California Employee and Candidate Privacy Notice

AIRSHIP GROUP, INC. “AIRSHIP”

JOB APPLICANT AND EMPLOYEE PRIVACY NOTICE FOR CALIFORNIA RESIDENTS

Last Updated: June 30, 2026 – Previous version

Please note that this California Employee and Candidate Privacy Notice has been updated on June 30, 2026 to reflect our new headquarters address. There have been no substantive changes to the terms.

1. PURPOSE OF THIS NOTICE

1.1 This Job Applicant and Employee Privacy Notice for California Residents (“California Employee Privacy Notice”) details the Personal Information (defined below) Airship Group, Inc. a corporation established in Delaware with a principal place of business at 548 Market St, Suite 698370, San Francisco, California 94104, and our affiliates and subsidiaries, (collectively “Airship”, “we”, “us”, or “our”) receives about you and how we process it during the course of your candidacy, job application process and to the extent applicable to you, employment with Airship.

1.2 Airship is committed to protecting the privacy and security of your Personal Information. This California Employee Privacy Notice describes how we collect and use Personal Information about you during and after candidacy, job application, and your employment with us (collectively, your “employment”). It applies to all job applicants and/or candidates, and current and former employees (collectively “employees”) who are California residents.

1.3 This California Employee Privacy Notice does not constitute a contract of employment, and does not form part of any contract of employment or other contract to provide services. We may update this California Employee Privacy Notice at any time, but if we do so, we will provide you with an updated copy of this California Employee Privacy Notice as soon as reasonably practicable by either posting to our website here or if you are an Airship employee, via direct notice to you. As for Airship employees, in addition we may provide the updated version with a notice that it has been posted in a central location for easy viewing.

1.4 It is important that you read and retain this California Employee Privacy Notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing Personal Information about you, so that you are aware of how and why we are using such information about what your rights may be.

1.5 This California Employee Privacy Notice is provided under the California Consumer Privacy Act of 2018 (“CCPA”) and the California Privacy Rights Act of 2020 (“CPRA”), which amended the CCPA, as further implemented by regulations or amended from time to time and became fully effective January 1, 2023 (the “CCPA”) and applies to Airship job applicants and/or candidates, and employees who are California residents (“California Candidate(s) and Employee(s)”). The CCPA defines “personal information” to mean “information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular” California resident. Certain information we collect may be exempt from the CCPA / CPRA because it is considered public information (because it is made available by a government entity) or covered by a federal privacy law, such as the Gramm-Leach-Bliley Act, the Health Insurance Portability and Accountability Act, or the Fair Credit Reporting Act.

2. COMPANY CONTACT DETAILS

For questions or complaints regarding our use of your Personal Information or this California Employee Privacy Notice, please contact us at:

• E-mail: privacy@airship.com
• Postal Mail: Legal Department, 548 Market St, Suite 698370, San Francisco, California 94104

3. WHAT INFORMATION DOES THE COMPANY COLLECT ABOUT YOU?

3.1 “Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California Candidate and Employee. It does not include data that cannot be associated with you or for which identifying elements have been removed (“deidentified information”). Under the CCPA, certain categories of personal information are classified as “sensitive personal information.” We use sensitive personal information only for purposes permitted under the CCPA, including to perform services you expect, comply with legal obligations, and administer employment benefits. We do not use sensitive personal information to infer characteristics about you.

3.2 Identifiers: Airship may collect the following Personal information about you as part of your candidacy, job application process, or employment with Airship:

1. identifiers such as title, full name, previous names, home and work address, phone number(s), personal email address(es), online identifiers, Internet Protocol address;
2. bank account details, payroll records, and tax information;
3. driver’s license number, passport, citizenship/nationality/visa status, or other unique ID number presented for identification purposes and to verify your employment eligibility;
4. social security number for tax purposes;
5. health information regarding you and your family, including medical conditions and health sickness records, when you report this information to the company to the extent included in employment related documents or contracts. This includes details of any absences (other than holidays) from work, including time on statutory parental leave and sick leave; information related to biological screenings or testing for controlled substances; records related to administering and maintaining your healthcare and other benefits; information about a condition needed for pensions and permanent health insurance purposes when you leave employment and the reason for leaving is related to your health; and meal preferences and food allergies;
6. data related to travel for the purposes of the working relationship, including driver’s license details, special meal requests and travel preferences.

