Privacy Policy

1. Introduction

Sorters (hereinafter "the Service") is an automatic document sorting application that integrates with Google Drive. This privacy policy describes how we collect, use and protect your personal data.

2. Data collected

We collect the following data:

• Google account information : your email address, obtained via Google OAuth, and the access tokens needed to act on your Google Drive on your behalf. We do not request your name or profile picture.
• Google Drive files : we access your Google Drive files only as part of the sorting operations you configure. File contents are temporarily analyzed by AI to categorize them.
• Sort descriptions : the text you type into the sort creation assistant. It is sent to the AI service that generates your configuration. When the assistant cannot produce a sort, an excerpt of that text (300 characters at most) is stored in our product analytics tool to improve the assistant.
• Usage and browsing data : Service usage statistics (number of sorts performed, operation history), technical events (pages viewed, browser and operating system, errors encountered, for example while selecting a Google Drive folder) and session recordings. In those recordings, the contents of input fields are masked and the contents of your files never appear.

3. Use of data

Your data is used exclusively to:

• Authenticate you and manage your account.
• Analyze and sort your Google Drive files according to your sorting rules.
• Measure site audience and understand how the Service is used, in order to fix malfunctions and improve the Service.

4. AI processing

The contents of your files are sent to Google's AI service to be analyzed and categorized. The descriptions you type into the sort creation assistant are sent to OpenAI to generate your sorting configuration. Both go through these providers' business APIs: your data is not used to train their models and is retained only for as long as the processing and the security checks set out in their terms require.

Some session recordings may also be analyzed automatically by an AI model, through our product analytics tool, to detect malfunctions of the Service. The contents of your files are never part of that analysis.

5. Data sharing

We do not sell, rent or share your personal data with third parties, except for technical providers required to operate the Service:

• Google : for authentication, access to Google Drive and AI analysis of file contents.
• OpenAI : for the sort creation assistant.
• PostHog : for product analytics, session recordings and audience measurement. Data is hosted in the European Union.
• Google Analytics : for site audience measurement.
• LemonSqueezy : for managing payments and subscriptions.

6. Security

We implement appropriate technical and organizational security measures to protect your data, including encrypted communications (HTTPS), secure authentication via OAuth 2.0, and secure storage of access tokens.

7. Data retention

Your account data is kept as long as your account is active. Sorting history is retained so you can review past operations. Session recordings are kept for 30 days. Other usage data is kept for as long as needed to improve the Service, then deleted or aggregated. You can request deletion of your account and data at any time.

8. Your rights

Under the GDPR, you have the following rights:

• Right to access your personal data.
• Right to rectify your data.
• Right to erase your data.
• Right to data portability.
• Right to object to the processing of your data for product analytics purposes.
• Right to revoke access to your Google Drive at any time from your Google account settings.

9. Cookies and trackers

The site uses cookies and trackers in four categories. Only the first one does not require your consent:

• Necessary cookies : login session, chosen language and memory of your cookie choices. Essential to the site's operation, they are not used for any tracking.
• Audience measurement (Google Analytics, PostHog) : pages viewed, browser used, usage events and errors encountered, to understand how the Service is used and improve it. Cookies _ga (Google) and ph_*_posthog (PostHog, data hosted in the European Union).
• Session recording (PostHog) : replay of your interactions with the Service to diagnose malfunctions, with input field contents masked. Only active if audience measurement is also accepted.
• Marketing attribution (Sorters) : the sorters_attribution cookie, kept for 90 days, which remembers the campaign or site that brought you to Sorters.

On your first visit, a banner lets you accept all, decline all or choose purpose by purpose. No tracker subject to consent is set before you choose. Your decision is kept for 6 months in the ncc_c and ncc_e cookies, after which you are asked again.

You can change or withdraw your consent at any time through the "Manage cookies" link at the bottom of every page. Withdrawing a purpose immediately stops the tracker concerned and deletes its cookies.

10. Contact

For any question relating to this privacy policy or to exercise your rights, you can contact us at: contact@sorters.app.