Privacy Policy

What we collect

• Account data: email address, authentication identifiers, and profile information you provide (including CV text, job preferences, and notification settings).
• Usage data: pages visited, features used, device and browser type, IP address, and approximate location derived from IP.
• Payment data: billing-related metadata processed by Stripe (we do not store full card numbers).
• Communications: messages you send via support, community posts, mentor bookings, and notification channel identifiers (e.g. Telegram chat ID, Slack channel ID).
• Cookies and similar technologies as described in our Cookie Policy.

How we use your data

• To provide and improve the Shortlstd platform.
• To match jobs to your profile and generate tailored documents.
• To send alerts and service communications you have requested.
• To process payments and mentor session bookings.
• To secure the platform, prevent abuse, and comply with law.
• To analyse aggregated usage and improve product decisions.

Legal basis

Under UK GDPR we rely on: (a) contract — processing necessary to deliver the service you signed up for; (b) legitimate interests — including product improvement, fraud prevention, and informing you about similar services where appropriate and balanced against your rights; (c) consent — where required for non-essential cookies or optional marketing; (d) legal obligation — where we must retain or disclose data to comply with law.

Data retention

We keep personal data only as long as needed for the purposes above. Account and profile data are retained while your account is active and for a reasonable period afterwards to resolve disputes and meet legal obligations. Logs and analytics may be retained in aggregated or pseudonymised form. You may request deletion subject to exceptions (e.g. financial records).

Your rights (GDPR Article 13)

If you are in the UK or EEA you have the right to access, rectify, erase, restrict processing, object to processing based on legitimate interests, and data portability where applicable. You may withdraw consent at any time where processing is consent-based. You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO). To exercise your rights, contact support@shortlstd.com. We will respond within one month unless an extension is permitted.

Cookies

We use cookies and similar technologies as set out in our Cookie Policy.

Third-party processors

We use trusted providers who process data on our behalf under contract:

• Supabase — authentication, database, and storage.
• Stripe — payment processing for subscriptions and mentor bookings.
• Daily.co — video rooms for mentor sessions.
• Resend — transactional email delivery.

These providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

International transfers

Your data may be processed in the United Kingdom and in countries where our subprocessors operate. We take steps to ensure a comparable level of protection.

Children

Shortlstd is not intended for users under 18. We do not knowingly collect data from children.

Changes

We may update this policy from time to time. Material changes will be posted on this page with an updated date.

Contact

VoyagerOn Ltd, registered in England and Wales, company number 16859949. Email: support@shortlstd.com