Política de Privacidade

1. Who we are

SortlyAI is a personal library for the things you save: web pages, notes, files, voice notes and meeting recordings, organized and searchable with AI. It is available as a website, a web dashboard, a browser extension and apps for Mac, iPad and iPhone. This policy covers all of them.

The data controller responsible for your personal data is CodeTickler Labs. For anything about your data, write to support@sortlyai.app.

2. What we collect

2.1 What you give us

• Account: your email address, name, password (stored hashed, never readable by us) and, if you sign in with Google or GitHub, the basic profile they share (email, name, picture).
• Your library: everything you save. That means bookmarks (address, title, description, page snapshots), notes, uploaded files and the text extracted from them, voice notes and meeting recordings with their transcripts, highlights, tags, collections, and your settings and AI instructions.
• Forwarded emails: if you use save by email, the emails you forward, including their senders and content.
• Payments: handled by Stripe. We receive your plan and billing status, never your card number.
• Messages to us: feedback and support emails you send.

2.2 What we collect automatically

• Server logs: IP address, browser type, the address requested and the time, for security and troubleshooting.
• Usage counters: how many AI actions, voice minutes and how much storage you have used, so we can apply your plan's limits.
• Usage statistics: we count page views and a few actions (such as signing up) with Umami, which sets no cookies and stores no personal identifiers. You can switch it off in the dashboard under Settings, Data & privacy.
• Sign-in storage: your browser keeps your login session so you stay signed in. We use no advertising or tracking cookies.

2.3 The browser extension

The extension saves a page, link, image or highlight only when you ask it to. It has an optional feature, page lookup, that shows whether your library already knows the page you are on. It is off until you turn it on. While it is on, the extension sends the address and title of each page you open to our server to check it against your own library. It skips private and incognito windows, and we do not store these lookups. You can turn it off at any time in the extension's settings.

2.4 Recordings of other people

Meeting recordings and forwarded emails can contain other people's voices and details. You are responsible for having the right to record or share them, for example by telling people in a meeting that you are recording. We process this data only to provide the service to you.

3. Why we use it, and on what legal basis

• To provide SortlyAI (storing, organizing, searching and syncing your library, and the AI features you use): performance of our contract with you (GDPR Art. 6(1)(b)).
• Billing and plan limits: contract (Art. 6(1)(b)).
• Service emails (sign-in, security, receipts, your trial ending): contract, and our legitimate interest in keeping you informed about your account (Art. 6(1)(f)). You can unsubscribe from trial and plan reminders with the link in each email.
• Security, abuse prevention and server logs: our legitimate interest in keeping the service safe (Art. 6(1)(f)).
• Usage statistics: our legitimate interest in understanding which parts of SortlyAI are used, measured without cookies or identifiers (Art. 6(1)(f)).
• Extension page lookup: your consent (Art. 6(1)(a)), which you give by turning it on and withdraw by turning it off.
• Tax and accounting records: legal obligation (Art. 6(1)(c)).

We do not sell your data, show ads, or use your library to profile you.

4. AI processing

When an AI feature runs on an item (for example a summary, suggested tags, a transcription, or an answer in Ask your library), the relevant content is sent to OpenAI or Anthropic to produce the result. Under their API terms, they process it on our behalf and do not use it to train their models. AI suggestions are shown to you; nothing is published or shared.

5. Who receives your data

We use these service providers (processors). Each is bound by a data processing agreement and may only use your data to provide their service to us.

We also disclose data if the law requires it, and it would pass to a buyer if SortlyAI were sold, under the same protections. When you create a share link for an item, anyone with that link can see that item until you revoke it.

6. International transfers

We are based in the United Kingdom, and your library is stored in the EU. Some providers above process data in the USA. Those transfers are protected by the EU-U.S. Data Privacy Framework and its UK extension, or by the European Commission's Standard Contractual Clauses with the UK Addendum, as applicable. The UK and the EU recognise each other's data protection as adequate. You can ask us for a copy of the relevant safeguards at support@sortlyai.app.

7. How long we keep it

• Your library and account: for as long as you keep your account. Items you delete are removed from your library straight away.
• When you delete your account: your data and files are deleted immediately, any paid subscription is cancelled, and remaining copies disappear from our backups within 30 days.
• Server logs: up to 90 days.
• Invoices and payment records: kept by Stripe and us for as long as tax law requires (up to 10 years).

8. Your rights

Under the UK GDPR and the EU GDPR you have the right to:

• Access your data and take it with you: Settings, Export everything downloads your whole library in open formats.
• Correct it: edit anything in the app, or ask us.
• Delete it: Settings, Delete Account erases everything immediately.
• Restrict or object to processing based on legitimate interests.
• Withdraw consent at any time, without affecting what happened before.

For anything you can't do in the app, write to support@sortlyai.app. We reply within one month. You also have the right to complain to a data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the authority in the country where you live or work.

9. Security

Data is encrypted in transit (TLS) and at rest. Every account's data is isolated at the database level, files are private and reachable only through short-lived links, and access to production systems is limited to the people who run the service. If a breach puts your data at risk, we will tell you and the authorities as the law requires.

10. Children

SortlyAI is not meant for anyone under 16. We do not knowingly collect data from children. If you think a child has given us data, write to support@sortlyai.app and we will delete it.

11. Changes to this policy

When we change this policy, we update the date at the top. If a change matters for how we use your data, we tell you by email or in the dashboard before it takes effect.

12. Contact

CodeTickler Labs
support@sortlyai.app