Privacy Policy

Shortlist is operated by [Your legal name] (“we”). This policy explains what we collect and why, as required by India's Digital Personal Data Protection Act, 2023.

What we collect

• Account: your name, email and profile picture from Google or LinkedIn sign-in. We never receive your Google or LinkedIn password.
• Job-search profile: your CV, the answers you give in setup (experience, notice period, pay, optional diversity questions), and your target roles.
• Connections you choose to add: a Gmail app password, job-board logins, and API keys for AI and contact-finder services. These are encrypted (AES-256) and used only to run your agents.
• Agent activity: jobs found, applications made, contacts found for referrals, emails drafted and sent, and replies to those emails.
• Payments: handled by Razorpay. We never see your card or UPI details; we store the subscription status.

How we use your Gmail

Agents send only the emails you approve, from your own address. They read only replies to threads they started, and verification codes sent by job sites during an application. We do not read, store or analyse anything else in your inbox. Revoking the app password in your Google account disconnects us immediately.

Contacts we find

To request referrals, agents look up work email addresses of recruiters and hiring managers through licensed providers (Apollo, Hunter) or the company's email pattern. Each email carries a one-line opt-out; opt-outs are honoured immediately, and contacts you never emailed are deleted after 90 days.

Sharing

We don't sell your data. We share it only with services needed to run your agents: the AI provider you choose, contact-finder providers, Razorpay, and our hosting provider (Amazon Web Services, Mumbai region).

Your rights

You can view and edit everything in Settings, and delete your account and all data at any time (Settings → Account). For any request or grievance, write to vaibhav@aadicrm.com; we respond within 30 days.