Privacy Policy

Syed Umer Shah runs Shortlist SaaS and is responsible for the personal data described here. Contact: hello@shortlistsaas.com. We collect only what the site needs to work. We do not sell data, show ads or use tracking or analytics cookies.

When you search

• The text you type is sent to TypeSafe AI to find the category and to score listings. We do not store the text. We store a one-way hash of it, the category, the number of results and how long the search took, for 180 days, to improve the site.
• Scores for a search are cached against that hash for 30 days, so the same search is faster and cheaper.
• The owner of a listing sees how many searches matched their listing in the last 30 days. They see only counts, never the text of a search or who searched.
• Cloudflare Turnstile checks that you are human. After the check we set a cookie named sl_pass that lasts 60 minutes. Your IP address is used to apply rate limits and is not stored by us.
• Your light or dark theme choice is saved in your browser only.

When you create an account

• Your name, your email address and a secure hash of your password (we never store the password itself).
• A session cookie that keeps you signed in, with the IP address and browser of each session, to protect your account.
• Resend delivers the sign-in and verification emails.

When you list a product

• The product name, website, description, categories and logo. These become public while the listing is live.
• Stripe handles payment and billing details. We store only the Stripe customer and subscription IDs and the subscription status and dates. We never see your card number.

Who processes the data

• Cloudflare: hosting, database, file storage, rate limits and Turnstile.
• TypeSafe AI: category detection and scoring of search text.
• Stripe: payments and invoices.
• Resend: account emails.

These services may process data outside your country.

How long we keep it

Account and listing data stay while your account exists. Search logs are deleted after 180 days and cached scores after 30 days. Stripe keeps payment records for as long as tax law requires.

Your rights

You can ask us for a copy of your data, to correct it or to delete your account and listings. Email us from the address on your account and we reply within 30 days. You can also complain to your local data protection authority.

Questions? Email hello@shortlistsaas.com.