Privacy

My Shortlists operates the Service and decides how and why personal information is processed in connection with it.

This Notice applies to personal information we process about visitors, account holders, and other individuals who interact with the Service. It does not apply to third-party websites we link to (for example listing sites), which have their own policies.

Contact for privacy questions and requests: hello@myshortlists.com. Website: https://myshortlists.com.

Account and identity information. Email address; basic profile metadata needed to create and maintain an account; optional Google account identifiers and profile information you authorize if you use Google sign-in.

Deal and underwriting information. Property addresses, listing URLs, MLS numbers when provided, rents, prices, taxes, insurance, unit mix, assumptions, shortlist names, rankings, verdicts, comments, and Excel or other exports generated from that data.

Payment and billing information. Stripe customer identifiers, payment-method references, invoices/receipts metadata, and deal-usage or subscription billing events needed to charge for confirmed paid runs. Full payment card numbers are collected and stored by Stripe, not on our application servers.

Communications. Support emails or other messages you send us, and our responses.

Technical and usage information. Internet Protocol (IP) address, device/browser type, approximate location derived from IP, pages or features used, timestamps, referring URLs, and diagnostic logs. Our hosting provider may process similar logs to operate and secure the Service.

Cookies and similar technologies. We may use cookies, local storage, or similar technologies that are necessary for authentication, session security, and basic product operation. We do not currently operate third-party advertising trackers on the app. If we add analytics or marketing cookies later, we will update this Notice and any required consent or disclosure mechanisms.

Sources. Information you provide directly; information from your Google account if you choose Google sign-in; information from public listing pages we fetch server-side to help pre-fill fields; information from processors listed below acting on our behalf.

We do not sell personal information for monetary consideration in the ordinary course of operating the Service, and we do not use your deal-analysis activity to serve third-party advertising.

We do not request Social Security numbers, government identity documents, or bank account / routing numbers through the Service.

We do not receive passwords for Zillow, Redfin, or other listing sites. Server-side fetching of public listing pages is used only to assist data entry.

We do not knowingly collect personal information from children under 13 (see “Children”).

Provide, operate, maintain, and improve the Service (accounts, shortlists, underwriting results, deal pages, downloads).

Authenticate users, maintain sessions, and keep accounts secure.

Process free-trial and paid usage, confirm pre-run charges where required, and prevent fraud or abuse.

Communicate with you about the Service, security, billing, and support.

Comply with law, enforce terms, and protect rights, safety, and property of My Shortlists, users, and others.

Create aggregated or de-identified insights that do not reasonably identify you, for product improvement and business reporting.

Depending on where you live, we may rely on one or more of: (a) performance of a contract with you (providing the Service you request); (b) our legitimate interests in operating a secure, reliable product, where those interests are not overridden by your rights; (c) consent where required (for example certain cookies or optional integrations); and (d) compliance with legal obligations.

Service providers / processors. We share personal information with vendors that help us run the Service, under arrangements that limit their use of the data to providing services to us:

Supabase — authentication and database hosting for accounts, shortlists, and analysis results.

Stripe — payment processing and related billing records.

Vercel — application hosting, delivery, and related infrastructure logs.

Google — optional OAuth sign-in when you choose to connect a Google account.

Legal and safety. We may disclose information if we believe in good faith that disclosure is required by law, legal process, or government request, or to protect rights, safety, or security.

Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to this Notice or a successor notice.

With your direction. We may share information when you ask us to (for example sending an export you generate to yourself).

We do not sell your personal information for money. We do not share personal information for cross-context behavioral advertising as those terms are commonly used under California law, based on our current product design. If that changes, we will update this Notice and provide any required opt-out controls.

We and our processors may process personal information in the United States and other countries. Those countries may have different data-protection laws than your home country. Where required by applicable law, we use appropriate safeguards for cross-border transfers.

We retain account, shortlist, and analysis data for as long as your account remains active and as needed to provide the Service, unless you delete shortlists or we delete your account sooner.

Billing and payment records may be retained longer as required for tax, accounting, dispute, and legal compliance purposes.

Technical logs are typically retained for a shorter operational period, then deleted or aggregated, unless needed for security investigations or legal obligations.

You may delete individual shortlists in the product. To request deletion of your account and associated personal information, email hello@myshortlists.com. We will verify the request and complete deletion or anonymization within a reasonable period, subject to legal retention needs.

We use administrative, technical, and organizational measures designed to protect personal information, including HTTPS in production, separation of customer data in the application database, and keeping payment secrets on the server rather than in the browser.

No method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your login credentials and for activity under your account.

Depending on where you live (including certain U.S. states and, if applicable, the EEA/UK), you may have rights to request access, correction, deletion, portability, restriction, or objection to certain processing, and to appeal a denial of a request where required by law.

To exercise privacy rights, email hello@myshortlists.com with “Privacy request” in the subject line and enough detail for us to verify you and locate your account. We will not discriminate against you for exercising rights available under applicable law.

You may edit deal inputs and delete shortlists you own. You may decline optional Google sign-in and use email/password instead (where available).

You may manage payment methods through Stripe’s hosted flows where offered. Stopping confirmed paid runs stops new billable usage under our pricing rules.

Browser controls can block some cookies; blocking essential cookies may affect sign-in or core features.

California and other U.S. state privacy rights. Residents of California and certain other U.S. states may have additional rights regarding personal information, including the right to know categories collected, delete, correct, and opt out of sale/share of personal information. Categories we collect are described in Section 2. We do not currently sell or share personal information for cross-context behavioral advertising. Authorized agents may submit requests as permitted by law, subject to verification.

My Shortlists is intended for adults researching real estate investments. We do not knowingly collect personal information from children under 13. If you believe a child provided personal information, contact hello@myshortlists.com and we will take appropriate steps to delete it.

The Service may link to or fetch data from third-party sites (including listing platforms). Their privacy practices are governed by their own policies. We are not responsible for third-party practices.

We may update this Notice from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice (for example in-product or by email). Continued use of the Service after an update becomes effective means you accept the revised Notice, to the extent permitted by law.

Unless a different governing law is required by applicable statute, this Notice is governed by the laws applicable to the operation of the Service in the United States, without regard to conflict-of-law rules that would require another jurisdiction’s law. Venue and dispute procedures for disputes about the Service are as set out in our Terms of Use when published; until then, disputes will be handled in courts of competent jurisdiction in the United States.

Privacy and data-protection requests: hello@myshortlists.com.

General support: hello@myshortlists.com.

Website: https://myshortlists.com.