apricot.es

Política de Privacidad

Última actualización: August 2026

1. Introduction

apricot.es ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services, including the employer portal.

We comply with the EU General Data Protection Regulation (GDPR) and Spain's Ley Orgánica de Protección de Datos (LOPDGDD). Our operator identity is set out in the Legal Notice.

2. Data We Collect

We may collect the following types of personal data:

  • Name and email address (when you sign up or contact us)
  • Usage data (pages visited, time spent, referring URLs)
  • Device and browser information
  • IP address (anonymised for analytics)
  • Job application data if you apply through our platform

3. Employer Accounts and Job Postings

If you use the employer portal, we additionally process:

  • Your Google account name and email address, received from Google when you sign in with Google. We do not receive your Google password.
  • The content of job postings you submit, including company details, role descriptions, salary information, and the application contact or URL you provide.
  • The IP address and browser user-agent recorded with each submission, used solely for spam prevention and abuse triage.
  • A session cookie that keeps you signed in (see the Cookie Policy).

We send transactional emails related to your account and postings (submission receipts, review decisions). These are necessary service messages, not marketing.

Approved job postings are published publicly on apricot.es. Do not include personal data in a posting beyond what you intend to publish.

4. How We Use Your Data

We use your personal data to:

  • Provide and improve our job board services
  • Operate employer accounts and review, publish, and manage job postings
  • Send transactional service emails
  • Prevent spam, fraud, and abuse
  • Analyse website usage to improve user experience
  • Respond to enquiries and support requests
  • Comply with legal obligations

5. Legal Basis for Processing

We process your data based on: performance of a contract (operating your employer account and publishing your postings), our legitimate interests (improving our services and preventing abuse), your consent (analytics cookies), or compliance with legal obligations.

6. Data Sharing and Processors

We do not sell your personal data. We share data with service providers who help us operate the platform, under data processing agreements:

  • Google (sign-in for the employer portal; Google Cloud and Firebase hosting)
  • Neon (database hosting on AWS, EU/US regions)
  • Cloudflare (content delivery and security)
  • Resend (transactional email delivery)
  • Google Analytics (anonymised usage analytics, with consent)

Where providers process data outside the EEA, transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy. Employer account data is deleted within 30 days of an account deletion request. Rejected or withdrawn job submissions are kept for up to 12 months for abuse prevention, then deleted. Analytics data is anonymised after 26 months.

8. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with the Agencia Española de Protección de Datos (AEPD)

To exercise these rights, including deletion of an employer account, contact us at [email protected].

9. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.

10. Contact

For privacy-related enquiries, contact us at [email protected].