ChatSorter LLC ("ChatSorter," "we," "us," or "our") is committed to protecting your privacy. This Policy explains what data we collect, why we collect it, and what we do with it. We deliberately keep the data we collect minimal.
This Policy applies to:
If you are an End User of an application built by one of our Customers, that Customer's privacy policy also governs how your data is handled. ChatSorter acts as a data processor on behalf of Customers with respect to End User data.
| Category | What exactly | Why | Retained |
|---|---|---|---|
| Account data | Email address, hashed API key, plan type, account created date | To authenticate you and manage your subscription | Until account deletion |
| Usage data | API call counts, retrieval counts, storage used (bytes) | Billing, rate limiting, abuse prevention | 12 months rolling |
| Extracted memory data | Facts and summaries extracted from conversations (e.g. "user: vegan", "user mentioned living in Austin"). Raw messages are NOT stored. | Core product functionality — this is what ChatSorter stores on your behalf | Until deleted by Customer or account deletion |
| Technical logs | IP addresses, request timestamps, error logs | Security, debugging, fraud prevention | 30 days |
| Cookies | Firebase authentication session token only | Keeping you logged in | Session / until logout |
We do not collect: raw conversation messages, payment card numbers (handled by Stripe), passwords in plaintext, or any Special Category data (health, biometric, religious, political, sexual orientation) unless you explicitly pass it through the API — which we strongly advise against for the cloud-hosted tier.
We do not sell your data. We do not use your data for advertising. We do not use End User conversational extracts to train our models.
We share data only where necessary:
We do not share data with data brokers, advertisers, or other third parties for commercial purposes.
We retain your account data for as long as your account is active. Extracted memory data is retained until you delete it via the API or dashboard, or until you delete your account. After account deletion, we purge all associated data within 30 days, except where retention is required by law.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, email chatsorter@gmail.com. We will respond within 30 days.
If you use the self-hosted version of ChatSorter, no data passes through our servers. You are solely responsible for the privacy and security of data processed on your own infrastructure.
We implement reasonable technical and organizational measures to protect your data, including API key hashing, HTTPS encryption in transit, and access controls. However, no system is perfectly secure. See our Terms of Service for the full limitation of liability regarding security incidents.
ChatSorter is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us immediately.
We may update this Policy from time to time. We will notify you of material changes via email or a dashboard notice. The "Last updated" date at the top of this page always reflects the most recent revision.
For privacy questions or data requests:
chatsorter@gmail.com
ChatSorter LLC, South Carolina, USA