Privacy Policy

Effective date: April 26, 2026 · Version 1.0

    Sortie is designed to keep your email private. We do not store your email content. Email subjects and snippets are sent to an AI service only for classification, then discarded.
  

1. What Sortie does

Sortie connects to your Gmail account via Google's official OAuth2 API. It scans your inbox to identify senders with unlabeled emails, uses AI to suggest labels, and creates Gmail filters on your behalf — all within your own Google account.

2. Data we collect

Your email address — used to identify your account within Sortie.
Filter history — a log of which Gmail filters you've created through Sortie (sender → label mappings and dates). This does not include email body content.
Email subjects and snippets — short previews of emails are sent to the Claude AI API (Anthropic) for sender classification. These are not stored by Sortie after classification.

3. Data we do NOT collect

Full email body text or attachments
Email recipient lists or CC/BCC fields
Passwords or Google account credentials (OAuth tokens are stored in your browser session only)
Any data from emails outside Gmail (other providers not yet supported)

4. Third-party services

Google Gmail API — used to read your inbox, create filters, and apply labels. Governed by Google's Privacy Policy.
Anthropic Claude API — email subjects and sender names are sent here for AI classification. Governed by Anthropic's Privacy Policy.
Vercel — hosts the Sortie web application. Governed by Vercel's Privacy Policy.

5. How we use your data

We use your email address solely to identify your Sortie account. Filter history is used to display your history within the app and to enable undo functionality. We do not sell, share, or use your data for advertising.

6. Data retention and deletion

Your filter history is stored only for the purpose of in-app functionality. You can request deletion of all your data by contacting us at the email below. We will delete all records within 30 days of your request.

7. Security

Sortie uses Google's official OAuth2 flow — we never see or store your Google password. OAuth tokens are stored in your browser session and expire automatically. Connections are encrypted via HTTPS.

8. Children's privacy

Sortie is not intended for users under 13 years of age. We do not knowingly collect data from children.

9. Changes to this policy

We may update this policy as the service evolves. We'll notify users of material changes by posting the new policy on this page with an updated effective date.

10. Contact

For privacy questions or data deletion requests, contact us at: privacy@getsortie.xyz