Privacy notice for US applicants

Effective Date: 17 July 2026

This notice serves as CCPA Notice at Collection for California Applicants.

Amwell collects and uses your personal information, which may include sensitive personal information, for human resources, recruitment, and business-related purposes and to be in legal compliance. We are committed to properly handling the personal information collected or processed in connection with your employment application.

We will not sell the personal information, including any sensitive personal information, we collect about our employees or applicants for employment or share it with third parties for cross-context behavioral advertising.

To view our full privacy policy, visit https://business.amwell.com/company/privacy-policy.

We may collect the personal information and sensitive personal information categories listed in the tables below. The tables also list, for each category, our expected retention period, and collection and use purposes.

Expected retention period of personal information collected from applicants may be extended after an initial offer of employment is made. Personal information may be used to conduct internal audits and investigate complaints, grievances, and suspected violations of Amwell policy; or to exercise or defend the legal rights of the Company and its employees, affiliates, customers, contractors, and agents

Personal Information Category	Expected Retention Period	Business Purpose
Identifiers, such as your full name, contact information, gender, date of birth, signature, Social Security number, driver's license or state identification numbers.	1 year	Recruit and process employment applications, including verifying eligibility for employment and conducting background and related checks Communicate with applicants Comply with applicable state and federal labor, employment, tax benefits, workers' compensation, disability, equal employment opportunity, workplace safety, and related laws Prevent unauthorized access to or use of the Company property, including information systems, electronic devices, network, and data Respond to law enforcement requests and as required by applicable law or court order
California Customer Records employment and personal information, such as your name, signature, Social Security number, physical characteristics or description, photograph, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, current employment, employment history, membership in professional organizations, licenses and certifications, bank account number, credit card number, debit card number, or any other financial, medical or health insurance information.	1 year	Same purposes as for identifiers category
Protected classification characteristics under California or federal law, such as age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex, or military and veteran status.	1 year	Comply with federal and state equal employment opportunity laws Design, implement, and promote the Company's diversity and inclusion programs
Internet or other similar network activity information, including all activity on the Company's information systems.	1 year or per system settings	Facilitate the efficient and secure use of Company information systems Ensure compliance with Company information systems policies and procedures Comply with applicable state and federal laws Prevent unauthorized access to, use, or disclosure or removal of the Company's property, records, data, and information
Geolocation data, such as the time and physical location related to use of an internet website, application, or device.	1 year or per system settings	Facilitate the efficient and secure use of Company information systems
Sensory and surveillance data, such as call monitoring and video surveillance.	1 year or per system settings	Comply with applicable state and federal laws, including on workplace health and safety Prevent unauthorized access to or use of the Company's property, including its information systems, electronic devices, network, and data. Improve customer service
Professional or employment-related information, such as employment application information (work history, academic and professional qualifications, educational records, references, and interview notes, background check, drug testing results, work authorization.	1 year	Recruit and process employment applications, including verifying eligibility for employment, background checks, and onboarding Maintain personnel records and comply with record retention requirements. Comply with applicable state and federal labor, employment, tax, benefits, workers' compensation, disability, equal employment opportunity, workplace safety, and related laws. Prevent unauthorized access to or use of the Company's property, including its information systems, electronic devices, network, and data. Evaluate and provide useful feedback.
Education information, such as education records, degrees and vocational certifications obtained, report cards, and transcripts.	1 year	Evaluate an individual's appropriateness for hire.
Inferences drawn from other personal information to create a profile or summary, for example, an individual's preferences, abilities, aptitudes, and characteristics.	1 year	Engage in human capital analytics, including to identify correlations about individuals and job success, analyze data to improve retention and productivity, and analyze employee preferences to inform human resources policies and procedures Conduct applicant reference checks to assist in hiring decisions
Sensitive personal information Government identifiers Geolocation Racial or ethnic origin Citizenship or immigration information Health information, including job restrictions and workplace illness and injury information.	1 year	Recruit and process employment applications, including verifying eligibility for employment and conducting background and related checks Comply with federal and state equal employment opportunity laws Design, implement, and promote the Company's diversity and inclusion programs

Sensitive personal information is a subtype of personal information consisting of specific information categories. While we collect information that falls within the sensitive personal information categories listed in the table above, the CCPA does not treat this information as sensitive because we do not collect or use it to infer characteristics about a person. We do not use or disclose sensitive personal information for purposes other than purposes permitted by law.

