Wrike Candidate
Privacy Policy

Wrike, Inc. and all Affiliates ("Wrike," "we," "our," or "us") take your privacy seriously. This Candidate Privacy Policy ("Policy") explains how we collect, use, and share personal data of our job applicants (“you” or “your”) during the recruitment process. It applies to all individuals applying for roles at Wrike, regardless of location, and complies with applicable privacy laws, including the General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”).

This Policy ensures you understand your rights and how we protect your personal data as you engage in our recruitment process. For additional information about our processing activities in connection with your general use of Wrike websites and our use of cookies and similar technologies outside the scope of this Policy, please see the Wrike.com Privacy Policy.

By making available your Recruitment Data (defined below), you confirm that:

• You have reviewed this Policy;
• You have provided any notices and obtained any consents needed to provide information concerning others (e.g., information about employment references);
• Your Recruitment Data may be transferred and processed worldwide in the manner specified in this Policy; and
• You agree to the processing of your Recruitment data in accordance with this Policy.

Wrike will process Recruitment Data in accordance with this Policy unless it conflicts with requirements of applicable law, in which case applicable law will prevail.

This Policy does not form part of any contract of employment offered to applicants hired by Wrike.

1. Categories of Personal Data We Process

During the recruitment process, Wrike collects and processes "Recruitment Data", which refers to identifying information an individual makes available to Wrike in connection with applying for a role. This includes details provided directly by applicants, obtained from references or from other recruiters in connection with a background or employment check, or gathered through recruitment tools. Wrike may also collect Recruitment Data through voice and video recordings from our recruitment platforms, which may include artificial intelligence (AI)-enabled tools, to assist with Wrike’s recruitment process.

Recruitment Data may include, but is not limited to:

2. Your Rights

Privacy laws, including the GDPR, provide individuals with rights over their personal data. These rights, including but not limited to the right to access, rectify, erase, restrict, object, export data, refuse to be subject to a solely automated decision and the right to lodge a complaint with a supervisory authority can be exercised on our data subject access request (“DSAR”) portal accessible at https://privacy.wrike.com/.

California Residents: Under the CCPA, additional rights include:

• Know what personal data we collect, use, and disclose.
• Delete, subject to exceptions, personal data we hold about you.
• Opt-Out of the "sale" or "sharing" of personal data (Wrike does not sell or share personal data for monetary or valuable consideration).

These additional rights can be exercised at https://privacy.wrike.com/. 

3. Our Purpose for Processing Your Personal Data

The table below sets out:

• Our purpose for processing your personal data;
• Our lawful basis to process your under applicable data protection law, for each purpose; and
• Categories of personal data that we use for each purpose.

Here is a general explanation of each legal basis to help you understand the table:

• Legitimate Interest: When Wrike has an interest in using your personal data in a certain way, which is necessary and justified considering any possible risks to you. Wrike processes Recruitment Data for legitimate human resources and business management purposes. These include identifying and evaluating candidates for Wrike positions; record-keeping related to hiring processes; analyzing the hiring process and outcomes; and conducting background checks, where permitted by law. We process Recruitment Data for these purposes because it is necessary for our legitimate interests in recruiting staff and administering our hiring processes.
• Consent: When Wrike asks you to actively indicate your agreement to Wrike’s use of your personal data for a specific purpose, for example, Wrike may request your consent to retain Recruitment Data to consider you for other positions after we have communicated to you our decision on all roles to which you have applied.

• Compliance with Legal Obligations: When Wrike must process your personal data to comply with its legal, regulatory, or corporate governance requirements.

• Performance of Contract: When it’s necessary for Wrike (or a third party) to process your personal data to comply with obligations under a contract with you or to take steps prior to entering into a contract.

In addition to the purposes stated in the table above, Wrike may aggregate personal data collected or otherwise made available to Wrike during the recruitment and hiring process so that the results are non-personally identifiable with respect to applicants in order to improve our recruitment process (“Aggregated Personal Data”). For purposes of clarity, nothing in this Section 3 gives Wrike the right (or ability) to publicly identify an applicant as the source of any Aggregated Personal Data. 

Wrike may also collect and process Recruitment Data using third-party technologies, including artificial intelligence (AI)-enabled tools, during Wrike’s recruitment process to assist with reviewing and organizing Recruitment Data. These tools may, for example, transcribe and summarize interviews, help screen and compare applications, and generate scores or profiles based on predefined criteria set by us (such as skills, experience, or professional background). You acknowledge and accept the manner in which our third-party provider processes data and the relevant protections and security measures which are set out in the third-party provider’s policy available at https://brighthire.com/privacy-policy/.

We do not rely on AI to take fully automated decisions that produce legal or similarly significant effects for applicants. All hiring decisions are made by our recruitment teams, who review AI‑generated outputs and remain responsible for the final decision.

The legal basis for this processing is our legitimate interest in organizing, documenting and improving our recruitment activities, ensuring consistent assessment, and maintaining evidence of the recruitment process, while applying appropriate safeguards (data minimization, access controls, security measures, bias checks, and human oversight).

