Privacy Policy

Shortlist (“we”, “our”, “us”) is an AI-powered career writing tool that helps you create tailored resumes, cover letters, and LinkedIn profiles. This policy explains what data we collect, how we use it, and your rights.

Data we collect

• Account information — your email address, used for authentication via magic link (no password stored).
• Resume and career content — text you enter into the app (resume, job descriptions) to generate tailored documents. This content is sent to Anthropic’s Claude API to produce your output and is saved to your account for your own reference.
• Generated documents — the outputs we produce for you, stored so you can access them from your dashboard.
• Usage metadata — generation counts, document types, quality scores, and anonymous performance metrics. We never store resume text or job descriptions in analytics systems.

How we use it

• To generate and deliver your tailored career documents.
• To maintain your account and generation history.
• To process subscription payments via Stripe.
• To improve output quality through aggregate, anonymised metrics.

Third-party services

• Anthropic — your input text is sent to Claude to generate output. See Anthropic’s privacy policy.
• Supabase — authentication and database hosting. Data is stored in the US.
• Stripe — payment processing. We never store card details.
• PostHog — anonymous product analytics (no content fields).
• Sentry — error monitoring. PII is not sent to Sentry.

The Shortlist Chrome extension adds a “Shortlist this job” button to supported job board pages (Greenhouse, Lever, Workday, Indeed, LinkedIn).

What the extension does

• Reads the job description text from the current job posting page when you click the button.
• Passes that text to shortlist-amber.vercel.app/generate as a URL parameter so it pre-fills the job description field.
• Opens the Shortlist app in a new tab.

What the extension does NOT do

• Does not store any data — the extension has no backend and writes nothing to local storage or any server.
• Does not read any page content unless you click the button.
• Does not track your browsing history or any other page data.
• Does not collect personal information.

Once you click the button, data handling is governed by the Shortlist web application privacy policy above.

You can delete your account and all associated data at any time by emailing us (see contact below). We will permanently delete your data within 30 days of a valid deletion request.

We use a single authentication cookie managed by Supabase to keep you logged in. We do not use advertising or tracking cookies.

We may update this policy from time to time. The “last updated” date at the top will reflect any changes. Continued use of Shortlist after changes constitutes acceptance.

Questions about this policy? Email nickskotadis@gmail.com.