3.3 Protected Classifications: We collect your date of birth and gender in order to verify your identity. We collect your marital status and dependents for tax and benefits administration purposes. We also collect and maintain information about your racial and ethnic origin or sexual orientation if you choose to provide it during the job application or employment onboarding process. We use this information only to support our efforts to attract and maintain a diverse workforce, including reporting required by federal law.

3.4 Internet or Other Electronic Network Activity Information: During your employment relationship with Airship, Airship will monitor use of your Airship email account, office messaging systems (including Slack and GSuite), Airship phone lines (including any mobile provided by Airship for your business use) and remote meeting systems, document management systems, online customer databases, and the internet while on Airship systems in accordance with Airship policies. Please refer to the Employee Handbook for more details.

3.5 Geolocation Data: During your employment relationship with Airship, we collect geolocation data about you if, for example, you are operating a company-issued device, such as a company-issued mobile phone, as part of the fulfillment of your employment duties.

3.6 Audio, Electronic, Visual, Thermal, Olfactory, or Similar Information: We store photographs of you for employment identity verification, and we may record you on building security cameras. During your employment relationship with Airship, your telephone calls are monitored or recorded if you are accessing company resources, such as IT services and your calls are monitored or recorded if you are interacting with a customer or member of the public in a customer service capacity on recorded video or phone calls. Information related to use of building access control systems, including time and location of entry and exit, access to restricted zones, and security camera footage data related to access to and usage of office equipment and resources, including but not limited to fixed and mobile phones, computer systems, email, and the internet, office messaging systems (including Slack and GSuite), cost recovery systems, document management systems, contact management systems and online databases. We do not collect any of your thermal, olfactory or similar information.

3.7 Professional or Employment-related Information: Professional and work information and data with respect to the job application or the acceptance of the offer of employment, including proof of eligibility to work and details of any visa or work permit application, travel and relocation information for the purpose of the working relationship, data with respect to career management and development, including date of hire, employee category, full/part-time status, qualifications, references, résumé(s) or curriculum vitae, language(s) spoken, background checks (including education, professional licenses, civil and criminal records, and regulatory matters) and membership of professional bodies, presence and absence (whether due to sickness or otherwise), accident reporting, occupational health information, work schedules, responsible duties, employee ID, time recording, vacation, all types of leave (including but not limited to parental leave), training records, performance evaluations and documents relating to complaints, grievances, disciplinary actions, career progression and promotions, demotions, retirement and termination of employment or engagement and related data including notice periods, reasons for leaving and exit interviews.

3.8 Education Information: Your employment record information you provided during the job application or employment process about the educational institutions you have attended or your level of education. We may also collect and maintain information about any professional licenses you hold, certifications you receive, or additional education or training you undertake during your employment.

3.9 Artificial Intelligence and Automated Decision-Making: Airship may use artificial intelligence tools and automated decision-making systems in various employment processes, including:

1. Recruitment and hiring processes, including resume screening, candidate assessment, applicant fraud detection, and interview scheduling;
2. Performance evaluation and management systems that analyze productivity metrics and goal achievement;
3. Learning and development recommendations based on role requirements and career progression paths;
4. Workforce analytics to identify trends in retention, engagement, and organizational effectiveness.

When used in the recruitment process, these AI tools process categories of personal information which may include your name, email address, phone number, resume and employment history, social media profile information, IP address, device information, and metadata associated with your application materials. Certain tools also collect and analyze publicly available information from third-party data sources beyond what you directly provide as part of your application. All AI outputs are advisory only and are reviewed by Airship’s People Operations team. AI tools may show whether a candidate is a strong, good, or partial match based on specific extracted skills or role-related criteria; no applicant is automatically rejected based solely on an AI-generated recommendation or score.

You have the right to request human review of any automated employment decision that significantly affects you. You may also request an alternative selection process or reasonable accommodation if you prefer not to be evaluated by AI tools. To request such review, please contact privacy@airship.com. .

Airship does not permit its AI service providers to use employee or applicant personal information to train their general AI models without Airship’s prior written consent.

