is required or appropriate. We rely on contract where processing is necessary to provide a service you have requested or to perform obligations under an agreement with you. We rely on legal obligations where processing is necessary to comply with law. We may rely on legitimate interests for activities such as securing our services, preventing fraud, maintaining and improving our products, managing our business relationships, and communicating with business contacts, provided those interests are not overridden by your rights and interests. Where we rely on consent, you may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
7.2 Where Salary processes personal data solely on behalf of an employer or other customer, the customer is responsible for identifying and documenting its lawful basis and providing required notices to individuals. Salary processes that information as instructed by the customer and in accordance with our agreement and applicable law.
8. INTERNATIONAL DATA TRANSFERS
8.1 Salary is headquartered in the United States, and personal information that Salary controls may be processed in the United States and other countries where Salary, its affiliates, or service providers operate. Those countries may have privacy laws that differ from those in your country.
8.2 When Salary processes personal information on behalf of a customer through the Services, international transfers and the processing of that customer data are governed by a Data Processing Addendum (“DPA”) and other contractual terms. The DPA describes the applicable transfer mechanisms and safeguards. For personal information Salary controls directly, Salary uses legally recognized transfer mechanisms where required by applicable law.
9. DATA RETENTION
9.1 We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, provide the applicable services, maintain business and financial records, comply with legal and regulatory obligations, resolve disputes, enforce agreements, protect our systems and users, and establish or defend legal claims. When determining how long to retain information, we consider the amount, nature, and sensitivity of the information, the purposes for which we process it, the risks associated with continued retention, contractual requirements, applicable legal obligations, and whether the purposes can be achieved through other means.
9.2 For customer data processed on behalf of an organization, retention is generally governed by the customer’s instructions and our agreement with that customer. Following termination or expiration of the applicable service, we return or delete customer data as required by the agreement, subject to lawful retention requirements and backup/disaster-recovery processes.
10. SECURITY. Salary maintains technical, administrative, and organizational safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, or destruction. No method of transmission or storage is completely secure. You are responsible for protecting your credentials and for promptly reporting suspected unauthorized access or other security issues through the channels provided by Salary or your employer.
11. YOUR PRIVACY RIGHTS
11.1 Depending on where you live and whether Salary acts as a controller/business or as a processor/service provider for an employer or other organization, you may have rights concerning your personal information. These may include rights to access or know about your personal information, correct inaccurate information, request deletion, obtain a portable copy, restrict or object to certain processing, withdraw consent where processing is based on consent, opt out of certain advertising, profiling, sales or sharing, and lodge a complaint with a privacy regulator. The scope of these rights varies by jurisdiction and by the role Salary performs.
11.2 If Salary processes information on behalf of your employer or another customer, that organization generally determines why and how the information is processed and may be responsible for responding to your privacy request. We may direct you to the relevant organization or assist it in responding to your request, consistent with our contractual and legal obligations.
11.3 European Economic Area and United Kingdom. Subject to applicable law and the circumstances of the processing, individuals in the EEA and UK may have rights to access personal data, correct inaccurate or incomplete information, request erasure, request restriction of processing, object to processing, receive certain information in a portable format, and withdraw consent. You may also have rights relating to automated decision-making and profiling where provided by law, and you may lodge a complaint with the supervisory authority in the country where you live, work, or believe an infringement occurred.
11.4 United States state privacy rights. Residents of certain US states have additional privacy rights. Those rights, and the disclosures required by applicable state law, are described in the US State Privacy Addendum at the end of this Policy.
11.5 We may need to verify your identity or authority to act before completing a privacy request. We will use information you provide for verification only as permitted by law and will not use it for unrelated purposes unless permitted by law.
12. CALIFORNIA SALE AND SHARING; ADVERTISING
12.1 Salary uses cookies, pixels, SDKs, and similar technologies on its public websites for functionality, analytics, personalization, testing, and advertising. Some third-party providers may receive identifiers, device information, internet or network activity, approximate location, and similar information through these technologies. Depending on the technology, the information involved, and applicable law, those disclosures may constitute a “sale” or “sharing” under the CCPA. Customer Data that Salary processes solely as a service provider/processor for a customer is handled under the applicable customer agreement and is not used by Salary for cross-context behavioral advertising.
