Privacy Policy

1. Who is responsible for your data

The data controller is ANS CARE SOLUTIONS LIMITED, 80 Marlow House Hallfield Estate, W2 6HL, England. For any privacy question or to exercise your rights, contact us at support@anscareuk.shop or +44 7155027091.

2. What we collect

• Career inputs you provide: the target role, industry, experience descriptions, pasted job descriptions, tone preferences, optional name, and any files or example content you upload to generate resumes, cover letters, visuals or interview questions. This may include personal data within your work history.
• Generated results: the drafts, visuals, keyword analyses and practice materials the tools produce from your inputs.
• Account & subscription data: email address and subscription status. Payment is processed by Stripe; we receive confirmation and limited billing metadata but never your full card number.
• Support data: messages you send us and the email address you use.
• Technical & usage data: IP address, device/browser type, and essential logs needed to run and secure the service. See our Cookie Policy.
• Practice recordings: if you choose to record an interview practice clip, it is created and downloaded in your own browser and is not uploaded to us unless you send it to us.

3. Collection sources (where we collect it from)

We collect personal data from the following collection sources:

• Directly from you — the career inputs, files and messages you enter when you use the tools, subscribe, or contact us.
• Automatically from your device — technical and usage data collected as you browse (IP address, device/browser type, essential logs and cookies).
• From our payment processor (Stripe) — subscription confirmations and limited billing metadata.
• From our service providers — hosting, email and (where used) AI processing providers acting on our instructions.

3a. How we handle your AI inputs and outputs

Because Shortlist is an AI career tool, we want to be specific about AI data handling. User input — the target role, experience text, pasted job descriptions and any files or example data you submit — is processed only to generate your requested resume, cover letter, visuals, keyword analysis and interview questions. Generated results (your drafts, visuals and analyses) are returned to you and, unless you save them to your account, uploaded content and results are cached and cleared after 30 days by default. You can request export or deletion of your inputs and outputs at any time. We do not use your inputs, uploaded files or generated results to train AI models. Shortlist is an online-only digital service; no physical goods are sold, produced or shipped.

4. Why we use it, and our legal bases (UK GDPR / EU GDPR)

• To provide the tools — generate your resume, cover letter, visuals, ATS analysis and interview practice. Legal basis: performance of a contract.
• To operate subscriptions and take payment via Stripe. Legal basis: performance of a contract and legal obligation (tax/accounting).
• To provide support and respond to your messages. Legal basis: legitimate interests and/or contract.
• To secure and improve the service and prevent abuse. Legal basis: legitimate interests.
• For non-essential cookies/analytics, only with your consent where required.

We do not use your inputs or generated results to train AI models.

5. Payment boundary

Card payments are handled by Stripe, Inc. as an independent processor. Shortlist does not see, store or process your full card number, CVC or full card details. Stripe processes payment data under its own privacy policy and PCI-DSS obligations.

6. Who we share it with (processors)

We share limited personal data only with service providers who help us run Shortlist, under contract and only as needed:

• Hosting & infrastructure: Vercel (application hosting/CDN) and our database/storage provider (Supabase) for account, subscription and support records.
• Payments: Stripe, for subscription billing.
• Email: our email provider, to send you receipts and replies.
• AI processing: where an AI provider is used to generate content, only the inputs needed for generation are processed, under contractual confidentiality and with no model-training use of your data.

We do not sell your personal data, and we do not share it with employers or recruiters.

7. International transfers

Some providers are located outside the UK/EEA (for example, in the United States). Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum and the EU Standard Contractual Clauses, plus provider certifications where available.

8. How long we keep it

• Uploaded content and generated results: cached and cleared after 30 days by default, unless you save them to your account.
• Account and subscription records: for the life of your account and as required for tax/accounting (typically up to 6 years).
• Support messages: up to 24 months.

9. Security

We use encryption in transit, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and regulators of any breach where required.

10. Your rights

Under UK GDPR / EU GDPR you have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise any right, email support@anscareuk.shop.

Under the California Consumer Privacy Act (CCPA/CPRA), California residents have the right to know, delete, and correct personal information, and to opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined, and we do not offer financial incentives for data. You may exercise these rights using the same contact details, and you will not be discriminated against for doing so.

11. Automated decisions

The tools generate suggestions from your inputs, but they do not make legally significant automated decisions about you. Outputs are drafts for you to review and edit.

12. Children and minors

Shortlist is not for children under 13, who may not use it. Users aged 13–17 must have permission from a parent or guardian. We do not knowingly collect data from children under 13; if you believe we have, contact us and we will delete it.

13. Complaints

If you have a concern, contact us first at support@anscareuk.shop. You also have the right to complain to the UK Information Commissioner's Office (ICO), or your local data protection authority in your country of residence.

14. Changes

We may update this policy and will change the "last updated" date above. Material changes will be highlighted on this page.

15. Contact

ANS CARE SOLUTIONS LIMITED, 80 Marlow House Hallfield Estate, W2 6HL, England. Email support@anscareuk.shop, phone +44 7155027091. Governing law: England and Wales.