Further details are provided in the sections below.

Collection of Personal Information

For the purposes of this Privacy Notice, personal information means any information about an identifiable individual collected in connection with the recruitment process. Amwell may collect personal information directly from you, as a job applicant, or may receive personal information from third parties, for example, in connection with a background, employment, or reference check, subject to your consent where required by law. Personal data excludes anonymous or de-identified data that is not associated with a particular individual. We may collect, store, and process the following categories of personal information in connection with our recruiting activities including but not limited to:

Personal contact details such as name, title, addresses, telephone numbers, and personal email addresses.
Work history and other relevant experience, including information contained in a resume, curriculum vitae, cover letter, or job application.
Education information including degrees awarded, transcripts, and other information provided in support of the job application.
Compensation history.
Information collected during phone screenings and interviews.
Details regarding the type of employment sought, desired salary, willingness to relocate, job preferences, and other information related to compensation and benefits.
Reference information and information received from background checks, where applicable, including information provided by third parties.
Government-issued identity documents, work visa, work permit, and similar information.
Information related to previous applications to Amwell or previous employment history with Amwell.
Any additional personal details that you otherwise voluntarily provide to us.

Sources of Personal Information

We obtain personal information from the following categories of sources:

Directly from you, such as from the forms or information you input into Amwell's systems.
Indirectly from you, such as from your interactions with Amwell's computer systems.
From our service providers, such as staffing partners, applicant tracking system providers, background check providers, and data analytics providers.
Government entities, such as for background check purposes.
Employee referrals
Publicly available information and sources
References you provide

Use of Personal Information

We only process your personal information as described in this Privacy Notice or as otherwise required or permitted by applicable law in connection with carrying out our application and recruitment process. We may process your personal information for the following legitimate business purposes:

Identifying and evaluating job applicants, including assessing skills, qualifications, and interests.
Verifying your information and carrying out employment, background, and reference checks, where applicable, subject to your consent where required by applicable law.
Communicating with you about the recruitment process and your application.
Keeping records related to our hiring processes.
Creating and submitting reports as required by applicable laws or regulations.
Complying with our legal, regulatory, or other corporate governance requirements.
Analyzing and improving our application and recruitment process.
Complying with applicable laws, regulations, legal processes, or enforceable government requests.
To protect the rights and property of Amwell, other job applicants, employees, or the public, as required or permitted by law.

If we would like to use your previously collected personal information for different purposes than those we notified you about at the time of collection, we will provide you with notice and, where required by law, seek your consent before using your personal information for a new or unrelated purpose. We may process your personal information without your knowledge or consent where required by applicable law or regulation.

We may collect, process, and disclose aggregated or deidentified information about our employees for any purpose, without restriction.

Cookies and Tracking Technologies

We may use online tracking technologies, such as cookies, pixels, and tracking scripts, in websites and applications accessed by applicants. These technologies may collect information including Internet or similar network activity, communication metadata and content. We may engage third-party service providers who implement these technologies and we may share relevant information with them. They may monitor user interactions (e.g., mouse movements, clicks) and collect, store, and use data such as device details, usage activity, chat messages, and other information you provide. They may not use your information for purposes other than those related to the services they are providing to us.

For example, Amwell and our software providers may use industry-standard web and product analytics technologies to share application usage and diagnostic data for service improvement and troubleshooting purposes.

Some software or services may provide the choice to opt in or out of sharing usage and diagnostic data with third-party service providers. Amwell will adhere to the notification and consent provisions below.

