Privacy Policy

1. Who We Are

Sorted ("Sorted," "we," "us," or "our") is an AI-powered email triage service operated by Sorted Technologies. Our service automatically classifies your inbox, archives low-priority messages, and delivers a daily digest of what matters. We can be reached at privacy@trysorted.app.

2. Information We Collect

We collect different information depending on whether you're on the waitlist or a full account user:

• Waitlist: Only your email address. We use this to notify you when Sorted launches and to send occasional product updates.
• Account users (post-launch): Your email address, name from your Google account, and a Gmail OAuth refresh token that allows us to read your inbox on your behalf.
• Usage data: Aggregate counts like number of emails classified and digest delivery status (no message content stored).

We do not collect payment information directly — billing is handled by our payment processor (Stripe).

3. How We Use Your Gmail Data

This is the most important section. Here is exactly what we do with your Gmail data:

• We read your incoming messages via the Gmail API (read and modify scope).
• We classify each message using AI — signal, noise, or newsletter — in memory.
• We archive low-priority messages on your behalf using the Gmail API.
• We summarize important messages for your daily digest.
• We do not store the content of your emails. Message body text is processed in memory and discarded immediately after classification.
• We do not sell, share, or train models on your email content. Your inbox is yours.

4. AI/ML Model Training Disclosure

Sorted uses artificial intelligence to classify and summarize your email content. Here is exactly how AI is used and — equally important — how it is not used:

• Real-time processing only. Your email content is sent to Anthropic's API solely to classify and summarize messages for your digest. It is processed in memory and discarded immediately after.
• No model training. Sorted does not use your Gmail data — or any data obtained via Google APIs — to train, improve, fine-tune, or build generalized AI or machine learning models. This applies to both Sorted's own systems and any third-party AI providers we use.
• Anthropic's commitment. Anthropic does not use data submitted via its API to train its models. See the Anthropic Privacy Policy.
• No human review. Your email content is never reviewed by humans at Sorted for model improvement, quality assurance, or any other purpose.

Your Gmail data is used exclusively to deliver the Sorted service to you. Full stop.

5. How We Use Your Information

We use collected information to:

• Operate and improve the Sorted service
• Deliver your daily email digest
• Send product updates and launch notifications (waitlist)
• Respond to support requests
• Comply with legal obligations

We do not use your email address for advertising or sell it to third parties.

6. Third-Party Services

We use the following third-party services to operate Sorted:

• Upstash (Redis) — Stores your account metadata (email address, preferences, digest schedule) and OAuth tokens. Upstash is SOC 2 compliant. See Upstash Privacy Policy.
• Resend — Delivers your daily digest email. Resend receives your email address and digest content only. See Resend Privacy Policy.
• Anthropic — Processes email metadata (subject lines, sender addresses) for AI classification. Message body text may be sent to Anthropic's API for classification. Anthropic does not use API data to train models. See Anthropic Privacy Policy.
• Vercel — Hosts our web application and API endpoints. See Vercel Privacy Policy.
• Google — OAuth authentication and Gmail API access. Governed by Google's Terms of Service and Privacy Policy.

7. Data Retention

We retain data for as long as your account is active or as needed to provide services:

• Waitlist email addresses: Until you unsubscribe or request deletion.
• Account data: Until you delete your account.
• Digest history: 3 days rolling window (for de-duplication), then automatically deleted.
• Email message content: Never stored — processed in memory only.

8. Your Rights and Controls

You have the following rights regarding your data:

• Access: Request a copy of the data we hold about you.
• Deletion: Request deletion of your account and all associated data by emailing privacy@trysorted.app. We'll process deletion within 7 business days.
• Revoke Gmail access: Revoke Sorted's access to your Gmail at any time via Google Account Permissions. This immediately stops all processing.
• Unsubscribe: Every email from us includes an unsubscribe link.
• Portability: Request your data in a portable format.

9. Security

We take security seriously. OAuth tokens are encrypted at rest in Upstash Redis. All data in transit is encrypted via TLS. We use principle of least privilege — API routes only access the data they need. We do not store Gmail credentials or passwords.

No system is 100% secure. If you discover a security vulnerability, please report it to privacy@trysorted.app.

10. Children's Privacy

Sorted is not directed at children under 13. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we'll notify you via email (if you're a registered user) or by posting a notice on our site. The "Last updated" date at the top of this page reflects when the policy was most recently changed.

12. Contact

For privacy-related questions, requests, or concerns, contact us at:

privacy@trysorted.app
Sorted Technologies
Illinois, USA