Incident #A7023E · 02 MAR 2026minor
Gumb adds payment providers, Indeed applications, and defined retention periods to EU privacy policy
The policy now names Stripe and PayPal as payment providers, and adds Indeed as an application channel with possible data transfer to the USA. It also states that applications may be kept for future positions, and sets retention at up to 90 days for log data and usually up to 24 months for support data.
Taken from you
- Applications may be retained for future suitable positions
- Application data may be sent to Indeed (USA) with possible US transfer
- Support and application data kept usually up to 24 months via Zendesk
- Applications emailed to careers@gumb.app are processed through Zendesk
Won back
- Log data retention capped at 90 days, then anonymised or deleted
- Right to withdraw consent and request immediate deletion of application data stated
- Payment providers Stripe and PayPal are named with their EU entities
Evidence · 4 of 4 quotes matched in source
We reserve the right to retain application documents for future suitable positions.+ inserted · ✓ matched in source
Indeed may transfer data to the USA; the basis is EU Standard Contractual Clauses as well as certification under the EU-U.S.+ inserted · ✓ matched in source
Support data (e.g., Zendesk tickets including applications via careers@gumb.app): Until deletion is requested or statutory retention obligations apply, usually up to 24 months.+ inserted · ✓ matched in source
Log data: Maximum 90 days, then anonymization or deletion.+ inserted · ✓ matched in source
Archived version ↗ · 194 words changed