Identity Verification

As part of Amwell’s commitment to maintaining a secure and trusted hiring process, candidates may be asked to complete an identity verification step through our hiring platform (Greenhouse Identity Verification powered by CLEAR) during the interview process.

For certain roles, including those involving access to sensitive systems, data, or technology infrastructure, identity verification is a required step prior to final-stage interviews. Candidates for these roles are required to complete this step to continue in the hiring process.

Identity verification is used solely to confirm a candidate’s identity and help prevent fraud. It is not a background check and does not independently determine hiring decisions.

As part of this process:

Amwell may collect limited personal information such as your name, contact details, IP address, and verification status.
Identity verification is facilitated by CLEAR, which may collect and process additional information (such as government-issued ID and biometric data) to confirm your identity.
Amwell does not collect biometric information for the purpose of uniquely identifying you.
Amwell does not receive or store sensitive identity artifacts (e.g., ID images or biometric data); these are processed directly by CLEAR.

CLEAR will seek your consent to proceed with identity verification and process your information including government-issued ID and biometric data.

Candidates may exercise their data rights or request deletion of their information in accordance with applicable laws. Requests related to CLEAR-processed data must be submitted directly to CLEAR.

Disclosures of Personal Information

We may disclose the personal information we collect, including sensitive personal information, to others for the business purposes described above, such as to engage service providers to help us administer our talent acquisition process.

We will only disclose your personal information to third parties where required by law or to our employees, contractors, designated agents, or third-party service providers who require such information to assist us with administering the recruitment process, including third-party service providers who provide services to us or on our behalf. We may use third-party service providers for various purposes, including, but not limited to, obtaining employment verification and background checks. These third-party service providers may be located outside of the country in which you live or the country where the position you have applied for is located.

We require all our third-party service providers, by written contract, to implement appropriate security measures to protect your personal information consistent with our policies and any data security obligations applicable to us. We do not permit our third-party service providers to use your personal information for their own purposes. We only permit them to process your personal information for specified purposes in accordance with our instructions.

The chart below identifies the categories of entities to whom we have disclosed our employees' personal information for a business purpose over the past 12 months, along with the personal information categories disclosed and the disclosure's business purposes.

Category of Recipients	Personal Information	Business Purpose Disclosures
Recruitment platform service provider	A. Identifiers. B. Personal information categories listed in the California Customer Records statue. C. Protected classification characteristics under California or federal law. F. Internet or other similar network activity. G. Geolocation data. H. Sensory data. I. Professional or employment-related information. K. Inferences drawn from other personal information.	To perform applicant tracking, screening, and other hiring services.
Background check services	A. Identifiers.	To carry out background checks
Identity verification services	A. Identifiers.	To carry out identity verification checks
Professional Advisors (e.g. Consultants, Legal, Accounting, Audit)	All personal information categories relevant to the purposes.	To obtain professional advice.
Other Service Providers	All personal information categories relevant to the purposes.	To operate, host and facilitate our operations and business.

We may also disclose your personal information for the following additional purposes where permitted or required by applicable law:

To other members of our group of companies (including outside of your home jurisdiction) for the purposes set out in this Privacy Notice and as necessary to administer the application and recruitment process.
As part of our regular reporting activities to other members of our group of companies.
To comply with legal obligations or valid legal processes such as search warrants, subpoenas, or court orders. When we disclose your personal information to comply with a legal obligation or legal process, we will take reasonable steps to ensure that we only disclose the minimum personal information necessary for the specific purpose and circumstances.
To protect the rights and property of Amwell, other job applicants, employees, or the public, as required or permitted by law.
During emergency situations or where necessary to protect the safety of persons.
Where the personal information is publicly available.
If a business transfer or change in ownership occurs.
For additional purposes with your consent where required by law.

In the recruitment context, we do not sell your personal information to third parties and have not sold it in the past 12 months. We do not share your personal information with third parties for cross-context behavioral advertising purposes and have not shared your personal information in the past 12 months.

Data Security

We have implemented appropriate physical, technical, and organizational security measures designed to secure your personal information against accidental loss and unauthorized access, use, alteration, or disclosure. In addition, we limit access to personal information to those employees, agents, contractors, and other third parties that have a legitimate business need for such access.