12.2 California residents may opt out of applicable sale or sharing through Salary’s “Do Not Sell or Share My Personal Information” mechanism, available through the Salary.com Privacy Controls or other directly linked privacy-choice mechanism. Where required by law, Salary will also honor recognized opt-out preference signals. These choices generally apply to Salary’s controller/business processing and do not necessarily apply to customer data that Salary processes solely as a service provider/processor.
13. CALIFORNIA NOTICE AT COLLECTION AND U.S. STATE DISCLOSURES. California and certain other US state privacy laws require specific disclosures concerning categories of personal information, purposes of processing, retention, third-party disclosures and consumer rights. Salary provides the applicable consolidated disclosures and state-specific rights in the US State Privacy Addendum at the end of this Policy. Those disclosures are intended to cover personal information Salary processes in its controller/business capacity; they do not change the contractual rules that apply when Salary acts solely as a processor/service provider for a customer.
| Category | Examples | Business/commercial purposes | Retention |
|---|---|---|---|
| Identifiers | Name, business contact details, account identifiers, device identifiers, IP address. | Account administration, service delivery, security, support, communications, marketing where permitted. | Retained for as long as reasonably necessary for the purposes described, based on the criteria in Section 9 |
| Commercial information | Subscription, transaction, payment, billing, and related account records. | Provide services, process payments, administer accounts, comply with financial and legal obligations. | Retained for as long as reasonably necessary for the purposes described, based on the criteria in Section 9 |
| Employment information | Employer, role, job information, compensation and workforce information. | Provide applicable product/service capabilities, customer support, analytics, and related services. | Retained for as long as reasonably necessary for the purposes described, based on the criteria in Section 9 |
| Internet or network activity | Browsing, clicks, pages viewed, device and log data, application usage. | Security, analytics, troubleshooting, product improvement, advertising/personalization where permitted. | Retained for as long as reasonably necessary for the purposes described, based on the criteria in Section 9 |
| Geolocation | Precise location associated with time punches where enabled; approximate location from IP address. | Timekeeping verification, security, service operation, and other disclosed purposes. | Retained for as long as reasonably necessary for the purposes described, based on the criteria in Section 9 |
| Audio/visual or similar data | Content included in support interactions or other submitted materials, if any. | Support, service delivery, security, and quality assurance. | Retained for as long as reasonably necessary for the purposes described, based on the criteria in Section 9 |
| Inferences | Derived information used to understand product usage, market or workforce context, or other disclosed purposes. | Analytics, reporting, personalization, product and service delivery. | Retained for as long as reasonably necessary for the purposes described, based on the criteria in Section 9 |
| Sensitive personal information | Government identifiers, financial account information, precise geolocation, and other categories defined as sensitive under applicable law. | Only for disclosed business purposes permitted by applicable law and, where required, at the direction of the customer. | Retained for as long as reasonably necessary for the purposes described, based on the criteria in Section 9 |
14. SOURCES OF PERSONAL INFORMATION. Depending on the context, Salary may collect personal information directly from you; from your employer, customer, or organization; from your device and browser; from service providers that operate our websites or applications; from business partners and integrations; from recruiting and talent-data providers; from public sources; and from other sources you authorize or that are permitted by law.
15. CHILDREN’S PRIVACY. Our services are intended for businesses, employers, employees, job candidates, and other adults and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us contrary to this Policy, contact us so that we can evaluate and address the information as appropriate.
16. CHANGES TO THIS POLICY. We may update this Policy from time to time to reflect changes in our products, services, legal requirements, or data practices. We will post the revised Policy and update the “Last Updated” date. Where required by applicable law, we will provide additional notice or obtain consent before material changes to our processing practices take effect.
17. HOW TO EXERCISE YOUR RIGHTS. You may submit a privacy request by emailing privacy@salary.com or by using the privacy request mechanisms made available on our website at https://www.salary.com/legal/privacy-controls. The US State Privacy Addendum describes additional request methods, appeals and other state-specific procedures where applicable. We will review and respond to verified requests within the time required by applicable law. Depending on the request and the applicable law, we may ask for information sufficient to verify your identity or authority to act on behalf of another person. If we deny a request, we will explain the basis for the denial to the extent required by law and provide an appeal process where required. If you are an employee, candidate or other individual whose information is processed by Salary on behalf of an employer or customer, we may refer your request to that organization. You may also contact the employer or customer directly regarding its use of your information.
