Shortlisted

Privacy Policy

Last updated: April 2025

1. Who we are

Shortlisted is a service operated by GradeStack. If you have any questions about this policy, contact us at results@gradestack.co.uk.

2. Data we collect

  • Email address — provided by you on the submission form, used to deliver your results.
  • Personal statement — the text you submit for analysis.
  • Marketing preference — whether you opted in to receive tips and updates.
  • Payment data — processed directly by Stripe; we never see or store card details.

3. How we use your data

  • To run the AI analysis of your personal statement and return scored feedback.
  • To email you your results after purchase.
  • If you opted in, to send you occasional tips on improving your personal statement.

We do not sell or share your personal statement or email address with third parties for marketing purposes.

4. Storage and retention

Your email address and personal statement are stored in Upstash Redis with a 48-hour TTL. After 48 hours the data is automatically and permanently deleted. If you opted in to marketing emails, your email address is retained in our mailing list until you unsubscribe.

5. Third-party processors

  • Anthropic — your personal statement is sent to the Claude API to generate the analysis. Anthropic's API data is not used to train models.
  • Stripe — handles payment processing. Subject to Stripe's own Privacy Policy.
  • Resend — used to send results emails and (where opted in) marketing emails.
  • Upstash — provides the Redis database used for temporary session storage.
  • Vercel — hosts the application. Vercel may log request metadata per its own Privacy Policy.

6. Your rights (UK GDPR)

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Erasure — request deletion of your data at any time.
  • Rectification — correct any inaccurate data.
  • Object to processing for direct marketing.
  • Withdraw consent — unsubscribe from marketing emails at any time via the unsubscribe link in any email we send.

To exercise any of these rights, email results@gradestack.co.uk. Note that because session data is deleted automatically after 48 hours, we may not be able to locate data submitted before that window.

7. Cookies

Shortlisted does not use cookies or tracking pixels. No cookie consent banner is required.

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page will reflect the most recent revision.