Legal
Privacy policy.
Last updated: 13 September 2026
This is a plain-language summary of how the platform handles your data. The short version: we collect what's needed to run your interviews and CV work, we never sell it, payment card details never touch our servers, and you can export or permanently delete your data at any time.
What we collect
Account: your name and email, managed through Clerk, our sign-in provider. Your documents: CVs and job descriptions you upload, and the CV versions the Studio creates for you. Interview data: your spoken/typed answers, transcripts, feedback reports, confidence check-ins and exit-survey responses. Job Studio: the job postings you were shown, your fit scores and their evidence, the roles you told us you applied for, and the tailored CV versions, cover letters and email drafts prepared for them. Usage & billing: plan status, quota usage and technical logs that keep the service healthy.
How we use it
Your data is used for one purpose: providing the service — running realistic interviews, evaluating answers, generating honest feedback, analysing and improving your CV, and personalising your preparation (for example, your confidence profile shaping how the interviewer coaches you). We do not sell your data or use it for advertising.
AI processing
Interviews and CV work are powered by specialised AI providers. Depending on the task, relevant excerpts of your answers, CV or job description are processed by our AI subprocessors: language models (Groq, Google Gemini, OpenAI) and speech and voice (Groq Whisper, ElevenLabs, Microsoft neural voices). We follow a minimisation principle — providers receive what the task needs, not your whole account — and we don't permit them to use your data to train their models where such controls are offered.
Job Studio — job boards and maps
When you use the Job Studio we search live job boards through their licensed APIs — Google for Jobs via JSearch (which carries Seek, LinkedIn, Indeed and Glassdoor listings), Adzuna, Careerjet, Remotive and Arbeitnow — using job titles and skills derived from your CV and the location you type. Those providers receive the search terms and, where their API requires it, your IP address and browser type; they never receive your CV. City names are geocoded through OpenStreetMap's Nominatim service to place roles on the map, and the map itself is drawn with CesiumJS using Esri satellite imagery. Postings remain the property of their publishers, and applying takes you to their sites under their own terms.
We never submit an application on your behalf and never send your CV to an employer or a job board. Every application is sent by you, from your own accounts. What we keep — the postings you were shown, your scores, and the CV versions, cover letters and emails prepared for them — exists so your interviewer can prepare you for the jobs you actually applied for, and is deleted with your account.
Review invitations (Trustpilot)
After you complete a mock interview on an individual plan, the session summary we email you may be copied to Trustpilot's Automatic Feedback Service, which then invites you — once — to review ShortlistMe. Trustpilot receives your name and email address for that purpose only and handles them under its own privacy policy. We invite everyone the same way, never only people with good results, and never offer anything in return. Candidates using ShortlistMe through an organization programme are never invited. Turning off optional emails — the unsubscribe link in any of our emails, or a note to info@shortlistme.ai — also stops review invitations.
Payments
All payments run through Stripe's secure checkout and customer portal. Your card number is entered on Stripe's pages, never ours — we store only your plan, its billing period and usage counters. Invoices and receipts live in your Stripe portal (Billing & Usage → Payments & invoices).
Where your data lives
The application runs on reputable cloud infrastructure (web hosting, API hosting and a managed database). Data is encrypted in transit, and access is restricted to what operating the service requires.
Your rights — export and deletion
You stay in control: you can request an export of your data, and deleting your account permanently removes your CVs, transcripts and reports from the platform. We keep data only as long as your account needs it — there is no indefinite retention of your documents. To exercise either right, contact info@shortlistme.ai.
Cookies
We use essential cookies only — the ones that keep you signed in and the service secure. No advertising trackers.
Children
The platform is intended for people preparing for employment and is not directed at children under 16.
Changes and contact
If this policy changes materially, we'll update this page and its date. Data questions, export requests and deletion requests all go to Bluecorp Technologies at info@shortlistme.ai.