ODDBYTES LLC
Applicant and Employee Privacy Notice

Last Updated: August 12, 2026

OddBytes LLC and its Affiliates ("OddBytes," "we," "us," or "our") respect the privacy of individuals who apply for employment with us, work for us, or otherwise provide services to us. This Applicant and Employee Privacy Notice ("Notice") describes how OddBytes collects, uses, processes, retains, and discloses Personal Information relating to Applicants and Personnel.

This Notice is intended to provide disclosures required by applicable United States privacy laws, including, where applicable, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA").

This Notice applies to Personal Information collected in connection with someone's application for, current relationship with, or former relationship with OddBytes. It does not replace other privacy notices that may apply to particular information or activities, including but not limited to your use of the OddBytes website at https://www.oddbytes.com/, the OddBytes advertiser platform, benefit-plan notices, background-check disclosures, medical-information notices, information-security policies, or notices relating to particular technologies or systems.

1. DEFINITIONS

For purposes of this Notice:

"Affiliates" means OddBytes' parent company or companies, and any subsidiaries or other affiliated entities of OddBytes or any such parent company or companies, whether currently existing or subsequently formed or acquired.

"Applicant" means someone who applies for, seeks, or is considered for employment, an internship, temporary work, or another work-related position with OddBytes, regardless of whether they are ultimately employed or engaged by OddBytes.

"Employee" means someone who is currently employed by OddBytes, whether on a full-time, part-time, temporary, or other basis.

"Former Employee" means someone whose employment relationship with OddBytes has ended.

"Personnel" means, collectively and as applicable, Employees, Former Employees, interns, temporary workers, officers, directors, independent contractors, consultants, and other individuals who perform or previously performed services for OddBytes. In this notice, “you” or “your” includes Applicants and Personnel, as applicable.

"Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. Personal Information may include information maintained in paper, electronic, audio, visual, or other form. Personal Information does not include information that applicable law excludes from the definition, such as certain publicly available, deidentified, or aggregate information.

"Sensitive Personal Information" means Personal Information that applicable law treats as particularly sensitive. Depending on applicable law, this may include: social security numbers; driver's license, state identification, or passport numbers; account credentials; precise geolocation; racial or ethnic origin; citizenship or immigration status; religious or philosophical beliefs; union membership; genetic information; certain biometric information; and Personal Information concerning someone's health, sex life, or sexual orientation.

"Process," "processed," or "processing" means any operation or set of operations performed on Personal Information, whether or not by automated means, including collecting, recording, organizing, storing, accessing, analyzing, using, modifying, retrieving, consulting, transmitting, disclosing, combining, restricting, deleting, or otherwise handling Personal Information.

2. CATEGORIES OF PERSONAL INFORMATION WE COLLECT AND PROCESS

We may collect and process the following categories of Personal Information depending on your relationship with us, your position or proposed position, your location, and applicable legal requirements:

A. Identifiers

“Identifiers” include information that identifies, relates to, or is reasonably capable of being associated or linked with you, including your real name, alias, pseudonym, postal address, email address, telephone number, employee or personnel number, social security number, driver's license number, state identification number, passport number, bank account number or other financial account identifier, immigration or work-authorization documentation, photograph or other visual identifier, fingerprints, and other biometric or identifying information. Identifiers also include persistent identifiers that may be used to recognize or identify you, your device, or your activity over time and across different services, including online identifiers, Internet Protocol (IP) addresses, cookies, beacons, pixel tags, device identifiers, account names, user names, user aliases, pseudonyms, and other similar technology-based or persistent identifiers, as well as other similar identifiers or identifying information.

B. Characteristics of Protected Classifications Under California or Federal Law

We may collect information concerning characteristics protected under applicable California or federal law, where permitted or required, such as age or date of birth, race, color, ancestry, national origin, citizenship or immigration status, sex, gender, gender identity or expression, pregnancy or related conditions, marital status, military or veteran status, disability, medical condition, religion or creed, and other legally protected characteristics.

OddBytes does not use protected-class information to make unlawful discriminatory employment decisions.

C. Internet or Other Electronic Network Activity Information

We may collect information concerning the use of OddBytes-provided or OddBytes-managed computers, mobile devices, communications platforms, applications, networks, websites, systems, and other information technology resources. This may include login information, access logs, IP addresses, device identifiers, browsing or usage information relating to company systems, security logs, system activity, and interactions with OddBytes websites or applications.

D. Professional or Employment-Related Information

We may collect professional and employment-related information including employment history, job titles, work experience, resumes and curricula vitae, references, skills, qualifications, certifications, professional licenses, compensation, bonus and equity information, performance information, disciplinary information, attendance information, leave information, promotion history, training records, employment status, organizational information, manager and reporting relationships, work assignments, business travel information, and information relating to separation from employment.

