Privacy Policy

When you use Shortlist we collect:

• Account info — your email address, and your name if you provide it. If you sign in with Google we receive the name and email your Google account shares with us.
• Buy-box criteria — the price range, industry keywords, revenue floors, and geography you save to your profile.
• Activity data — which deals you star, pass on, or move through your pipeline; notes you write; timestamps of those actions.
• Billing metadata— your payment card details are stored on our payment processor’s servers, not ours. We only see a token, your plan status, and billing dates.

We do not collect health data, location data beyond what you voluntarily enter, or any financial account credentials.

We use your data to deliver the daily deal digest, score listings against your buy box, draft broker outreach, bill you accurately, and support you when you reach out. That’s it. We don’t build ad profiles or sell your data to third parties.

We keep your data for as long as your account is active. If you delete your account we remove your profile and deal activity from our production database within 30 days. We retain billing records for 7 years as required by US tax law. Aggregated, non-identifiable usage statistics may be retained indefinitely.

To run Shortlist we use third-party service providers for:

• Billing — processing your card and managing your subscription.
• Email delivery — sending your daily digest and transactional notices like trial reminders.
• Hosting and database — running the application and storing your account data in US-region servers.
• AI-assisted scoring — generating the per-listing scores and drafted broker messages. Your buy-box criteria is included in the scoring prompts; the provider does not use prompt data to train models by default.

We share only what each provider needs to perform its function. We do not sell, rent, or trade your personal data to anyone. If you want the specific provider names, email david@smbexcel.com and we’ll share them.

We use a minimal set of cookies, all essential:

• Session cookies — keep you signed in while you use Shortlist. Cleared when you sign out.
• Checkout cookies — set by our payment processor during the subscribe flow so the trial can start. Cleared once checkout finishes.

No analytics trackers. No advertising pixels. No third-party marketing cookies. You can clear cookies via your browser settings; signing out also clears the session cookies.

You can:

• Request a CSV export of your deal activity and profile data.
• Request deletion of your account and associated data.
• Opt out of daily digests by turning off all your buy boxes — no buy boxes means no deals to score or send.

To exercise any of these, email david@smbexcel.com. We’ll respond within 5 business days.

Shortlist is not intended for anyone under 18. We do not knowingly collect information from minors. If you believe a minor has signed up, contact us and we’ll delete the account promptly.

Shortlist is hosted in the United States. By signing up you acknowledge that your data will be stored and processed in the US, which may have different data protection laws than your country.

If we make material changes — new data types collected, new third parties we share with — we’ll email you at least 30 days before the changes take effect.

Privacy questions or requests: david@smbexcel.com