Privacy Policy

This Privacy Policy explains what information Shortlist collects when you use our Instagram DM concierge, result pages, and Shortlist accounts. It covers how we use that information, who we share it with, how long we keep it, and how you can delete it. Shortlist is operated by SignatureLook, Inc. (dba Shortlist / wearshortlist) (“Shortlist,” “we,” “us”).

The sections cover Instagram messages, your account, result links, how long we keep data, and how to delete your data. See our Terms of Service for the rules of using the service.

What we collect through Instagram

When you share a reel, post, image, or message with @wearshortlist, we identify the garments in it and reply with shopping links for those items or similar ones. Meta’s Instagram Messaging API delivers your messages to us. We collect the following information:

• The text you send.
• Copies of the images and screenshots you send, and the links and metadata of the reels and posts you share.
• Your Instagram-scoped sender ID, your Instagram username, and message timestamps.
• The products we find for each request, the replies we send, the shopping links you tap, and the match feedback you give.

We do not ask for your Instagram password, and we never see your Instagram login.

Your Shortlist account

A Shortlist account keeps your saved finds in one place. It can hold more than one Instagram account, and you can sign in through any of them. You create the account, and sign in on each new device, through your Instagram conversation with @wearshortlist. If you start from a result page in the first browser that opened that result link, and you messaged @wearshortlist in the last 24 hours, you sign in by tapping the confirmation that @wearshortlist sends in your Instagram conversation. Otherwise, the website shows a number and asks you to send it in your Instagram conversation. After you send the number, @wearshortlist may also ask you to tap a confirmation. We use that message only to approve the sign-in. Shortlist accounts have no password, and we do not ask for your email address. We send no account email.

Your account holds the following information:

• The Instagram-scoped sender ID and Instagram username of each Instagram account on it, connected or not. We keep them after you disconnect that Instagram account.
• Your past results from each connected Instagram account. We import them when you create your Shortlist account or connect that Instagram account. Each time you sign in through that Instagram account, we also add any results sent to it since the last import.
• Your saved finds. We save each new result to your account automatically. You can save a result only to the Shortlist account connected to the Instagram account that sent it. A saved find holds the products we found, with their shopping links, prices, and alternatives. It also holds your match feedback. A saved find from your own message also holds the original image or screenshot you sent.

We also store a cookie on each device you sign in with, so that the device stays signed in. On account, result, and share pages, we also store a cookie that lets Save and sign-in work in your browser and links your browser to a result when you save it, sign in from it, open it in the in-app browser of Instagram or another Meta app, or continue it in another browser. That cookie lasts 10 minutes, and starting sign-in restarts the 10 minutes. When you open a result link, we also store a cookie that lets us recognize the first browser that opened that link. We keep that cookie for up to 400 days. When you are signed in, you can see the original images in your saved finds. To show one, we create a temporary link to the image. Anyone who has that link can open the image until the link expires. Your result links also show the image you sent. See Result links.

To prevent abuse, we use your IP address to limit how often requests can be made. We store only a one-way digest of it and delete it within two hours.

Connecting another Instagram account

While you are signed in, you can connect another Instagram account on the website. The website shows a number, and you send that number to @wearshortlist from the Instagram account you are adding. @wearshortlist may also ask that Instagram account to tap a confirmation, and the website may then ask you to approve the connection. When an Instagram account connects, we import its past results into your Shortlist account.

When an Instagram account asks to connect to your Shortlist account or join it, @wearshortlist may message each Instagram account connected to yours. The message names the Instagram account that asked. For a join, it also says how many saved finds would move, if there are any. Meta lets us send it only within 24 hours of that connected Instagram account’s last message to @wearshortlist. Before you approve, the website shows the same details. For a join, it also names the other account’s connected Instagram accounts. Our messages to the Instagram account that asked may name the first Instagram account connected to your Shortlist account.

You can disconnect an Instagram account, unless it is the last one connected to your Shortlist account. We then stop saving its new results, and finds it already saved stay in your account. Signing in with it later connects it again and adds the results sent to it while it was disconnected.

Joining two Shortlist accounts

If the Instagram account you connect has its own Shortlist account, connecting it can join the two accounts. A join needs approval from both accounts. The Instagram account you are adding taps Confirm on the join message from @wearshortlist, and you tap Join accounts on the website. If the other Shortlist account cannot be joined, the Instagram account does not connect, and nothing moves.