Airship is committed to using AI tools in a manner that is fair and transparent, does not adversely impact applicants or employees, and preserves human judgment in all hiring and employment decisions. Airship is committed to using AI tools in a manner that does not discriminate against applicants or employees.We take proactive measures to evaluate our AI systems for potential bias, including:

• Reviewing vendor documentation and bias audit results before deploying AI tools
• Periodically assessing AI system outputs for potential disparate impact
• Maintaining human oversight of AI-assisted employment evaluations to ensure employment decisions are made by a human 
• Responding to identified concerns by adjusting or discontinuing AI tools as appropriate

If you believe an AI-assisted employment decision has adversely affected you based on a protected characteristic, please contact privacy@airship.com. In addition, under the California Consumer Privacy Act, you have the right to access information about Airship’s use of automated decisionmaking technology (“ADMT”) for significant decisions affecting you, including the logic of the technology, the categories of personal information used, and the output generated. You also have the right to opt out of Airship’s use of ADMT in connection with significant decisions. To exercise these rights, please contact privacy@airship.com. For more information, see Section 8.2 below.

4. HOW DOES THE COMPANY COLLECT YOUR PERSONAL INFORMATION?

4.1 We collect Personal Information about employees and job applicants through the application and recruitment process, directly from candidates, employment agencies, and screening services or other background-check providers. In connection with AI-assisted recruitment tools, Airship’s service providers may also collect and analyze applicant information from publicly available sources, including professional networking platforms, company databases, and other third-party data aggregators, to verify applicant identity and assess application authenticity. We collect additional information from third parties including former employers, credit reference agencies, or other sources that supply employment verification services. To the extent that Personal Information about you is processed for the purposes of equal opportunities monitoring, such Personal Information shall be provided in anonymized form.

4.2 We collect additional Personal Information in the course of job-related activities throughout the period you work for us. This can be in the form of information you provide directly to us or information which we collect automatically about you, such as monitoring computer access and usage.

5. HOW DOES THE COMPANY USE YOUR PERSONAL DATA?

5.1 We will only use your Personal Information as permitted by law. Situations in which we use your Personal Information include:

1. Decisions related to your employment, including processing your job application or your employment performance; evaluating your development as an employee; setting your job duties and assessing our staffing needs; assessing your qualifications for other roles within the company or promotion; determining salary and compensation; for grievance or other disciplinary procedures, including termination; dealing with legal disputes involving you or other employees and contractors, including accidents at work; and ascertaining your fitness for work.
2. Business Purposes, including conducting data analytics studies to review and better understand employee retention and attrition rates; and ascertaining and fulfilling education, training, and development requirements. 
3. Administering payments and benefits, including making tax and other required deductions and making decisions about salary and compensation.
4. Security measures and complying with health and safety obligations, including ensuring the physical safety of our facilities, resources, employees, and other people from threats; preventing fraud and to secure our systems, data, resources, and facilities from unauthorized access or exploitation; monitoring compliance with our IT policies; ensuring network and information security, including preventing unauthorized access to our computer and electronic communications systems, and preventing malicious software distribution; and investigating theft and other illegal activities.
5. Compliance with legal obligations and lawful requests, and your Personal Information will be handled by Airship in accordance with this California Employee Privacy Notice, any applicable Airship Policies (the “Data Policies”) and (a) as required by law, regulation, legal or judicial process or audit, decision of a court or arbitral tribunal, decision of a governmental authority with relevant powers, or by a regulator, bank examiner or self-regulatory organization or pursuant to mandatory ethics rules applicable to Airship or (b) as reasonably required in relation to any claim or investigation pursuant to any law and/or any matter which may lead to such a claim or investigation.
6. Internal reporting and statistics purposes, we anonymize and/or aggregate data collected through our systems to create statistics that are used for internal reporting and analysis purposes, provided that such statistics do not identify any candidate, applicant, employee or individuals or contain any Personal Information. 
7. Artificial Intelligence and Analytics: Using AI tools to enhance recruitment processes, analyze workforce trends, support performance management, and improve employee experience, provided that such use complies with applicable employment laws and includes appropriate human oversight.

5.2 Personal Information relating to your dependents, next of kin, emergency contacts and/or other restricted persons will be processed by Airship for a variety of reasons arising from your employment relationship with Airship, such as the administration of pension and/or retirement plans, compliance purposes and health insurance programs, travel on international assignments or as part of your benefits where applicable, and as a contact in emergency situations. It is your responsibility to inform such persons about the processing of their Personal Information for the described purposes and to confirm that they have given their permission.