E. Education Information

We may collect education information including schools or educational institutions attended, degrees, diplomas, certifications, fields of study, dates of attendance or graduation, transcripts where appropriate, and other educational or professional-training information.

F. Inferences

We may draw inferences from Personal Information described in this Notice concerning an Applicant's or member of Personnel's abilities, qualifications, skills, aptitudes, preferences, characteristics, work performance, or suitability for particular positions, assignments, professional-development opportunities, or workplace programs.

3. SENSITIVE PERSONAL INFORMATION

Some information described above may constitute Sensitive Personal Information under applicable law. For example, OddBytes may process social security numbers for payroll and tax administration, immigration or citizenship information to verify authorization to work, and health-related information to administer benefits, accommodations, leave, workplace-safety programs, or other legally authorized services.

OddBytes processes Sensitive Personal Information only for legitimate employment, operational, security, benefit-administration, or legal purposes and otherwise as permitted by applicable law.

Where required by law, OddBytes will provide additional notices or obtain authorization before collecting or processing particular categories of Sensitive Personal Information, including biometric, medical, or other specially-regulated information.

4. CATEGORIES AND PURPOSES OF PROCESSING INFORMATION 

Depending on your relationship with OddBytes and applicable law, we may collect and process Personal Information for the following purposes:

A. Recruiting Employees

We process Personal Information to advertise positions, receive and review applications, communicate with candidates, assess qualifications and experience, conduct interviews, obtain references where appropriate, make hiring decisions, prepare offers, and otherwise manage the recruiting and onboarding process. This may include evaluating whether an Applicant possesses the experience, education, skills, authorization, licenses, or other qualifications required for a position.

Categories of Personal Information that may be collected or processed: Identifiers; Characteristics of Protected Classifications; Professional or Employment-Related Information; Education Information; and Inferences.

B. Administering Benefits

We process Personal Information to establish eligibility for and administer employee benefits and benefit programs, including health and welfare benefits, retirement benefits, insurance, paid leave, wellness programs, and other employee programs. This processing may also include communicating with benefit providers, administrators, insurers, and other service providers as necessary to provide and administer benefits.

Categories of Personal Information that may be collected or processed: Identifiers; Characteristics of Protected Classifications; and Professional or Employment-Related Information.

C. Paying Employees and Reimbursing Expenses

We process Personal Information to calculate and pay wages, salaries, bonuses, commissions, equity-related amounts where applicable, and other compensation; withhold and report taxes and other deductions; administer direct deposit; maintain payroll records; and review and reimburse eligible business expenses.

Categories of Personal Information that may be collected or processed: Identifiers; and Professional or Employment-Related Information.

D. Conducting Performance-Related Reviews

We process Personal Information to establish goals and expectations, evaluate job performance, provide feedback, administer promotions and compensation decisions, recognize achievements, identify opportunities for development, manage performance concerns, and maintain appropriate performance records.

Categories of Personal Information that may be collected or processed: Identifiers; Professional or Employment-Related Information; and Inferences.

E. Monitoring Work-Related Licenses and Credentials

Where a role requires a professional license, certification, clearance, qualification, training, or other credential, we may process Personal Information to verify the credential, monitor its status or expiration, arrange required training or renewal, and confirm continuing eligibility to perform particular duties.

Categories of Personal Information that may be collected or processed: Identifiers; Professional or Employment-Related Information; and Education Information.

F. Providing Human Resources Management Services

We process Personal Information to administer the employment relationship and provide human-resources services, including onboarding, personnel administration, organizational planning, employee relations, training and development, leave administration, workplace accommodations, policy administration, succession planning, workforce analytics, and offboarding.

Categories of Personal Information that may be collected or processed: Identifiers; Characteristics of Protected Classifications; Professional or Employment-Related Information; Education Information; and Inferences.

G. Administering International Assignments

Where an employee works or is assigned across national borders, we may process Personal Information to arrange and manage the assignment, including immigration and visa matters, relocation, travel, compensation and tax administration, benefits, housing or logistical support, and compliance with applicable local requirements. This may require transferring Personal Information to service providers or Affiliates located in another country, subject to applicable law.

Categories of Personal Information that may be collected or processed: Identifiers; Characteristics of Protected Classifications; and Professional or Employment-Related Information.

H. Maintaining Contact Information

We process Personal Information to maintain current business and personal contact information, communicate with Applicants and Personnel, distribute employment-related information, maintain organizational directories, and contact former Personnel where reasonably necessary for legitimate business or legal purposes.

Categories of Personal Information that may be collected or processed: Identifiers; and Professional or Employment-Related Information.

