Privacy Policy
Last updated 12 June 2026
This policy explains what Shortlisted collects, why, and the choices you have. Shortlisted is the interview-practice product in the Aris career platform, operated by Verdax Limited trading as Verdax Software, registered in England and Wales (company no. 15666366).
We have written it in plain English. If anything is unclear, email us at hello@getaris.app and we will explain.
What we collect
We only collect what we need to give you your gap analysis and run your interviews:
- Account details: your name and email address, and your sign-in identity.
- What you give us: the job descriptions you paste and the CV you upload (a PDF), plus a small preview image of it.
- What we produce for you: your gap analysis, your interview questions, the text transcript of each interview, and your scored feedback.
- Payment records: which pack you bought and the amount, held so we can grant credits and keep proper accounts. Card details are handled by Stripe, never by us.
- Service data: a session cookie to keep you signed in, and basic usage records we use to keep the product reliable.
How we use it
We use your data to read your CV against the role, build and run your voice interviews, score them, take payment for packs, keep your account secure, and improve the reliability of the service.
We do not sell your data, and we do not use it for advertising.
The companies that process data for us
We use a small set of trusted providers to run the product. Each only receives the data it needs for its job:
- Google Firebase: sign-in and our database, where your account and your reports are stored.
- Cloudflare R2: secure file storage for your uploaded CV and its preview image.
- Stripe: payment processing for interview packs.
- OpenAI: the live voice interview and real-time speech-to-text.
- Anthropic: reading your CV and job description, generating questions, and writing your feedback. We may use OpenAI or Google for these same text tasks depending on configuration.
How AI uses your data
To produce your results, your CV and the job description are sent to the AI providers above. Your data is used only to generate your analysis, interview and feedback. It is not used to train their models under their API terms.
For a full breakdown of where AI is involved, see our AI transparency page.
Voice interviews and audio
Your interview is spoken, but we do not store the audio. Your speech is transcribed in real time and only the text transcript is kept, alongside your scored feedback.
How long we keep it
We keep your data while your account is active. You can delete your account at any time from your account settings, which removes your interviews, gap analyses, transcripts, feedback and uploaded CV.
We retain payment records after deletion where we are required to for accounting and tax. Anything held only to prevent abuse is short-lived and expires automatically.
Your rights
Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, or restrict how we use it. You can also object to certain uses and ask for your data in a portable form.
To exercise any of these, email hello@getaris.app with “Data request” in the subject. We will respond within the time the law allows.
How we protect your data
Access to the database and file storage is locked down to our servers only; the browser cannot read it directly. Links to your stored CV are signed and time-limited. Data is encrypted in transit, and every protected action checks that you are allowed to take it.
International transfers
Some of our providers process data outside the UK. Where they do, we rely on the safeguards required by UK data protection law, such as approved contractual clauses.
Cookies
We use a single essential cookie to keep you signed in. We do not use advertising or third-party tracking cookies.
Children
Shortlisted is for people in or entering the workforce and is not intended for children under 16.
Changes to this policy
If we make a meaningful change we will update this page and the date above. Significant changes will be communicated where appropriate.
Contact
For any question about your data, email hello@getaris.app. The data controller is Verdax Limited trading as Verdax Software, registered in England and Wales (company no. 15666366).