5.3 We use any and all of the information collected for any of the purposes described in this California Employee Privacy Notice, unless limitations are listed. In some circumstances we deidentify your Personal Information so that it can no longer be associated with you, in which case we use such information without further notice to you.

6. DISCLOSURE OF YOUR PERSONAL DATA

6.1 We disclose Personal Information that we collect or that you provide to us as described in this California Employee Privacy Notice:

1. To our affiliates, subsidiaries, and other Airship Group companies;
2. To service providers, which are companies we use to support our business. The categories of service providers that we share information with are:
   • Benefits administration providers, including health, dental, vision, life, and disability insurance providers, and retirement plan administrators.
   • Payroll and tax service providers.
   • Background check and screening service providers.
   • IT service providers, including cloud storage providers, software vendors, and cybersecurity service providers.
   • Professional services providers, including legal, accounting, and consulting firms.
   • Travel and expense management service providers.
   • Training and development service providers.
   • Recruitment and staffing agencies. 
   • AI and machine learning service providers that assist with recruitment screening, performance analytics, and workforce planning. Certain AI-based fraud detection service providers may contribute anonymized or de-identified applicant signals to a shared fraud intelligence network maintained by the provider to improve detection accuracy across its customer base.
   • Cloud infrastructure and data storage providers that host our systems and maintain data security.
   • Employee monitoring and analytics vendors that provide workplace productivity and engagement tools.
3. To comply with any court order, law, or legal process, including responding to any government or regulatory request;
4. To enforce our rights arising from any contracts entered into between you and us, including the Employee Handbook and for billing and collection;
5. If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Airship, our employees, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction;
6. To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Airship’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by Airship about our employees is among the assets transferred; and
7. For any other purpose disclosed by us when you provide the information or with your consent.

6.2 We do not sell Personal Information, nor do we have actual knowledge that we sell Personal Information of minors under 16 years of age.

7. DATA RETENTION

7.1 We will only retain your Personal Information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your Personal Information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

7.2 To determine the appropriate retention period for Personal Information, we consider the amount, nature and sensitivity of the Personal Information, the potential risk of harm from unauthorised use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

7.3 In some circumstances you can ask us to delete your data: see “Your legal rights” below for further information.

7.4 In some circumstances we will anonymise your Personal Information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

8. YOUR LEGAL RIGHTS

8.1 Under certain circumstances, you have rights under data protection laws in relation to your Personal Information. Please click on the links below to find out more about these rights:

8.2 If you are a California resident, you may have the following rights under the CCPA:

1. Right to Information Regarding the Categories of Personal Information Collected, Sold, and Disclosed: You have the right to request that we disclose certain information to you about our collection, use, disclosure, or sale of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

2. Right to Access Personal Information: You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months, including the specific pieces of Personal Information we collected about you.
3. Right to Delete Personal Information: You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions.
4. Right to Correct Personal Information: You have the right to request that we correct inaccurate Personal Information that we maintain about you.
5. Right to Limit the Use and Disclosure of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive Personal Information that we use to infer characteristics about you. We do not use sensitive Personal Information to infer characteristics about you. Including:
   • Social Security Numbers (used only for tax and benefits administration) 
   • Precise geolocation data (limited to company device tracking for security) 
   • Health information (limited to benefits administration and safety compliance) 
   • Racial/ethnic origin data (limited to diversity reporting and legal compliance)

To exercise your right to limit use of sensitive personal information, please contact privacy@airship.com. We will respond within 15 business days and implement limitations within 30 days of your request.

