This notice explains how Moraph LLC and its affiliates (“Moraph”, “we”) handle personal information about people who apply for jobs with us. It adds to our Privacy Policy. Last updated October 2026.
What we collect
- Your name, contact details and location.
- Your résumé, profile links, cover letter, any documents you upload, and your answers to screening questions.
- Your work authorization and, for roles that need it, your security clearance status.
- Notes, interview feedback and scores from the people involved in hiring for the role, and messages between you and our team.
- Any accommodation request you make. Only the recruiting team can see it, and it is never used to assess you.
- For US roles only, voluntary self-identification answers (gender, race or ethnicity, veteran and disability status), if you choose to give them.
- Limited technical data to protect the service, such as a salted, daily-changing hash of your IP address used for rate limiting. We do not store your IP address itself.
How we use it
We use your information to assess your application, communicate with you, arrange interviews, make and manage offers, meet our legal obligations (including equal opportunity reporting as a US government contractor) and keep the service secure. A person reviews every application; we do not make automated decisions about candidates.
Voluntary self-identification
Self-identification answers are optional. They are stored separately from your application, are never shown to anyone reviewing it, and are only ever reported in aggregate, with small numbers suppressed.
Who can see it
Within Moraph: the recruiting team, the hiring manager for the role, and the interviewers you meet (interviewers see your application and résumé, not your messages, accommodation requests or offer details). Service providers who host and operate our careers site and process data for us under contract, including Cloudflare (hosting and storage) and, once enabled, our email delivery provider. If you are offered a role employed through our Employer of Record partner, we share what they need to employ you. We never sell candidate data.
How long we keep it
We delete applications automatically two years after they close, whether you withdrew, were not selected or were hired, unless the law requires us to keep records for longer. If you join Moraph, the relevant information moves to your employee record. If you ticked “keep me in mind for other roles”, we may contact you about suitable roles during that period.
Your choices and rights
From your private application page you can update your contact details, withdraw your application and ask us to delete your data. Depending on where you live (for example under the GDPR and UK GDPR, the California Consumer Privacy Act, the Australian Privacy Act or the New Zealand Privacy Act), you may also have the right to access, correct or delete your information, object to or restrict how we use it, and complain to your data protection authority. To use these rights, email privacy@moraph.com.
Where it is stored
Our careers site runs on Cloudflare’s global network. Your information may be processed outside your country, with safeguards such as standard contractual clauses where the law requires them.
Contact
Questions about this notice: privacy@moraph.com. Questions about an application: careers@moraph.com.
Candidate accounts
You don’t need an account to apply. If you create one on careers.moraph.com, we also keep your name, email address, phone number (if you give it), password (stored only as a secure hash), sign-in and security settings, and what you save there: a profile for future applications, saved jobs, applications you have started but not sent (with any résumé you uploaded), and job alerts.
When you confirm your email address, applications made with that address are shown in your account. Saved applications are deleted 90 days after you last change them. From Your data you can download a copy of your information, ask us to delete your applications, and delete your account. Deleting your account removes what the account holds; submitted applications follow the retention period above unless you ask us to delete them.