I. Providing Emergency Assistance

We may collect and maintain emergency contact information and other relevant information so that we can contact an appropriate person or provide assistance if you experience a workplace emergency, accident, health or safety incident, natural disaster, business-continuity event, or similar situation. Please provide emergency-contact information only for individuals whom you are authorized to identify for this purpose.

Categories of Personal Information that may be collected or processed: Identifiers; Characteristics of Protected Classifications; and Professional or Employment-Related Information.

J. Monitoring Eligibility to Work in the United States

We process identity, citizenship, immigration, and work-authorization information as necessary to verify and document eligibility to work in the United States, complete required employment-verification procedures, monitor expiration dates where applicable, respond to government inquiries, and comply with immigration and employment laws.

Categories of Personal Information that may be collected or processed: Identifiers; Characteristics of Protected Classifications; and Professional or Employment-Related Information.

K. Conducting Health Care and Health-Related Services

Where permitted by applicable law, we may process health-related Personal Information to administer health and welfare benefits, workplace accommodations, disability or leave programs, occupational health or safety programs, workers' compensation matters, wellness programs, return-to-work processes, or other health-related services available to Personnel.

Access to health-related information is limited as appropriate, and certain health or medical information may be subject to separate confidentiality, benefit-plan, or medical-privacy requirements.

Categories of Personal Information that may be collected or processed: Identifiers; Characteristics of Protected Classifications; and Professional or Employment-Related Information.

L. Facilitating a Better Working Environment

We may process Personal Information to understand and improve the employee experience, workplace culture, collaboration, training, engagement, organizational effectiveness, workforce planning, and employee programs.

This may include voluntary surveys, feedback programs, employee-engagement initiatives, workplace assessments, and analysis designed to improve OddBytes' workplace and operations.

Categories of Personal Information that may be collected or processed: Identifiers; Characteristics of Protected Classifications; Professional or Employment-Related Information; and Inferences.

M. Ensuring a Safe and Efficient Working Environment

We process Personal Information as reasonably necessary to protect Personnel, visitors, facilities, systems, information, and other company assets; administer workplace health and safety requirements; investigate workplace incidents or policy concerns; manage access to facilities and systems; prevent misconduct, fraud, or misuse; and support efficient business operations.

Any workplace monitoring undertaken by OddBytes will be conducted subject to applicable law and relevant OddBytes policies and notices.

Categories of Personal Information that may be collected and processed: Identifiers; Characteristics of Protected Classifications; Internet or Other Electronic Network Activity Information; and Professional or Employment-Related Information; Inferences

N. Maintaining Security on OddBytes Websites and Connected Internet Assets

We process Personal Information and electronic activity information to secure OddBytes websites, networks, applications, cloud services, devices, accounts, and other connected Internet or information-technology assets.

This processing may include authenticating users, controlling access, maintaining system and security logs, identifying vulnerabilities, detecting and responding to cyber threats, preventing unauthorized access, investigating security incidents, protecting confidential information, and maintaining system availability and resilience.

Categories of Personal Information that may be collected and processed: Identifiers; Internet or Other Electronic Network Activity Information; Professional or Employment-Related Information; and Inferences.

O. Complying with Applicable Law and Regulatory Requirements

We process Personal Information as necessary to comply with federal, state, local, and other applicable laws; employment, labor, tax, immigration, health and safety, and recordkeeping obligations; court orders, subpoenas, and lawful governmental requests; regulatory inquiries; audits; internal compliance requirements; and obligations to establish, exercise, or defend legal claims.

Categories of Personal Information that may be collected or processed: Identifiers; Characteristics of Protected Classifications; Internet or Other Electronic Network Activity Information; Professional or Employment-Related Information; Education Information; and Inferences.

5. SOURCES OF PERSONAL INFORMATION

Depending on the circumstances, OddBytes may collect Personal Information:
 

• directly from you;

• from recruiters, staffing agencies, or referral sources;

• from references you identify;

• from prior employers or educational institutions where verification is authorized and lawful;

• from background-check or consumer-reporting providers, subject to applicable law and any required disclosures and authorizations;

• from benefit providers and administrators;

• from professional organizations, licensing bodies, or credentialing organizations;

• from government agencies or publicly available government records;

• from OddBytes managers, colleagues, systems, networks, devices, and business applications;

• from service providers that assist OddBytes in operating its business or administering the employment relationship; and

• from other sources permitted by applicable law.
   