18. EUROPEAN PRIVACY CONTACTS AND SUPERVISORY AUTHORITIES. If the GDPR or UK GDPR applies, you may contact the data protection authority in your country or region. Salary will provide the contact details of its data protection officer, representative or other required privacy contact where applicable.
19. CONTACT US. Privacy questions, requests, and complaints may be sent to:
Address: Salary.com, LLC
Attn: Legal Department (Privacy)
610 Lincoln Street North Building, Suite 200
Waltham, MA 02451
Telephone Number: 617-631-8000, ext. 518
Email: privacy@salary.com
US STATE PRIVACY ADDENDUM
This US State Privacy Addendum supplements the Salary.com Privacy Policy and describes rights and disclosures under certain U.S. state privacy laws. Not every law or right described in this Addendum necessarily applies to Salary, to every Service, or to every individual or processing activity. We provide the information below so that, where a particular state privacy law applies to Salary’s processing of your personal information, you can understand and exercise the rights available to you under that law. The inclusion of a state, law, right, or disclosure in this Addendum does not constitute an admission or representation that Salary is subject to that law in circumstances where the law would not otherwise apply.
Where an applicable state privacy law gives you a right described below, Salary will honor that right as required by law. If this Addendum conflicts with the Privacy Policy, this Addendum controls with respect to the applicable state law. The rights described below remain subject to applicable definitions, exceptions, exemptions, thresholds, and verification requirements. In addition, when Salary processes personal information solely on behalf of an employer or other customer as a service provider or processor, the customer generally controls that information and may be responsible for responding to privacy requests.
Nothing in this Addendum is intended to waive any exemption, exception, limitation, defense, or other right available to Salary under applicable law.
1. CALIFORNIA
1.1 If you are a California resident, the California Consumer Privacy Act, as amended (“CCPA”), gives you the right to request that Salary disclose the personal information it has collected about you, including the categories and specific pieces of personal information; request correction of inaccurate personal information; request deletion of personal information, subject to applicable exceptions; and receive information concerning the sources, purposes, and disclosures of your personal information. You also have the right to opt out of the sale or sharing of personal information and, where applicable, to limit certain uses and disclosures of sensitive personal information. Salary will not discriminate against you for exercising your CCPA rights.
1.2 Categories of personal information. During the preceding 12 months, Salary may have collected the categories of personal information identified in Section 13 of the Privacy Policy. The sources of that information, purposes for which it is used, and applicable retention information are also described in the Privacy Policy. Salary does not necessarily collect every category from every individual.
1.3 Sale and sharing. Salary uses certain advertising, analytics, personalization, and similar technologies on its public websites. Third parties providing those technologies may receive identifiers, device information, internet or network activity, approximate location, and similar information. Depending on the technology and circumstances, these disclosures may constitute a “sale” or “sharing” under the CCPA. You may opt out through Salary’s Do Not Sell or Share My Personal Information mechanism or other privacy controls made available on the Salary website. Salary also honors Global Privacy Control and other opt-out preference signals where required by applicable law.
1.4 Customer Data that Salary processes solely as a service provider or processor for a customer is not used by Salary for cross-context behavioral advertising.
1.5 Sensitive personal information. Salary may process sensitive personal information as described in the Privacy Policy. Where the CCPA provides a right to limit Salary’s use or disclosure of sensitive personal information, Salary will provide the mechanism required to exercise that right.
1.6 Requests. California residents may exercise their rights using the methods described in Section 17 of the Privacy Policy. An authorized agent may submit a request where permitted by the CCPA, subject to applicable verification and authorization requirements.
2. COLORADO
2.1 If you are a Colorado resident, you have the right to access personal data Salary processes about you; correct inaccuracies; delete personal data; obtain certain personal data in a portable format; and opt out of the processing of personal data for targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects.
2.2 Salary will obtain consent before processing sensitive data where required by Colorado law.
2.3 Where Colorado law requires recognition of a universal opt-out mechanism, Salary will process recognized signals in accordance with applicable law.
2.4 If Salary denies a Colorado privacy request, you may appeal that decision using the method identified in Salary’s response.