Data Retention

Except as otherwise permitted or required by applicable law or regulation, we will only retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. Under some circumstances we may anonymize your personal information so that it can no longer be associated with you. We reserve the right to use such anonymous and de-identified data for any legitimate business purpose without further notice to you or your consent.

If you are offered and accept employment with Amwell, the personal information we collected during the application and recruitment process will become part of your employment record and we may use it in connection with your employment consistent with our employee personal information policies. If you do not become an employee, or, once you are no longer an employee of Amwell, we will retain and securely destroy your personal information in accordance with our document retention policy and applicable laws and regulations.

Your Privacy Rights

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during the recruitment process. By law you may have the right to request access to, correct, or request erasure of the personal information that we hold about you or object to the processing of your personal information under certain circumstances. If you want to review, verify, correct, request erasure of your personal information, or object to the processing of your personal information, please contact us at Talent.acquisition@amwell.com. Any such communication must be in writing. Depending on where you are located, some of these rights may not apply. These rights are subject to certain exceptions and limitations permitted by applicable law.

Right to Know and Access

You may have the right to request that we disclose certain information to you about our collection and use of your personal information (the "right to know"), including the specific pieces of personal information we have collected about you (an "access request"). Our response will cover the 12-month period preceding the request. You may make two right to know and access requests in any 12-month period. Once we receive your request and confirm your identity, we will disclose to you:

The categories of personal information we collected about you and sources from which we collected your personal information.
The business or commercial purpose for collecting your personal information and, if applicable, selling or sharing your personal information.
If applicable, the categories of persons, including third parties, to whom we disclosed your personal information.
When specifically requested, a copy of your personal information subject to any permitted redactions.

Right to Correct

You may have the right to request correction of personal information we maintain about you that you believe is inaccurate. We may require you to provide documentation, if needed, to support your claim that the information is inaccurate. Unless an exception applies, we will correct personal information that our review determines is inaccurate and direct our service providers to take similar action.

Right to Delete

You may have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions and limitations.

Right to Non-Discrimination

You have the right not to be discriminated or retaliated against for exercising any of your privacy rights described in this section.

How to Exercise Your Rights

To exercise the right as described above, please submit a verifiable request to us by emailing us at privacy@amwell.com.

Only you, or someone legally authorized to act on your behalf, may make a request to know, delete, or correct related to your personal information. To designate an authorized agent, please email us at privacy@amwell.com. We may request specific information from you or your authorized representative to confirm your or their identity before we can process your right to know, delete, or correct your personal information. You or your authorized agent may only submit a request to know or for data portability twice within a 12-month period.

We will confirm receipt of your request within ten business days. If you do not receive confirmation within the ten-day timeframe, please contact privacy@amwell.com.

We endeavor to respond to requests within the time period required by applicable law. If we require more time, we will inform you of the reason and extension period in writing.

We may deny certain requests, or only fulfill some in part, as permitted or required by law. For example, if you request to delete Personal Information, we may retain Personal Information that we need to retain for legal purposes. If we deny a request, we will explain the basis for the denial.

We do not charge a fee to process or respond to your verifiable request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Questions and Complaints

If you have any questions about this Privacy Notice or how we handle your personal information, or need to access this Privacy Notice in an alternative format due to having a disability, or you would like to make a request relating to your personal information, please contact the privacy team at: privacy@amwell.com.

If you are unsatisfied with our response to any issues that you raise, you may have the right to lodge a complaint with your state’s attorney general or regulatory agency.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we update the Privacy Policy, we will revise the “Effective Date” date above and post the new Privacy Policy. We recommend that you review the Privacy Policy regularly to stay informed of our privacy practices.

Contact Us

American Well Corporation 75 State Steet, Ste 100, Boston, MA 02109. P: 617-204-3500

Talent Acquisition: Talent.acquisition@amwell.com

Privacy Team: privacy@amwell.com