Your Privacy Choices
US state privacy notice for residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and any other state with comparable rights.
Categories of personal information we collect
The table below describes the categories of personal information we collect, the sources from which it is collected, the business or commercial purpose for which it is used, and the categories of third parties with whom it is shared (CPRA section 1798.130).
Identifiers
- Examples
- Name, email address, IP address, account identifiers, device identifiers, cookies.
- Sources
- Directly from you, from your device when you visit, from authentication providers (Auth0).
- Purposes
- Operate the app, authenticate you, send transactional email, prevent fraud, respond to support requests.
- Recipients
- Auth0, Stripe (for billing), Postmark (for email), Sentry (for diagnostics).
Commercial information
- Examples
- Subscription tier, billing history, products and services purchased.
- Sources
- Directly from you when you subscribe; from Stripe.
- Purposes
- Provide your subscription, take payment, fulfill tax and accounting obligations.
- Recipients
- Stripe, our accountants, tax authorities as required by law.
Internet or other electronic network activity
- Examples
- Pages visited, referring URLs, click attribution parameters (utm_*, gclid, fbclid), session recordings (Clarity).
- Sources
- From your browser. Session recordings only with your analytics consent.
- Purposes
- Understand site usage, measure marketing performance, debug UX issues.
- Recipients
- Google Analytics 4, Microsoft Clarity, Vercel Analytics, Meta (Pixel), Rewardful (affiliate attribution). Only after you consent.
Inferences drawn from other personal information
- Examples
- Persona segments (such as legal professional, researcher) derived from referrer and click patterns.
- Sources
- Internally derived from the categories above.
- Purposes
- Personalize on-site content, prioritize feature roadmap.
- Recipients
- Used internally only; not sold or shared with third parties for cross-context behavioral advertising.
Content you process through the app
- Examples
- Filenames, folder paths, sort prompts. File contents only if you enable content-sorting features.
- Sources
- From your device when you run a sort.
- Purposes
- Provide AI sorting, entity extraction, and chat assistance.
- Recipients
- OpenAI (default LLM provider), Anthropic (if you select it via BYOK), or your local Ollama instance (no transit).
Your rights
- Right to Know what personal information we collect, use, disclose, and share.
- Right to Delete personal information we hold about you.
- Right to Correct inaccurate personal information.
- Right to Opt-Out of the sale or sharing of personal information (including cross-context behavioral advertising).
- Right to Limit the use and disclosure of Sensitive Personal Information.
- Right to Non-Discrimination for exercising your privacy rights.
We honor browser-level Global Privacy Control (GPC) signals as a valid opt-out of sale and sharing for the device used. To exercise the rights to know, delete, or correct, visit our Privacy Requests page.
Opt out of sale and sharing
Submit the form below to opt out of cross-context behavioral advertising and any sale or sharing of your personal information with third-party advertising partners. We also turn off non-essential analytics and marketing cookies on this browser. Providing an email is optional. If you provide one, we will also suppress server-side tracking on accounts associated with that email.
Contact
Privacy contact: marcus@getsortio.com. Authorized agent requests are accepted; we may require documentation of authority and identity verification.