Sortd
← Back to Home

Privacy Policy

Last updated: October 2026

1. Information We Collect

Account data. Your name, email address, and company name when you request access, create an account, or are invited to an organisation.

Customer content. Content you or your end users submit to Sortd: support tickets and conversations, attachments and screenshots, knowledge base articles, and monitoring and error reports.

Connected repositories. If you connect a GitHub repository, we retrieve its source code and commit history to build your knowledge base, generate tools, and ground answers and bug investigations.

Usage data. Pages visited, features used, browser type, and IP address, which we use to diagnose issues and prevent abuse.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve Sortd
  • Process support tickets and investigate bugs through our AI agent
  • Send you service notifications and, where permitted, product updates
  • Monitor and analyze usage trends
  • Protect against fraud and abuse

3. Data Processing & AI

Sortd uses AI models to analyze support tickets, search knowledge bases, and propose code fixes. Your content is sent to our AI model providers only to produce the response you asked for. We do not use your content to train AI models, and we use providers only under terms that do not permit them to train on it.

AI-proposed code changes always require human review and approval before anything is written to your repository.

4. Source Code

When you connect a repository, we analyze it in an isolated, temporary sandbox and store a copy of the source files needed to answer questions about it, together with derived data such as a structural manifest, generated knowledge base articles, and search indexes. The copy is stored in encrypted object storage and is scoped to your application; it is not shared with other customers. Binary and media files are not stored. You can disconnect a repository at any time, and you can ask us to delete the stored copy and derived data.

5. Connecting Sortd to AI Assistants (MCP)

You can connect Sortd to third-party AI assistants and coding agents, such as Claude, ChatGPT, Cursor, or Gemini CLI, using the Model Context Protocol (MCP). Access uses OAuth: you sign in to Sortd and approve a specific organisation and set of permissions for that assistant. We never receive your password for those services, and Sortd never gives the assistant secrets such as API keys directly; they are shown to you through a short-lived, one-time link.

When an assistant calls a Sortd tool, we act with your permissions in the organisation you approved, and we record the call in an audit log. The data a tool returns is sent to that assistant and is then handled under the assistant provider's own terms and privacy policy, which we do not control. You can revoke an assistant's access at any time by removing the connector in the assistant or by contacting us, and OAuth tokens expire automatically (access tokens after one hour).

6. Data Sharing & Service Providers

We do not sell your personal information. We share data only with service providers who help us operate the platform, and only as needed to provide the service. These include providers of cloud hosting and content delivery, database and object storage, vector search, AI model inference, sandboxed code execution, email delivery, and GitHub for repository access. A current list is available on request.

We may also disclose information if required by law or to protect the rights and safety of Sortd, our customers, or others.

7. Data Security & Retention

Data is encrypted in transit (TLS 1.2+) and at rest. Access is isolated per organisation and application, credentials are stored hashed or encrypted, and we review our infrastructure for vulnerabilities.

We retain your data while your account is active. When you delete content or close your account, we delete or anonymise the associated data within a reasonable period, except where we must keep it to meet legal obligations.

8. Your Rights

You may request access to, correction of, export of, or deletion of your personal data at any time by contacting us at the address below. We will respond within 30 days.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or through the service.

10. Contact

For privacy-related inquiries, reach us at privacy@sortd.dev.