Privacy Policy for Sortd

1. Overview

Sortd is a Gmail organization service that helps users label unread Gmail messages using their existing Gmail labels.

To provide this service, Sortd accesses unread Gmail messages, temporarily processes message content to classify messages, and applies labels in the user’s Gmail account. Sortd is designed to minimize data retention and data sharing. Sortd does not store email body content, attachments, or persistent copies of subject lines. Sortd stores only the minimum data needed to operate the service, including message IDs and applied label information.

2. Who We Are

If you have questions about this Privacy Policy or our data practices, contact:

Email: chrisinthemovies@gmail.com
Website: sortd.tech

3. Gmail Data We Access

When a user connects a Gmail account to Sortd, Sortd may access the following Gmail data:

• Unread email message content
• Email subject lines
• Sender information
• Message metadata made available through the Gmail API
• Existing Gmail labels and label identifiers

Sortd accesses this data solely to determine which of the user’s existing Gmail labels should be applied to unread messages.

4. Google OAuth Scopes We Request

Sortd requests the following Google OAuth scopes:

• https://www.googleapis.com/auth/gmail.readonly
• https://www.googleapis.com/auth/gmail.labels

These scopes are used as follows:

• gmail.readonly: allows Sortd to read unread Gmail messages so they can be classified
• gmail.labels: allows Sortd to read and apply Gmail labels

Sortd does not request broader Gmail permissions than are needed for this functionality.

5. How We Use Gmail Data

Sortd uses Gmail data only to provide the user-facing functionality of the service, specifically:

• Reading unread Gmail messages
• Determining which existing Gmail label best fits a message
• Applying that label in the user’s Gmail account
• Tracking which messages have already been processed to avoid duplicate labeling

Sortd does not use Gmail data for:

• Advertising
• Sale of data
• Building marketing profiles
• Training generalized AI or machine learning models
• Any purpose unrelated to the user-facing functionality of Sortd

6. AI Processing

Sortd uses Google Gemini AI to analyze unread message content and determine which of the user’s existing Gmail labels should be applied.

Sortd chose Gemini specifically to minimize data spread. Email content processed for classification remains within Google’s ecosystem rather than being sent to an unrelated third-party AI provider.

Email content is processed only for the time needed to classify the message. Sortd does not store email content after processing.

7. What Sortd Stores

Sortd stores only the minimum information required to operate the service. This may include:

• User account identifier or email address
• OAuth connection and token data
• Gmail message IDs
• Label names or label identifiers
• Records of which label was applied to which message
• Limited technical logs for security, debugging, and service reliability

8. What Sortd Does Not Store

Sortd does not store:

• Email body content
• Attachments
• Persistent copies of subject lines
• Persistent copies of sender or recipient message content
• Archived copies of users’ inboxes

Email content is handled temporarily during active processing only and is not retained by Sortd after classification is complete.

9. Third-Party Services and Data Sharing

Sortd uses the following service providers to operate the service:

Google

Used for:

• Gmail API access
• OAuth authentication
• Gemini AI processing

Privacy Policy: https://policies.google.com/privacy

Supabase

Used for:

• Database and backend infrastructure

Privacy Policy: https://supabase.com/privacy

Sortd does not sell user data.

Sortd does not share Gmail content with data brokers or advertisers.

Sortd does not send Gmail content to unrelated third-party AI providers for classification.

10. Data Retention

Sortd retains stored account and processing data only as long as necessary to provide the service.

This may include:

• Account and connection data while the account is active
• Message ID and label assignment records while needed for service functionality
• Technical logs for a limited time for security and operational purposes

If a user deletes their account or requests deletion, Sortd will delete stored personal data within 7 days, except where retention is required by law or necessary for security or fraud prevention.

Email content is not retained by Sortd after active processing.

11. Security

Sortd uses reasonable administrative, technical, and organizational safeguards to protect user data, including:

• Encryption in transit using HTTPS/TLS
• Secure handling of OAuth credentials
• Access controls for stored data
• Data minimization practices
• Use of established infrastructure providers such as Supabase

12. User Controls

Users may:

• Revoke Sortd’s Gmail access at any time through their Google account permissions
• Request deletion of their Sortd account and stored data
• Stop using the service at any time

To request deletion or ask privacy-related questions, contact chrisinthemovies@gmail.com.

13. Compliance with Google API Services User Data Policy

Sortd’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• Gmail data is used only to provide or improve user-facing features requested by the user
• Gmail data is not used for advertising
• Gmail data is not sold
• Gmail data is not used to train generalized AI or machine learning models
• Gmail data is not transferred to third parties except as necessary to provide and secure the service in accordance with this Privacy Policy

14. International Users

If you access Sortd from outside the country where Sortd or its service providers operate, your information may be processed in other jurisdictions. Where required, Sortd will use appropriate safeguards for international data transfers.

15. Children’s Privacy

Sortd is not intended for children under 13, or the minimum age required in the user’s jurisdiction. Sortd does not knowingly collect personal information from children.

16. Changes to This Privacy Policy

Sortd may update this Privacy Policy from time to time. If material changes are made, Sortd will update the “Last Updated” date and may provide additional notice where appropriate.

17. Contact

If you have questions about this Privacy Policy or would like to request deletion of your data, contact:

Sortd
Email: chrisinthemovies@gmail.com
Website: sortd.tech