Privacy Policy

This Privacy Policy explains what information Shortlist (“Shortlist,” “we,” “us”) collects when you interact with our Instagram DM concierge, how we use that information, who we share it with, and how you can have your data deleted.

What we do

Shortlist operates an Instagram direct-message (DM) concierge. When you share a reel or post to our Instagram account (@wearshortlist), or send us a message, we read that message, identify the garments in it, and reply with links to shop for those items or similar ones. That’s the whole service: you send us something you like, and we send back places to buy it.

What we collect

We only receive the information Meta’s Instagram Messaging API delivers when you message us. That includes:

• Message content — the text you send and any reel, post, or image you share with us.
• Shared media references — the URLs and metadata for media you share (for example, the link to a shared reel and its caption).
• Sender metadata — the Instagram-scoped sender ID and basic message metadata (such as timestamps) that Meta attaches to the conversation.
• Link interactions — when you tap a shopping link we send, we record that the link was clicked so we can measure which recommendations were useful.

We do not ask for or collect your name, address, payment details, or your Instagram password. We never see your Instagram login.

How we use it

• To understand your request and reply with relevant shopping links.
• To improve the quality and relevance of our product recommendations.
• To operate, maintain, debug, and secure the service.

Who we share it with

To answer your request we pass parts of your message to a small set of subprocessors. Each receives only what it needs to do its job:

• Meta (Instagram Platform) — delivers your messages to us and delivers our replies back to you through the Instagram Messaging API.
• Google / SerpApi — we run product and image searches to find where the garments you shared are sold.
• Google Gemini — performs visual analysis of the media you share to identify the garments in it.

We do not sell your data, and we do not share it for advertising. We may disclose information if required by law or to protect the safety and integrity of the service.

Media retention

We retain the message payload you send us — the shared media URLs and their metadata, plus the text of your request — so we can process it and improve our recommendations. We do not permanently store the underlying media bytes (the actual image or video files) beyond the transient processing needed to answer your request. Instagram’s CDN media URLs are time-limited and expire on their own, and we honor that expiration rather than re-hosting the content.

How to delete your data

You can ask us to delete the request data we hold for you at any time. There are two ways:

• DM us — send “delete my data” to @wearshortlist on Instagram.
• Email us — write to privacy@wearshortlist.com from the account you contacted us with, or include enough detail for us to locate your conversation.

When we receive a deletion request we remove the stored message payloads, shared media references, and link-interaction records associated with your conversation. Some records may persist briefly in routine backups before they are overwritten on their normal cycle.

Data security

We use reasonable technical and organizational measures to protect the data we hold, including encrypted transport and access controls that limit who can reach your data. No method of transmission or storage is perfectly secure, but we work to keep the data we hold safe and to hold as little of it as the service requires.

Children’s privacy

Shortlist is intended for users aged 13 and older, consistent with Instagram’s own requirements, and some features may be limited to users 18 and older. We do not knowingly collect data from children under 13. If you believe a child under 13 has messaged us, contact us and we will delete the associated data.

Changes to this policy

We may update this Privacy Policy as the service evolves. When we do, we’ll revise the “Last updated” date above. Material changes will be reflected on this page.

Contact

Questions about this policy or your data? Email privacy@wearshortlist.com or DM @wearshortlist on Instagram.