Privacy Policy

1. Overview

ShortList (“we,” “our,” or “us”) respects your privacy. This Privacy Policy explains how we collect, use, and protect information about you when you use ShortList at slist.me or via our mobile app.

2. Information We Collect

• Account information: Name, email address, and optionally phone number when you sign up.
• Contact information: Name, phone, and email of contacts added by list hosts.
• Event data: Event names, dates, locations, and invitation responses.
• Usage data: How you interact with the Service, including log data and device information.

3. How We Use Your Information

• To provide, operate, and improve the Service.
• To send SMS and email event invitations on behalf of list hosts.
• To process subscription payments via Stripe.
• To respond to your requests or questions.
• To comply with legal obligations.

4. SMS and Messaging

If you provide your phone number, you may receive SMS messages from ShortList with event invitations. You can opt out at any time by replying STOP to any message. Opting out of SMS does not affect email communications.

We use Twilio to send SMS messages. Your phone number is shared with Twilio solely for message delivery. We do not sell your phone number or use it for marketing unrelated to events you have been invited to.

5. Sharing of Information

We do not sell your personal information. We share data only with service providers necessary to operate the Service:

• Clerk — authentication and user account management.
• Supabase — database hosting.
• Twilio — SMS delivery.
• SendGrid — email delivery.
• Stripe — payment processing.
• Stream — in-app group chat.

Each provider is bound by their own privacy policies and data processing agreements.

6. Data Retention

We retain your data as long as your account is active. You may request deletion of your account and associated data by contacting us at support@slist.me.

7. Security

We use industry-standard security practices including encrypted connections (HTTPS), secure authentication via Clerk, and access controls on our database. No method of transmission over the internet is 100% secure.

8. Your Rights

You may request access to, correction of, or deletion of your personal data. To exercise these rights, contact us at support@slist.me. We will respond within 30 days.

9. Children's Privacy

ShortList is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us to have it removed.

10. Governing Law

This Privacy Policy is governed by the laws of the State of South Carolina, USA.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date above. Continued use of the Service constitutes acceptance of the updated policy.

12. Contact

Questions about this Privacy Policy? Contact us at support@slist.me.