Privacy Policy

1. What we collect and where it comes from

Information you give us. When you email us or request a report, we receive what you send: typically your name, work email, company, website and the details of your request. If you become a client, we also receive billing details and whatever access you grant us (see section 3).

Information from public sources. For outreach, we collect business contact information about people at companies we think we can help: name, role, company, work email and company website, taken from public websites, professional profiles and business directories.

Information from our website. We don't use advertising trackers and we don't share data with ad networks. Our hosting provider keeps standard server logs (IP address, browser type, pages requested, timestamps) for security and performance. If we add analytics, it will be privacy-respecting and we'll update this policy.

Information about brands, not people. The core of our work is observing what public AI assistants and agents say about brands and products. That is information about companies, not individuals.

2. How we use it

To respond to you and provide the services you ask for. To prepare the free report you requested. To contact businesses we believe we can help, and to stop when asked. To run our business: billing, records and security. To improve our methods, using anonymized and aggregated data. And to meet our legal obligations.

3. Client data

When you hire us, you may give us access to your storefront, product data, feeds, analytics and similar systems. We use that access only to perform the engagement, limit it to what the work needs, and remove it when the engagement ends or when you ask. Your analytics may contain information about your customers. We treat it as your confidential information, don't copy more than the work requires, and never use it to contact your customers. We may keep anonymized, aggregated results that don't identify you or your customers.

4. Email outreach

We send business email to people at companies we think we can help. Every message identifies us, includes a postal address and gives you a way to opt out. Reply with "unsubscribe," or email us, and we'll stop and keep a record so we don't contact you again. We don't buy consumer lists.

5. Who we share it with

Service providers that help us run the business (hosting, email, payments, scheduling, document and AI tools), under terms that limit what they can do with it. Professional advisers. Authorities, when the law requires it. A successor, if we sell or merge the business. We use third-party AI services to run measurements and draft work, and we don't put your confidential information into tools whose terms allow it to be used to train public models. We don't sell personal information and we don't share it for targeted advertising.

6. How long we keep it

Prospect contact details: until you ask us to stop, or two years after our last contact, whichever comes first, except for the opt-out record itself. Client records: the length of the engagement plus seven years, for tax and legal reasons. Server logs: for the short period our hosting provider sets. Anonymized, aggregated data: indefinitely.

7. Security

We use measures appropriate to a small business: encrypted connections, access limited to the people who need it, multi-factor authentication on our accounts, and prompt removal of access when work ends. No system is perfectly secure, and we can't promise otherwise.

8. Your choices and rights

You can ask what information we hold about you, ask us to correct or delete it, or ask us to stop contacting you, by emailing info@shortlistcommerce.com. We'll respond within 45 days. Depending on where you live (for example California, Texas, the EU or the UK), you may have further legal rights to access, correct, delete or port your data, or to object to certain uses. We'll honor them, and we won't treat you differently for exercising them. If you're in the EU or UK, our legal basis for processing is our legitimate interest in running and promoting our business and performing our contracts with you, and you may object at any time.

9. Children

The Site and services are for businesses and aren't directed to anyone under 16. We don't knowingly collect information from children.

10. Changes

We'll post updates here with a new effective date. If a change is material, we'll make it obvious on the Site.

11. Contact

Shortlist Commerce, Austin, Texas. info@shortlistcommerce.com