3. CONNECTICUT
3.1 If you are a Connecticut resident, you have the right to access personal data Salary processes about you; correct inaccuracies; delete personal data; obtain certain personal data in a portable format; and opt out of targeted advertising, the sale of personal data, and profiling in furtherance of certain automated decisions.
3.2 Connecticut law also provides additional protections for sensitive data and precise geolocation information. Salary does not sell precise geolocation data.
3.3 Large language model training. Salary does not use Customer Data to train generally available AI or machine-learning models.
3.4 Where required by Connecticut law, you may also request information regarding third parties to which your personal data has been sold. Salary will recognize qualifying opt-out preference signals as required by law. If Salary denies your request, you may appeal the decision using the process described in Salary’s response.
4. DELAWARE. If you are a Delaware resident, you have the right to confirm whether Salary processes your personal data and access that data; correct inaccuracies; delete personal data; obtain certain personal data in a portable format; obtain information concerning third parties to which your personal data has been disclosed as provided by Delaware law; and opt out of targeted advertising, the sale of personal data, and certain profiling. Salary's Privacy Policy describes the categories of personal data Salary processes, the purposes of processing, the categories of personal data Salary shares with third parties, and the categories of third parties with which Salary shares personal data. If Salary sells personal data or processes it for targeted advertising, Salary will provide a clear method to opt out. You may appeal Salary's denial of a privacy request. You may also contact the Delaware Department of Justice regarding a privacy complaint.
5. INDIANA. If you are an Indiana resident, you have the right to confirm whether Salary processes your personal data and access that data; correct inaccuracies; delete personal data you provided to Salary or that Salary obtained about you; obtain certain personal data in a portable format; and opt out of the sale of personal data, targeted advertising, and certain profiling as provided by Indiana law. You may appeal Salary’s denial of a privacy request using the process described in Salary’s response.
6. IOWA. If you are an Iowa resident, you have the right to confirm whether Salary processes your personal data and access that data; delete personal data provided by you; obtain certain personal data in a portable format; and opt out of the sale of personal data. Iowa law does not provide all of the same consumer rights available under some other state privacy laws. Salary will apply the rights provided by Iowa law to Iowa residents rather than representing that the broader rights available in other states necessarily apply.
7. KENTUCKY. If you are a Kentucky resident, you have the right to confirm whether Salary processes your personal data and access that data; correct inaccuracies; delete personal data; obtain certain personal data in a portable format; and opt out of targeted advertising, the sale of personal data, and certain profiling. Salary will obtain consent before processing sensitive data where required by Kentucky law. If Salary denies your request, you may appeal that decision using the process described in Salary’s response.
8. MARYLAND. If you are a Maryland resident, you have rights under the Maryland Online Data Privacy Act to access, correct, delete, and obtain a copy of certain personal data and to opt out of targeted advertising, the sale of personal data, and certain profiling. Maryland imposes heightened restrictions on sensitive data. Salary will process sensitive data only as reasonably necessary and proportionate to provide or maintain a product or service requested by the consumer or as otherwise permitted by Maryland law, and Salary will not sell sensitive data where prohibited by Maryland law
9. MINNESOTA.
9.1 If you are a Minnesota resident, you have the right to access personal data Salary processes about you; correct inaccuracies; delete personal data; obtain certain personal data in a portable format; and opt out of targeted advertising, the sale of personal data, and certain profiling.
9.2 You may also request a list of specific third parties to which Salary has disclosed your personal data, subject to the requirements and exceptions of Minnesota law. If Salary does not maintain information in a manner that permits it to identify disclosures relating specifically to you, Salary will provide the information required by Minnesota law.
9.3 Minnesota residents also have certain rights concerning profiling and automated decisions that produce legal or similarly significant effects. If Salary engages in such profiling in its controller capacity, Salary will provide the information and rights required by Minnesota law.
9.4 Salary's Privacy Policy describes its retention practices, and Salary will notify affected Minnesota consumers of material changes to the Policy where required by law.
10. MONTANA. If you are a Montana resident, you have the right to access personal data Salary processes about you; correct inaccuracies; delete personal data; obtain certain personal data in a portable format; and opt out of targeted advertising, the sale of personal data, and certain profiling. Salary will obtain consent before processing sensitive data where required by Montana law and will recognize qualifying opt-out preference signals as required by law. If Salary materially changes this Privacy Policy in a manner requiring notice or consent under Montana law, Salary will provide the required notice and opportunity to exercise applicable rights.