When the accounts join, we move the following from the other account to yours:

• Its saved finds, with their original images, match feedback, and shopping link taps.
• Its Instagram accounts, including ones it disconnected. You can then sign in to your account through each of them.
• Its signed-in browsers. They stay signed in, now to your account.

We do not make copies. If both accounts saved the same result, we keep one saved find for it. We delete the other saved find, with its original image, match feedback, and shopping link taps. The other Shortlist account then closes. You cannot undo a join or restore the closed account. If you delete your account later, we delete everything that moved into it.

Result links

Each result we send on Instagram includes a link to your result page. The page shows the products we found, the image you sent, and your Instagram username. If you shared a reel or post, the image is a frame from it. The page does not show your other results.

Anyone with the link sees the same page, including someone you forward it to. They see the image you sent and your Instagram username, and they can leave match feedback. Feedback sent through a link does not tell us who sent it.

A result link does not expire. It works until you unsend your message, remove the saved find for that result, or delete your account. We remove the image you sent from the page sooner if you remove the original image from that saved find. We also remove it if you DM “delete my data” to @wearshortlist.

You can also create a share link from a result page or a saved find. A share link shows the products only. It does not show the image you sent, your Instagram username, or your feedback. No one can leave feedback through a share link. A share link stops working when the result link or saved find it came from stops working.

Holding a result link does not give access to anyone’s account or other results. Saving from a result page creates an account only after you confirm in your Instagram conversation with @wearshortlist.

How we use information

• To answer your requests with shopping links.
• To show your result pages and saved finds.
• To create your account, sign you in through Instagram, connect Instagram accounts, join accounts, and handle deletion requests.
• To improve our recommendations, using shopping link taps and match feedback.
• To operate, maintain, debug, and secure the service.

Who we share it with

To answer a request, we pass the relevant parts of your message to the providers that do that work:

• Meta (Instagram Platform) delivers your messages to us and our replies to you.
• Google / SerpApi runs product and image searches.
• Google Gemini analyzes the media you share to identify garments.

We also use a cloud provider for hosting and storage. We do not sell your data or share it for advertising. We may disclose information if the law requires it or to protect the safety and integrity of the service.

How long we keep your data

We keep your data until you ask us to delete it. That includes your Instagram messages, the media you send, your original screenshots, your results and feedback, the shopping links you tap, and your saved finds. We do not delete this data after a set period. We keep your account information while you have an account.

How to delete your data

You can delete your data in five ways:

• DM “delete my data” to @wearshortlist. We delete the messages, media, results, feedback, and shopping link taps stored with your Instagram conversation. Result links we already sent keep working. They show a saved copy of the products and can still show your Instagram username, but they no longer show the image you sent. To turn them off and delete your account and saved finds, use Delete my account. To turn off one link, unsend its message.
• Delete your account. In your account settings, choose Delete my account. If you have not signed in recently, you sign in again first. We sign you out on every device and delete your account, your saved finds, and their original images. We also turn off the result links for the conversations of every Instagram account on your Shortlist account, connected or not, and delete the data stored with those conversations.
• Email support. Write to privacy@wearshortlist.com with enough detail for us to find your account or conversation. We confirm that the account or conversation is yours before we delete it.
• Remove a saved find. You can remove only the original image and keep the products. You can also remove the whole saved find. Either way, we delete its original image, if it has one. If the saved find came from your own message, removing the original image also removes the image you sent from the result link for that message. Removing the whole saved find turns off that link. You have 30 seconds to undo either removal.
• Unsend a message on Instagram. We delete the media, results, and saved find from that message. We also turn off the result link for that message.

After you delete your account, you get a status link that shows whether the deletion is pending, failed, or complete. The status link cannot open your account or your saved finds.

Deleting data from Shortlist does not delete your messages from Instagram. Meta keeps your Instagram conversations under its own policies. Some records can remain in routine backups until we replace those backups on their normal cycle.

Data security

We use reasonable technical and organizational measures to protect the data we hold, including encrypted transport and access controls that limit who can reach your data. No method of transmission or storage is perfectly secure.

Children’s privacy

Shortlist is intended for users aged 13 and older, consistent with Instagram’s own requirements, and some features may be limited to users 18 and older. We do not knowingly collect data from children under 13. If you believe a child under 13 has messaged us, contact us and we will delete the associated data.

Changes to this policy

We may update this Privacy Policy as the service evolves. When we publish an updated policy, we change the “Last updated” date at the top of this page, and the updated policy takes effect on that date. We reflect material changes on this page.

Contact

Questions about your information or deletion? Email privacy@wearshortlist.com or DM @wearshortlist. Return to our Terms of Service.