6. DISCLOSURE OF PERSONAL INFORMATION

OddBytes may disclose Personal Information where reasonably necessary for the purposes described in this Notice, including to:
 

• Affiliates, in order to provide shared human-resources, payroll, benefits, information-technology, security, legal, compliance, administrative, and other services in support of those purposes;

• payroll, benefits, insurance, retirement, and human-resources service providers;

• information-technology, cloud-hosting, communications, cybersecurity, and business-software providers;

• recruiting, staffing, background-check, credential-verification, and professional-services providers;

• banks, financial institutions, expense-management providers, and payment processors;

• occupational health, workplace safety, accommodation, leave, and workers' compensation providers;

• travel, immigration, relocation, and international-assignment providers;

• accountants, auditors, attorneys, consultants, insurers, and other professional advisers;

• government, regulatory, tax, judicial, or law-enforcement authorities where required or permitted by law;

• parties involved in an actual or proposed merger, acquisition, financing, restructuring, sale, transfer, or other corporate transaction, subject to appropriate safeguards; and

• other recipients when you direct or authorize us to make the disclosure or when otherwise permitted by law.

Affiliates, service providers, and contractors that process Personal Information on OddBytes' behalf are expected to protect that information in accordance with applicable contractual and legal requirements.

7. SALE AND SHARING OF PERSONAL INFORMATION

OddBytes does not sell Personal Information relating to Applicants or Personnel and does not share such Personal Information for cross-context behavioral advertising, as those terms are defined by the CCPA.

8. RETENTION OF PERSONAL INFORMATION

OddBytes retains Personal Information for no longer than reasonably necessary for the purposes for which the information was collected or Processed, including to administer recruiting and employment relationships, provide benefits, satisfy recordkeeping requirements, resolve disputes, enforce agreements, maintain security, and establish, exercise, or defend legal claims.

The length of time for which a particular record is retained depends on factors including the nature and sensitivity of the information, the purposes for which it is Processed, applicable statutes of limitation, legal and regulatory recordkeeping requirements, contractual requirements, and legitimate operational needs.

9. CALIFORNIA PRIVACY RIGHTS

If you are a California resident and the CCPA applies to OddBytes' Processing of your Personal Information, you may have rights under California law, subject to applicable exceptions, including the right to:
 

• know the categories and specific pieces of Personal Information OddBytes has collected about you;

• know the categories of sources from which Personal Information was collected;

• know the business or commercial purposes for collecting, using, selling, or sharing Personal Information;

• know the categories of third parties to whom OddBytes discloses Personal Information;

• request deletion of Personal Information;

• request correction of inaccurate Personal Information;

• opt out of the sale or sharing of Personal Information, if applicable;

• limit certain uses or disclosures of Sensitive Personal Information when the statutory right applies; and

• receive equal service and treatment and not be unlawfully discriminated or retaliated against for exercising applicable privacy rights.
   

Certain Personal Information or particular Processing activities may be exempt from some or all of these rights under applicable law.
 

10. RIGHTS UNDER OTHER U.S. STATE LAWS

Residents of other U.S. states may have additional privacy rights or protections under applicable law. The scope of those rights varies by jurisdiction, and some state comprehensive privacy laws exclude Personal Information Processed in an employment or Applicant context.

OddBytes will honor rights applicable to Applicants and Personnel as required by the laws governing the particular individual and Processing activity.

Nothing in this Notice is intended to limit any rights available under applicable employment, labor, discrimination, leave, disability, biometric, medical, background-check, electronic-monitoring, data-security, or other federal, state, or local law.

11. EXERCISING YOUR PRIVACY RIGHTS

To exercise an applicable privacy right under California or other U.S. state law, please email us at the address in the Contact Us section or write to us at OddBytes LLC, 301 N. Main St., Suite 201, Huntington Beach, CA 92648.
O
ddBytes may take reasonable steps permitted by law to verify your identity and authority before fulfilling a request. You may also be permitted to designate an authorized agent to submit a request on your behalf in accordance with applicable law.

12. AUTOMATED PROCESSING AND EMPLOYMENT DECISIONS

To the extent OddBytes uses automated systems, artificial intelligence, profiling, or similar technologies in recruiting or employment-related decision-making, OddBytes will provide any additional notices, information, opportunities to exercise rights, or safeguards required by applicable law before doing so.

Nothing in this Notice should be interpreted to mean that OddBytes uses automated decision-making technologies if it does not in fact do so.

13. SECURITY

OddBytes uses reasonable administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, destruction, loss, alteration, disclosure, or misuse.

No information-security program can eliminate all risk, however, and OddBytes cannot guarantee that Personal Information will never be accessed, used, or disclosed in an unauthorized manner.

14. CHANGES TO THIS NOTICE

OddBytes will review this Notice at least once every twelve months and will update it every twelve months or more frequently as otherwise required by applicable law.

When we materially change this Notice, we will provide an updated notice or otherwise communicate the changes as required by applicable law. The "Last Updated" date at the beginning of this Notice indicates when the Notice was most recently revised.

15. CONTACT US

If you have questions about this Notice, OddBytes' Processing of Personal Information, or your applicable privacy rights, please contact us at privacy@oddbytes.com.