Privacy Policy

Acid Sea ("we", "us") operates the global surf employment network at acid-sea.com and is the data controller for the personal data described here. Contact: acidseajobs@gmail.com.

Account data: name, email address, password (stored hashed) or Google sign-in identifier.

Candidates: profile details, preferred roles and destinations, surf level, experience, languages, certifications, availability, photo, CV and supporting documents you choose to upload.

Employers: company name, description, website, locations, images, a private contact email and the jobs you publish.

Usage data: applications sent, saved jobs, saved searches and basic technical logs needed to keep the service secure.

• To provide the service you signed up for — creating profiles, publishing jobs, applying and managing applications (contract).
• To show your profile to employers in Talent Search, only if you turn visibility on (consent, withdrawable at any time).
• To recommend matching jobs with our AI role matcher, using only the information you enter (contract / legitimate interest).
• To prevent fraud, fake employers and data harvesting (legitimate interest).
• To meet legal and tax obligations for paid plans (legal obligation).

• CVs, photos and documents are kept in private storage and are never publicly accessible.
• An employer can see your full profile and files only after you apply to one of their jobs. Files open through temporary links that expire within minutes.
• If you withdraw an application, that employer loses access to your profile and files.
• Talent Search shows only candidates who opted in, with first name and last-name initial — never your email, CV or files.
• Employers may not download in bulk, resell or share candidate data with third parties. Accounts that do so are suspended.

We do not sell personal data. We share it only with employers as described above and with service providers that host and run the platform (hosting, database, authentication, email and AI processing), under data-processing agreements. Some providers may process data outside the EEA under Standard Contractual Clauses.

We keep your data while your account is active. If you delete your account, profile data and files are deleted within 30 days, except records we must keep by law. Application snapshots shared with an employer are removed when the account is deleted.

Under the GDPR you can access, correct, delete or export your data, restrict or object to processing, and withdraw consent at any time. Most settings — including Talent Search visibility — are in your account settings. For anything else, email acidseajobs@gmail.com; we reply within 30 days. You may also complain to your local data protection authority (in Spain, the AEPD).

Acid Sea is intended for people aged 16 or over. Younger users need the consent of a parent or guardian.

We will update this page when our practices change and notify registered users of significant changes.