advice. To be reviewed, edited, and approved by licensed counsel before use.

Posted / Last Updated: [DATE] · Version: v0.1 (draft)

1. Purpose and scope

This Applicant Privacy Notice explains how personal information is collected and used when you apply for employment through the Apron application platform (the "Portal") operated by Apron, LLC ("Apron," "we," "us"). It applies only to the Portal and to your application for employment with the employer or prospective employer that invited you to apply (the "Employer"). It is provided to you at or before the point of collection.

2. Who controls your information (Employer as controller; Apron as service provider)

You are applying to the Employer. Most of the personal information collected through the Portal is collected on behalf of, and at the direction of, the Employer, which is the business responsible for that information (the "controller" or "business"). Apron acts as the Employer's service provider and processes that information only to provide the Portal to the Employer and as permitted by our contract with the Employer and by law. Apron does not decide whom the Employer hires.

Apron also collects a limited amount of information for its own purposes (operating, securing, and improving the Portal), described in Section 7.

The Employer adopts this Notice as its notice at collection, and the Employer's identity is shown to you within the Portal.

3. Categories of personal information collected on the Employer's behalf

Identifiers and contact information: name, email address, phone number, mailing address, and age or age-confirmation.
Application information: work history, education, references, availability and schedule preferences, the position(s) applied for, whether you previously applied, the source from which you reached the Portal (such as a job-board link), and the contents of any resume or document you upload.
Assessment responses: your answers to scenario, multiple-choice, personality, and aptitude items, and to open-ended written prompts.
Behavioral and interaction information: to support the integrity, fairness, and security of the assessment, the Portal records how you interact with it during your session, including time spent and timestamps; typing, paste, and copy activity; periods of inactivity; and the device, browser, and approximate location derived from your IP address. If the same person submits more than one application, those submissions may be identified using the contact and application information you provide and compared with one another. This information is associated with your application and is used to evaluate engagement and authenticity. The Portal does not use cookies or other storage on your device for this purpose.
Voluntary equal-opportunity self-identification (if offered): any voluntary diversity information you choose to provide is held separately and is never used to score or evaluate your application.

Sources of information: directly from you; automatically from your device and your interaction with the Portal; and from any documents you upload.

Sensitive personal information (SPI): the Portal is not intended to collect SPI. Approximate location is derived from your IP address and is not precise geolocation.

We will indicate where providing certain information is required to complete your application.

4. How the information is used

The Employer (with Apron's assistance) uses this information to: evaluate your application for employment; communicate with you about it; maintain application and, if you are hired, employment records; protect the integrity and security of the assessment and the Portal; and comply with legal obligations and establish or defend legal claims.

5. Automated assessment (no artificial intelligence)

The Portal uses a deterministic, rules-based assessment to help the Employer compare applications against job-related criteria the Employer selects. It does not use artificial intelligence. The assessment is advisory and assists human review; the Employer makes all hiring decisions. You may contact the Employer with questions about how your application was evaluated.

6. No sale or sharing for advertising

We do not sell your personal information and do not share it for cross-context behavioral advertising. We do not use it for marketing unrelated to your application.

7. Information Apron collects for its own purposes

Apron collects limited technical and usage information (for example, security logs and aggregated, de-identified usage statistics) to operate, secure, troubleshoot, and improve the Portal. Apron does not use the content of your application for its own marketing.

8. How the information is disclosed; service providers

Personal information may be disclosed to: the Employer and its authorized personnel; Apron's service providers that host and support the Portal under contract, currently Cloudflare (hosting, storage, email delivery, and bot protection) and, for the Employer's billing only (not applicant data), Stripe; professional advisors; and authorities where required by law or to protect rights and safety. It may also transfer in connection with a business transaction (merger, acquisition, or sale of assets). All service providers are contractually limited to processing personal information only as instructed and consistent with this Notice. A current list of service providers is available on request.

8a. Bot protection

To keep the Portal secure and to tell real applicants apart from automated bots, we use Cloudflare Turnstile. It runs silently in the background, with nothing for you to click. Turnstile processes a small set of technical signals from your device and connection, such as your IP address, browser user-agent, and similar security signals. It is not used to identify you, to profile you, or to evaluate your application in any way, and it plays no part in scoring. Cloudflare describes this processing in its Turnstile Privacy Addendum, available at https://www.cloudflare.com/application-services/terms/turnstile-privacy-addendum/, and in its Privacy Policy.

9. Retention

Application information is retained for the period set by the Employer, generally [12] months after your application, after which it is deleted or de-identified, unless a longer period is required by law or to establish or defend legal claims.

10. Security

Apron uses reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest and access controls. No method of transmission or storage is completely secure.

11. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, and obtain a copy or portability of your personal information, to opt out of sale/sharing (we do not sell or share), and to non-discrimination for exercising your rights. California residents: since January 1, 2023, California job applicants have these rights under the CCPA/CPRA. To exercise any right, contact the Employer, or contact Apron at [privacy@apronqsr.com] and we will assist the Employer in responding. We will verify requests as required by law and will not discriminate against you for exercising your rights.

12. Minimum age

The Portal is intended only for applicants who meet the minimum age the Employer sets for the position, and is not directed to children. Where a position permits minors to apply, the Employer is responsible for any parental-consent requirements.

13. Changes

We may update this Notice. Material changes will be reflected by updating the "Last Updated" date and, where appropriate, by additional notice.

14. Contact

To exercise rights or ask questions, contact the Employer, or contact Apron, LLC, Medford, Oregon — [mailing address]; [privacy@apronqsr.com].