Privacy policy

ShortlistCV is run by Building Genius, the data controller. Contact: buildinggeniuss@gmail.com.

What we process and why

• Your CV and the job ad you paste. We use them only to write your preview and, if you pay, your full pack. This may include personal data in your CV. Legal basis: performing the service you asked for.
• Payment details. Handled by Stripe. We never see your card number. We receive your email, the amount and a payment reference. Legal basis: contract and our legal duty to keep accounting records.
• Basic technical data such as IP address, used for security and to limit abuse. Legal basis: legitimate interests.

Where your CV goes

Your CV and the job ad are sent securely to an AI provider (Anthropic) to generate your result. Under the provider's commercial API terms, this data is not used to train its models. We do not save your CV or the generated result on our servers or in a database. Your browser keeps a copy only until you close the tab.

Who else handles data

Stripe (payments), Anthropic (AI processing) and Vercel (hosting). They act on our instructions and may process data outside the UK under appropriate safeguards.

How long we keep it

We do not retain your CV or ad. Payment records are kept for the period required for UK tax and accounting rules (currently six years).

Your rights

You can ask for access to, correction of, or deletion of your personal data, and object to processing. Email us and we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We use no advertising or tracking cookies. Stripe may set cookies on its own checkout page.