Where we use third‑party providers offering AI‑enabled features, we require them by contract to:

• process personal data only on our documented instructions;
• ensure confidentiality and security; and
• not use your data for their own purposes (including model training), unless such use is expressly authorized by us, limited to clearly defined purposes, and carried out under appropriate legal and technical safeguards (for example, aggregation, anonymization, or strict access controls).

As described in Section 2, you have the right, at any time and on grounds relating to your particular situation, to object to processing based on our legitimate interests, including the use of AI‑based tools and systematic recording. We will assess all requests from your exercise of rights stated under Section 2 in accordance with applicable data protection laws and, where appropriate, adapt how we process your application..

4. Sharing Your Personal Data

We may share your personal data with third-party service providers to help organize and facilitate recruitment activities as described in this Policy. Where these providers offer AI-enabled features, we contractually require such providers to adhere to appropriate confidentiality, security, and processing of Recruitment Data in accordance with this purpose set forth in this Policy.

Wrike operates as a global organization, which means your personal data may be shared with affiliated entities within Wrike’s corporate group to carry out the purposes outlined in this Recruitment Policy. Due to the international nature of our business, some of your personal data may be transferred to and processed in countries where data protection laws may not offer the same level of rights and safeguards as your home country. For example, these laws may not provide equivalent protection over your data.

To address this, we implement safeguards to ensure your personal data receives an adequate level of protection which includes, but is not limited to, having legally compliant mechanisms for international transfers, as further described in Section 8 below, and deploying technical and organizational safeguards designed to protect personal data against any misuse or accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data, which is further detailed in Section 7 below.

Your personal data may be shared with:

• Wrike Teams: Internal employees and stakeholders involved in the recruitment process.
• Third-Party Providers: Vendors that support our recruitment, such as background check companies or platform providers.
• Government Authorities: Where legally obligated, such as in compliance with regulatory requirements, or where necessary for Wrike to defend our legal rights.
• Affiliated Entities: For cross-functional or global role considerations within Wrike’s network of entities.
• In Connection with Corporate Transactions: Such as mergers, acquisitions, or similar events.

Wrike may also share your personal data in an emergency where the health or safety of an applicant or other individual may be endangered.

5. Sensitive Recruitment Data

Wrike may perform background and criminal checks where permitted by law, and may process other Sensitive Recruitment Data, such as citizenship or nationality information or health information, in order to evaluate a potential reasonable accommodation in the recruitment and hiring process where requested, for equal opportunity monitoring, when relevant for a position and permitted by law. We process personal data for these purposes when we are required to do so by law or if you have given your explicit consent.

If Wrike intends to collect Sensitive Recruitment Data from third parties, you will be provided notice and the opportunity to consent. If you have a disability and would like Wrike to consider a reasonable accommodation, you may provide that information during the recruiting process. We do not intend to collect any Sensitive Recruitment Data from you unless specifically requested for the purposes described above.

6. Retention of Your Personal Data

Wrike retains personal data to fulfill the purposes outlined in this Policy or to comply with applicable legal, regulatory, or internal business requirements.

General Retention Period

• European Economic Area (EEA) / United Kingdom (UK): Personal data is retained for up to 12 months following the conclusion of the recruitment process.
• Rest of World (including the United States and California): Personal data is retained for up to 24 months after the conclusion of the recruitment process.

Extended Retention: Solely upon obtaining your explicit written consent, Wrike may retain your personal data for an additional 12-month period after the General Retention Period as stated above has expired in order to consider you for other positions.

For candidates who participate in interviews on our third-party video platform, the Recording Records are retained for a maximum of twelve (12) months after the interview, after which they are deleted, unless a longer period is required by law or needed to establish, exercise, or defend legal claims.

Unless a shorter period is stated above, the retention periods in this Section 6 apply to all Recruitment Data.

7. Data Security

Wrike is committed to protecting the integrity, confidentiality, and availability of your personal data. We implement comprehensive measures to safeguard your information, including managing access controls, utilizing encryption technologies, conducting regular system monitoring and audits, and ensuring our employees are trained in security and privacy best practices. We maintain robust procedures to detect, report, and respond to potential security incidents. These efforts are continuously evaluated and enhanced to protect your data from unauthorized access, alteration, or loss while ensuring compliance with applicable legal standards. More information about Wrike security is accessible here: https://www.wrike.com/security/overview/

8. International Transfers

Wrike is a global organization, and as such, Recruitment Data may be transferred to and processed in the US and other countries that may not provide the same level of data protection as your home country. To ensure your data is adequately protected, Wrike employs a variety of legal mechanisms authorized by law, including standard contractual clauses, data transfer agreements, Data Privacy Framework (“DPF”) certification and where applicable, obtaining your consent. For transfers outside the European Economic Area (“EEA”), we comply with GDPR requirements and implement additional safeguards such as encryption, pseudonymization, and other technical protections. These measures ensure your personal data remains secure and is handled in accordance with applicable regulations, regardless of where it is processed.

9. Updates to This Policy

We may update this policy occasionally to reflect changes in legal or business practices. Updates will be posted on our website, and significant changes will be communicated directly to you.

10. Contact Us

If you have questions about this Policy please contact the Wrike Privacy Team at [email protected].

For questions related to employment verification or reference requests, please [email protected].