6. Exercising Your Rights: Please contact us at privacy@airship.com to exercise these rights if you are a California resident.
   • Response Timeframes:
     • We will acknowledge receipt of your request within 10 business days 
     • We will respond to access and deletion requests within 45 days (extendable to 90 days for complex requests) 
     • We will respond to correction requests within 45 days
   • Verification Process:
     • We will verify your identity using personal identifiers that match our records 
     • For sensitive requests, we may require additional verification steps 
     • If using an authorized agent, we require written authorization and agent verification
   • Appeal Process:
     • If we deny your request, you may appeal by contacting privacy@airship.com within 30 days 
     • We will review appeals within 30 days and provide a written response 
     • You may also contact the California Attorney General’s office if you believe your rights have been violated
7. Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
   • Deny you services.
   • Charge you different prices or rates for services, including through granting discounts or other benefits, or imposing penalties. 
   • Provide you a different level or quality of services. 
   • Suggest that you may receive a different price or rate for services or a different level or quality of services.
8. Rights Related to Automated Decisionmaking Technology. Under the CCPA, you have the      following rights with respect to Airship’s use of automated decisionmaking technology (“ADMT”) for significant decisions concerning you:
   • Right to Access ADMT: You may request information about Airship’s use of ADMT for significant decisions, including the logic of the technology and any assumptions or limitations, the categories of personal information used as key inputs, the type of output generated, and how the output was used in making the decision.
   • Right to Opt Out of ADMT: You may opt out of Airship’s use of ADMT for significant decisions concerning you. If you opt out, Airship will use an alternative decision-making process that does not rely on ADMT. Opting out will not adversely affect your candidacy or employment.
   • Notice of Adverse Decisions: If Airship uses ADMT to make a significant decision that is adverse to you (for example, a decision resulting in decreased compensation, suspension, demotion, or termination), Airship will notify you of the decision and your right to access ADMT within 15 business days of the adverse decision.
     
     To exercise any of these rights, please contact privacy@airship.com.

9. CROSS BORDER DATA TRANSFERS

Your Personal Information will be stored and processed in the United States. Airship also transfers Personal Information to the following countries where we have operations or service providers: France, Germany, Singapore, and the United Kingdom.

Legal Mechanisms for International Transfers: 

• Standard Contractual Clauses approved by the European Commission for EU transfers 
• Adequacy decisions for transfers to countries with adequate data protection laws 
• Additional safeguards including encryption and access controls for all international transfers

Your Rights Regarding International Transfers: 

• You may request information about specific countries where your data is processed 
• You may object to transfers to specific countries, subject to business necessity 
• You have the right to obtain a copy of the safeguards we use for international transfers

10. DATA RETENTION

We retain Personal Information for different periods based on the category of information and business purpose:

10.1 Employment Records:

• Active employee records: Duration of employment + 7 years 
• Personnel files: 7 years post-termination 
• Payroll records: 7 years per IRS requirements 
• Performance evaluations: 4 years post-termination

10.2 Recruitment Records:

• Successful candidates: Converted to employment records 
• Unsuccessful candidates: 4 years from application date 
• Interview notes and assessments: 1 year from application date

10.3 Health and Safety Records:

• Workplace injury records: 5 years per OSHA requirements 
• Health insurance records: 7 years post-coverage

10.4 Technology and Monitoring Data:

• Email and system logs: 1 year unless related to investigation 
• Security camera footage: 90 days unless incident-related 
• Access control logs: 2 years

10.5 Deletion Process:

• Automated deletion occurs at the end of retention periods 
• Manual review for records with ongoing business need 
• Secure deletion methods that render data unrecoverable 
• Annual audit of retention compliance

11. CHANGES TO THE CALIFORNIA EMPLOYEE PRIVACY NOTICE

We may update this California Employee Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our California Employee Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material California Employee Privacy Notice changes if and where this is required by applicable data protection laws.

You can see when this California Employee Privacy Notice was last updated by checking the “last updated” date displayed at the top of this California Employee Privacy Notice.

12. HOW TO CONTACT US

If you have any questions about this California Employee Privacy Notice or our privacy practices, please contact us in the following ways:

Full name of legal entity: Airship Group, Inc.

Email address: privacy@airship.com

Postal address: Legal Department, 548 Market St, Suite 698370, San Francisco, California 94104

Telephone number: +1 855 391 5311

Contact for Data Protection Inquiries: privacy@airship.com

Contact for Rights Requests: privacy@airship.com

Contact for Complaints: privacy@airship.com

If you are not satisfied with our response or believe we are processing your Personal Information not in accordance with the law, you can make a complaint to the California Attorney General at:

California Department of Justice Office of the Attorney General
1300 I Street Sacramento, CA 95814
Telephone: (916) 445-9555 

Website: https://oag.ca.gov/contact/consumer-complaint-against-business-or-company