11. NEBRASKA. If you are a Nebraska resident, you have the right to confirm whether Salary processes your personal data and access that data; correct inaccuracies; delete personal data; obtain certain personal data in a portable format; and opt out of targeted advertising, the sale of personal data, and certain profiling. Salary will process sensitive data only as permitted by Nebraska law. If Salary denies your request, you may appeal that decision using the process described in Salary’s response.
12. NEW HAMPSHIRE. If you are a New Hampshire resident, you have the right to confirm whether Salary processes your personal data and access that data; correct inaccuracies; delete personal data; obtain certain personal data in a portable format; and opt out of targeted advertising, the sale of personal data, and certain profiling. Salary will obtain consent before processing sensitive data where required by New Hampshire law and will recognize qualifying opt-out preference signals as required by law. You may appeal a denial of your privacy request.
13. NEW JERSEY. If you are a New Jersey resident, you have the right to confirm whether Salary processes your personal data and access that data; correct inaccuracies; delete personal data; obtain certain personal data in a portable format; and opt out of targeted advertising, the sale of personal data, and certain profiling. Salary will obtain consent before processing sensitive data where required by New Jersey law and will recognize qualifying universal opt-out mechanisms as required by law. Salary will not sell sensitive personal data where prohibited by New Jersey law. If Salary denies your privacy request, you may appeal that decision.
14. OREGON.
14.1 If you are an Oregon resident, you have the right to confirm whether Salary processes your personal data and access that data; correct inaccuracies; delete personal data, including certain personal data obtained from third parties; obtain certain personal data in a portable format; and opt out of targeted advertising, the sale of personal data, and certain profiling.
14.2 You may also request a list of the specific third parties to which Salary has disclosed your personal data, subject to the requirements and exceptions of Oregon law.
14.3 Salary will obtain consent before processing sensitive data where required by Oregon law. Salary does not sell precise geolocation data.
14.4 If Salary denies your privacy request, you may appeal that decision.
15. TENNESSEE. If you are a Tennessee resident, you have the right to confirm whether Salary processes your personal information and access that information; correct inaccuracies; delete personal information; obtain certain personal information in a portable format; and opt out of the sale of personal information, targeted advertising, and certain profiling. Salary will obtain consent before processing sensitive data where required by Tennessee law. If Salary denies your request, you may appeal that decision.
16. UTAH. If you are a Utah resident, you have the right to confirm whether Salary processes your personal data and access that data; delete personal data you provided to Salary; obtain certain personal data in a portable format; and opt out of targeted advertising and the sale of personal data. Salary will provide notice and an opportunity to opt out before processing sensitive data where required by Utah law.
17. VIRGINIA. If you are a Virginia resident, you have the right to confirm whether Salary processes your personal data and access that data; correct inaccuracies; delete personal data; obtain certain personal data in a portable format; and opt out of targeted advertising, the sale of personal data, and certain profiling. Salary will obtain consent before processing sensitive data where required by Virginia law. If Salary denies your privacy request, you may appeal that decision. Salary does not sell precise geolocation data.
18. OTHER STATE-SPECIFIC PRIVACY LAWS. Certain state privacy laws regulate particular types of information or processing rather than operating as comprehensive consumer privacy laws. These laws may require notices separate from this Privacy Policy.
19. EXERCISING US STATE PRIVACY RIGHTS. You may exercise the rights described in this Addendum by emailing privacy@salary.com or by using the privacy request mechanism made available on Salary's website. We may request information reasonably necessary to verify your identity, residency, or authority to make the request. We will not require you to create a new account solely to exercise a privacy right where prohibited by law. Where applicable law permits use of an authorized agent, you may designate an authorized agent to exercise applicable rights on your behalf. We may request information necessary to verify the agent's authority as permitted by law. If we deny a request and applicable law provides a right to appeal, our response will explain how to submit an appeal. We will respond to requests and appeals within the periods required by applicable law. If the information at issue is customer data that Salary processes solely on behalf of an employer or other customer, we may direct your request to that organization or assist it in responding to your request.
