At Worklittle, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy describes how we collect, use, and share your personal data.

Our connection is private and secure by design

1. What is personal data at Worklittle?

Personal data refers to any information that can be used to identify an individual directly or indirectly. This includes, but is not limited to, your name, email address, phone number, and payment information.

2. Information we collect

Account and contact information

When you create an account or contact us, we may collect your name, email address, profile photo, and sign-in details from the authentication method you choose (such as email and password or Google sign-in).

Profile, career, and application information

You may provide information such as resume or work history, education, desired roles, interests, phone number, address, social or portfolio links, work authorization details you choose to share, and answers used for job applications.

Messages, files, and AI interactions

If you use chat, voice, document, or similar features, we collect the content you submit, including messages, uploads, and related metadata needed to operate those features.

Organization and hiring data

If you use Worklittle for hiring or workforce features, we process organization information you or your teammates provide, such as job postings, candidate and employee records, documents, surveys, automations, billing contacts, and API usage associated with your organization.

Payment and billing information

If you add a payment method, make a purchase, or donate, payment details are processed by our payment provider. We may store limited billing information such as billing email, payment method type, and last four digits.

Device, usage, and location information

• Device and log data such as IP address, browser type, pages viewed, referring URLs, and approximate location derived from IP.

• Cookies and similar technologies used for sign-in, security, preferences, analytics, and advertising, as described below.

• More precise location if you allow your device to share it (for example, map or nearby job features).

Information from others

We may receive information from authentication providers, payment providers, employers or hiring systems when you apply or connect an integration, public sources used to show jobs and companies, and partners you ask us to connect.

Contacts you share

If you invite someone or send a gift, we may store the contact details you give us (such as an email address) so we can deliver that message.

3. How we use information

We use personal information to:

• Provide, secure, and improve the Services, including job search, applications, mentorship and AI features, employer tools, APIs, and support.

• Create and manage accounts, authenticate users, and prevent fraud or abuse.

• Send transactional messages and, where allowed, career updates, product announcements, and similar communications. You can unsubscribe from non-essential emails.

• Process payments, donations, and usage-based billing.

• Personalize content such as job recommendations and saved activity.

• Analyze how the Services are used and measure marketing effectiveness.

• Comply with law and enforce our terms.

Legal bases for people in Europe and the UK

Where required, we process personal information under these bases:

• Contract: to provide the Services you request.

• Legitimate interests: to secure and improve the Services, prevent abuse, and understand product use in ways that do not override your rights.

• Consent: where we ask for it (for example, optional location access, certain cookies, or marketing where consent is required). You may withdraw consent at any time.

• Legal obligation: when we must retain or disclose information to comply with law.

4. How we share information

We share personal information only as needed to operate the Services:

• Service providers that help us with hosting, authentication, payments, email delivery, analytics, advertising, maps, security, and AI processing.

• Employers and hiring systems when you apply for a job, ask us to help submit an application, or otherwise direct us to share your information.

• Authorized users of an organization you join or apply to, for hiring and related workplace features.

• Other parties at your direction, such as when you connect a third-party account or publish links.

• Authorities or others when required by law, to protect rights and safety, or in connection with a reorganization of Curastem’s nonprofit operations.

Worklittle does not sell personal information for money. Like many websites, we use analytics and advertising technologies that may disclose device and usage identifiers to partners for measurement and advertising. Under California law, that activity can be considered "sharing." California residents can opt out of sale or sharing by emailing privacy@worklittle.com.

If you make profile information available for discovery, authorized employers or API users may view information you include, subject to your settings and product availability.

5. AI features

Some features use artificial intelligence to help with chat, voice, resumes, applications, documentation, and similar tasks. Content you submit for those features is processed to provide the response or action you requested, including by our AI service providers acting on our behalf.

AI outputs can be incomplete or incorrect. You are responsible for reviewing important results before relying on them or sending them to an employer.

6. Your privacy rights at Worklittle

At Worklittle, we respect your privacy rights and provide you with the ability to:

• Access and obtain a copy of your personal data

• Request correction of inaccurate personal data

• Request deletion of your personal data

• Object to the processing of your personal data

• Request restrictions on the processing of your personal data

• Withdraw your consent for processing, where applicable

• Opt out of sale or sharing of personal information (California)

• Limit use of sensitive personal information to what is necessary to provide the Services (California)

• Not be discriminated against for exercising your privacy rights under the CCPA

You can often update profile and email preferences in Settings, and delete your account in the product. You may also email privacy@worklittle.com. We may need to verify your request. Authorized agents may submit requests where the law allows. If we deny a request, you may appeal by replying to our decision email.

EEA and UK residents may also lodge a complaint with their local data protection authority.

7. Cookies and other technologies

At Worklittle, we use cookies and similar technologies across our websites and Services for essential functions (such as sign-in and security), preferences, analytics, and advertising. You can control cookies through your browser settings. Blocking some cookies may limit parts of the Services.

8. How long we keep information

We keep personal information for as long as needed to provide the Services, comply with law, resolve disputes, and enforce our agreements. Some uploaded files and chat attachments are retained for shorter periods and then deleted. Organization data that you delete may remain briefly recoverable before permanent removal. More detail is in our Data Retention and Disposal Policy at worklittle.com/data-retention-and-disposal-policy.

9. Sensitive personal information

Depending on what you provide, we may process information that laws treat as sensitive, such as precise location (if you enable it), account credentials, contents of communications, or work authorization details. We use this information to provide the features you request and related security, not to infer characteristics beyond those purposes.

10. Transfer of personal data between countries

Your personal data may be transferred to and processed in countries other than your own, including the United States. Where required, we use appropriate safeguards so your data receives an adequate level of protection.

11. Children and personal data

Our Services are not directed to children under the age of 13. We do not knowingly collect personal data from children under 13 without appropriate parental consent. If we learn that a child’s personal data was collected without appropriate authorization, it will be deleted as soon as possible. To exercise privacy rights for a child’s information, contact privacy@worklittle.com.

12. Our companywide commitment to your privacy

Everyone working on Worklittle is expected to follow our privacy practices. We review our approach regularly and take confidentiality seriously.

13. Privacy questions

If you have any questions or concerns about our privacy practices, please contact us at:

Email: privacy@worklittle.com

General contact: contact@worklittle.com. We are committed to addressing your privacy inquiries in a timely and transparent manner.

Worklittle is operated by Curastem. This policy applies to worklittle.com, worklittle.com/business, docs.worklittle.com, our APIs and developer tools, and related sites and apps we operate (the "Services").

Effective date: August 7, 2026.