Shortlist is operated by Position Group Pte. Ltd. (UEN: 202622800R), incorporated in Singapore. We are the data controller for the personal data processed in connection with the Shortlist platform at gotshortlisted.com.
If you have questions about how we handle your data, contact us at ben@positionadvisory.com.
We use only essential cookies required for authentication and session management. We do not use tracking or advertising cookies. No third-party tracking scripts are loaded on the platform.
| Purpose | Data used | Legal basis |
|---|---|---|
| Providing the platform and its AI features | Account data, campaign materials, usage logs | Performance of contract |
| Processing payments and managing subscriptions | Account data, billing data (via Stripe) | Performance of contract |
| Sending transactional emails (billing, account, platform invites) | Name, email address | Performance of contract |
| Responding to support requests | Account data, communications | Legitimate interests |
| Security monitoring and debugging | Log data, usage logs | Legitimate interests |
| Improving the platform | Aggregated, anonymised usage data only | Legitimate interests |
| Complying with legal obligations | As required by applicable law | Legal obligation |
We do not use your data for any purpose not listed here without notifying you first.
✓ We do not sell your personal data to any third party. Ever.
✓ We do not use your uploaded campaign materials to train any AI model.
✓ Your campaign materials are never visible to or accessible by any other user or organisation on the platform.
✓ We do not serve advertising and do not share your data with advertisers.
Shortlist uses the Anthropic API (Claude) to process inputs and generate outputs. When you use any AI feature on the platform, your input is transmitted to Anthropic's API in real time for processing.
Anthropic's API terms of service prohibit using API inputs to train models. Your inputs are processed transiently and are not retained by Anthropic for model training. You can review Anthropic's usage policy at anthropic.com/policies/usage-policy.
Outputs generated by Shortlist belong to you. See our Terms of Use for full details on intellectual property.
We share data only with the subprocessors required to deliver the service. Each is bound by data processing agreements and appropriate data protection standards.
| Subprocessor | Purpose | Location |
|---|---|---|
| Anthropic | AI processing | United States |
| Supabase | Database, file storage, authentication | Asia Pacific (Mumbai, India) |
| Stripe | Payment processing | United States |
| Vercel | Application hosting | United States |
| Resend | Transactional email | United States |
We may also disclose data where required by law, court order, or to protect the safety and security of the platform or its users.
We will update the subprocessor list if our processors change and will notify you of significant changes.
Some of our subprocessors are located in the United States. By using Shortlist, you acknowledge that your data may be transferred to and processed in the United States and other countries where data protection laws may differ from those in your country.
Where transfers occur, we rely on appropriate safeguards including standard contractual clauses and the data processing agreements in place with each subprocessor.
We retain your data for as long as your account is active and for a period after cancellation to allow for reactivation or data export.
You can request early deletion of your account data at any time by contacting us at ben@positionadvisory.com. Billing records are excluded from deletion requests where retention is legally required.
Under Singapore's Personal Data Protection Act (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
→ Access — request a copy of the personal data we hold about you.
→ Correction — ask us to correct inaccurate or incomplete data.
→ Deletion — request that we delete your personal data (subject to legal retention obligations).
→ Portability — receive your data in a structured, machine-readable format.
→ Objection — object to processing based on legitimate interests.
→ Withdrawal of consent — where processing is based on consent, withdraw it at any time.
To exercise any of these rights, email us at ben@positionadvisory.com. We will respond within 30 days. We may need to verify your identity before processing the request.
If you are an EU resident and believe we have not handled your data in accordance with applicable law, you have the right to lodge a complaint with your local data protection authority.
We implement appropriate technical and organisational measures to protect your personal data, including:
No system is completely secure. If you believe your account has been compromised, contact us immediately at ben@positionadvisory.com.
Shortlist is a professional tool intended for use by adults. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have collected data from a minor, we will delete it promptly.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email at least 14 days before the changes take effect.
The current version is always available at gotshortlisted.com/privacy. The effective date at the top of this page indicates when it was last updated.
For any questions about this Privacy Policy or how we handle your data:
Position Group Pte. Ltd.
UEN: 202622800R
Singapore
ben@positionadvisory.com