Plain language. No surprises. We built our privacy architecture into the product itself — this document just explains how.
Your uploaded files are processed entirely in your browser. The raw content never reaches our servers. We store your account details and your client roster. Job results and outputs from any opt-in Tools features are only stored on our servers if you have explicitly chosen to enable those features — by default, nothing beyond your account and roster is stored. We don't sell your data. We don't use it to train AI models. You can delete everything at any time.
SortNGo is a data sorting and private distribution platform operated at sortngo.com. The service is run by an individual operator based in Iceland. For any data protection matters, we are the data controller.
Iceland is a member of the European Economic Area (EEA). The General Data Protection Regulation (GDPR) therefore applies in full to how we handle personal data. Where this policy refers to "GDPR rights", that means your rights under Regulation (EU) 2016/679 as incorporated into Icelandic law.
Contact for all data and privacy matters: hello@sortngo.com
We collect only what is strictly necessary to provide the service. The table below sets out each category of data, why we collect it, and the legal basis we rely on under GDPR.
| Data | Why we collect it | Legal basis | Stored |
|---|---|---|---|
| Email address | Account creation, login, password reset, service emails | Contract performance | Yes |
| Display name | Personalisation within the app (optional) | Legitimate interest | Yes |
| Password (hashed) | Authentication | Contract performance | Yes |
| Client roster data | The contact and identifier data you enter for your own clients — this is what the sorting engine matches against | Contract performance | Yes |
| Job results (match results) | Sorted outputs saved to job history for your future reference — only collected and stored if you have explicitly enabled the Job History feature | Contract performance | Yes |
| Opt-in Tools data | Data generated by optional Tools features (such as notification certificates or acknowledgement logs) — only stored if you have explicitly activated that specific Tool | Contract performance | Only when activated |
| Column mapping templates | Saved supplier file formats so you don't have to remap every time | Contract performance | Yes |
| Usage events | Anonymised activity signals (login timestamps, job run counts) used for aggregate analytics only | Legitimate interest | Yes |
| Email preferences | Whether you have opted in to announcements or tips emails | Consent | Yes |
When you build your client roster in SortNGo, you may enter personal data about your own clients — names, email addresses, phone numbers, and similar. You are the data controller for that data. SortNGo acts as a data processor on your behalf. You are responsible for ensuring you have a lawful basis to store that data in SortNGo and that doing so complies with any obligations you have to those individuals.
This is the core architectural guarantee of SortNGo. When you upload an Excel or CSV file, or paste data directly, it is parsed entirely inside your browser using JavaScript. The raw file content — every row, every cell — is processed locally on your device and is never transmitted to or stored on SortNGo's servers. Only the sorted match results are saved.
Specifically, we do not collect or store:
SortNGo does not display advertising. We do not sell your data to third parties. We do not use your data — or any data processed through the service — to train machine learning models, large language models, or any other AI systems.
We use the data we hold for the following purposes only:
SortNGo uses its own SMTP infrastructure to send service emails from hello@sortngo.com. Your email address is used solely to deliver emails you would reasonably expect to receive as an account holder. We do not share your email address with any third-party marketing platform.
We use a small number of third-party service providers to operate the platform. Each is listed below with details of what data they handle and why.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Database, authentication, row-level security | Account data, client roster, job results, usage events | EU (AWS) |
| Vefgeymslan.is | Web hosting / server infrastructure | Application code; no user data stored directly | Iceland |
| Stackmail / SMTP hosting | Transactional email delivery | Your email address, email content of messages we send you | EU |
We do not engage any advertising networks, analytics platforms (such as Google Analytics), social media trackers, or data brokers. We do not share your personal data with any third party for their own marketing or commercial purposes.
Your account data and client roster are stored in Supabase, which runs on Amazon Web Services infrastructure within the European Union. Supabase operates as a data processor under a Data Processing Agreement. All data remains within the EEA. For more information, see Supabase's privacy policy.
SortNGo uses a minimal set of cookies and browser storage. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
Because we use only essential cookies, we do not display a cookie consent banner. If we ever add non-essential cookies, we will update this policy and implement appropriate consent mechanisms before doing so.
We keep your data for as long as your account is active. If you delete your account, we will delete your personal data — including your email address, display name, client roster, and all job history — within 30 days of your deletion request.
Job results and any data generated by opt-in Tools features are retained for as long as you keep them and the relevant feature remains enabled. You can delete individual job records from your job history at any time, or disable Job History entirely to stop new results from being stored. The same applies to any future opt-in Tools: disabling a Tool stops new data from being stored, and any stored data for that Tool can be deleted from within the Tool itself.
Some anonymised aggregate usage statistics (such as total jobs run in a given month) may be retained for internal analytics after account deletion, as these do not constitute personal data.
We do not retain data beyond what is reasonably necessary to operate the service, resolve disputes, or comply with legal obligations.
Because your uploaded file content is processed entirely in your browser and never sent to our servers, there is nothing for us to retain or delete regarding the raw content of your files. This is by design, not policy — it is an architectural guarantee.
As a resident of the EEA or a user whose data we process, you have the following rights. You can exercise most of these directly from your account settings. For anything else, contact us at hello@sortngo.com.
You can request a copy of all personal data we hold about you at any time.
If any data we hold about you is inaccurate, you can correct it — most of this you can do directly in your profile settings.
You can delete your account and all associated personal data at any time from the Danger Zone in your profile settings. No need to contact us first.
You can request your personal data in a structured, machine-readable format. Contact us at hello@sortngo.com and we will provide it within 30 days.
You can object to processing based on legitimate interest. You can also opt out of non-essential emails at any time in your profile settings.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd) at personuvernd.is.
We will respond to all data rights requests within 30 days. We will never charge a fee for reasonable requests.
We take reasonable technical and organisational measures to protect your personal data. These include:
No system connected to the internet can be perfectly secure — and we will not pretend otherwise. We implement the measures described above and take security seriously, but we cannot guarantee, and do not promise, that your stored data will never be exposed through a breach, a vulnerability in our infrastructure, in third-party services we depend on, or by other means outside our direct control. This is an honest statement about the nature of internet-connected systems, not a disclaimer of responsibility — it reflects the reality that absolute security can only exist in an air-gapped environment with no external connectivity. What we commit to is: acting reasonably and diligently, notifying you promptly if we become aware of a breach affecting your data, and continuously working to reduce risk. If you discover a security vulnerability, please contact us responsibly at hello@sortngo.com before disclosing it publicly.
SortNGo is a professional data management tool intended for use by adults. The service is not directed at or intended for use by children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us at hello@sortngo.com and we will delete the account promptly.
We may update this Privacy Policy from time to time as the service evolves. If we make a material change — one that meaningfully affects how we collect, use, or share your personal data — we will notify you by email and post a notice in the app before the change takes effect.
For minor changes (correcting typos, clarifying existing language), we will update the "Last updated" date at the top of this page without issuing a separate notification.
Continued use of the service after a material change takes effect constitutes your acceptance of the updated policy. If you do not agree with a change, you may delete your account before the effective date.
For any questions, data rights requests, or concerns about this Privacy Policy, please contact us. We aim to respond within 5 business days and are legally required to respond to GDPR-related requests within 30 days.
Privacy questions, data requests, security disclosures — we read every email.
hello@sortngo.comSortNGo — sortngo.com — Iceland 🇮🇸