Legal
Privacy
Last updated October 28, 2026
What we collect
Only what the product needs: your practice name, website, city and state, the treatment you want patients for, your first name and email, and the standard attribution parameters that tell us which ad or link brought you here.
What we do not collect
We do not collect, process or store patient health information. We never ask a practice to upload patient records, and we have no use for them. This product analyses public-facing business information and business facts the practice supplies about itself.
We do not ask for, and will not accept, passwords or account credentials pasted into a prompt or a form.
What we store
The answers AI platforms returned to our prompts, the prompts themselves, and the public sources those answers cited. This evidence is retained so that any conclusion in a report can be checked later — by you, or by us, in a dispute.
Who we share it with
The AI platforms we query receive the prompt text, which contains your city and treatment and — in the treatment prompts — no identifying information about you as a person. Payment is processed by Stripe, who receive what they need to take a payment. Transactional email is sent through our email provider. We do not sell your information. The measurement tools described under Cookies receive what those tools collect about your visit, and nothing you type into the check.
Your choices
Email privacy@aestheticshortlist.com to get a copy of what we hold about you, correct it, or have it deleted. Deleting your data removes your reports.
Cookies
We use browser storage to remember which ad or link brought you here and to keep your place in the check. We also use three measurement tools. The Meta Pixel tells Meta that a visit, a completed check or a purchase came from one of our ads, so we can see which ads work. Microsoft Clarity records how visitors scroll and click on our pages, with form fields masked, so we can see where the site is unclear. Cloudflare Web Analytics counts page views without cookies. None of them receives what you type into the check.