Privacy Policy

Last updated: 14 March 2026

Introduction

This Privacy Policy explains how shortlisted.cv ("we", "us", or "our") collects, uses, stores, and protects your personal information when you use our CV optimisation service.

By using shortlisted.cv, you agree to the collection and use of information in accordance with this policy.

Information we collect

Account information: When you create an account, we collect your name and email address via our authentication provider (Clerk).

CV data: When you upload a CV, we store the file and its parsed content. This may include your name, contact details, work history, education, and skills.

Job descriptions: We store the job descriptions you paste into the optimisation tool.

Q&A responses: We store your answers to the targeted questions generated during the optimisation process.

Payment information: Payments are processed by Polar. We do not store your card details. We receive your subscription status and customer ID from Polar.

How we use your information

We use your information to:

• Provide, operate, and improve the CV optimisation service
• Generate tailored CVs using AI
• Build and maintain your knowledge profile for future sessions
• Process payments and manage subscriptions
• Send transactional emails (welcome, subscription status, CV ready)
• Respond to support enquiries

AI processing

Your CV data and job descriptions are sent to third-party AI providers (Anthropic and Google) for processing. These providers process the data according to their own privacy policies. We do not use your data to train AI models.

Data storage and security

Your data is stored securely using Supabase (hosted on AWS) with row-level security policies that ensure you can only access your own data. Files are stored in a private storage bucket with signed-URL access.

Data retention

We retain your data for as long as your account is active. You may download all your data or permanently delete your account at any time from your account settings. Upon deletion, all associated data is removed within 30 days.

Third-party services

We use the following third-party services:

• Clerk — authentication and user management
• Supabase — database and file storage
• Polar — payment processing
• Resend — email delivery
• Anthropic (Claude) & Google (Gemini) — AI-powered CV analysis and generation

Your rights

You have the right to:

• Access all personal data we hold about you
• Download a copy of your data
• Request correction of inaccurate data
• Delete your account and all associated data

You can exercise these rights from your account settings or by contacting us at the address below.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the site.

Contact

For privacy-related enquiries, contact us at billysappstudio@gmail.com or use our contact form.