Privacy Policy

Effective Date: August 16, 2025

Welcome to Shortlst. We value your trust and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect information across our services worldwide. It is designed to comply with global privacy frameworks including the GDPR (EU/UK),CCPA (California), Singapore PDPA, and India'sDigital Personal Data Protection Act (DPDP Act), 2023.

1. Information We Collect

We collect information in the following ways:

• Account Information: Name, email, phone number, organization, role, login credentials.
• Candidate Data: Resume, interview responses, voice/video recordings, assessments, and performance data.
• Usage Data: Log files, IP address, device identifiers, browser type, operating system, and activity within the platform.
• Cookies & Tracking: Session cookies, analytics tools, and similar technologies to improve service performance.
• Payment Information: Processed securely by third-party payment providers; we do not store sensitive payment card details.

2. How We Use Information

We process personal data to:

• Provide and improve our services.
• Match candidates with job opportunities and generate analysis for recruiters.
• Facilitate communication between candidates and recruiters.
• Personalize user experience and develop new features.
• Ensure security, prevent fraud, and comply with legal obligations.

3. Legal Basis for Processing

Depending on your location, we rely on:

• Consent (e.g., for cookies, optional data fields).
• Contractual necessity (to deliver services).
• Legitimate interests (platform improvement, fraud prevention).
• Legal obligations (to comply with applicable laws).

4. Sharing of Information

We may share your data with:

• Employers/Recruiters using Shortlst to assess candidates.
• Service providers (cloud hosting, analytics, payment processors) bound by confidentiality.
• Legal authorities if required by law.
• Business transfers in case of mergers, acquisitions, or restructuring.

We never sell your personal data.

5. International Data Transfers

We operate globally. Data may be transferred to and processed in countries outside your own. We ensure appropriate safeguards such as Standard Contractual Clauses (SCCs)or equivalent mechanisms for cross-border transfers.

6. Data Retention

• Candidate interview data: Retained for [X months] (customizable by recruiters) unless deletion is requested.
• Account data: Retained as long as your account is active.
• Legal/transactional records: Retained as required by law.

7. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access, rectify, or delete your data.
• Restrict or object to processing.
• Data portability.
• Withdraw consent (where applicable).
• Lodge complaints with supervisory authorities.

8. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: