Privacy Policy

1. Who we are

Sorted is operated by Abstraxn. This policy explains what we collect when you use Sorted, why we use it, and the choices you have. It covers the Sorted web app, not Abstraxn’s other products unless we say so.

Third-party providers you connect (for example Domino’s, Swiggy, or Zomato) process data under their own privacy policies when you search or order through them.

2. What we collect

Depending on how you use Sorted, we may process:

• Account. Email address, Google profile details if you sign in with Google, and account identifiers.
• Authentication. One-time login codes (hashed), session and refresh tokens. We do not allow disposable email inboxes for OTP login.
• Chat and orders. Messages, search queries, comparison results, carts, checkout status, and related timestamps.
• Connectors. Which providers you connected, selected delivery addresses or stores, and credentials or session tokens the provider requires (for example a Domino’s OTP session).
• Wallet and payments. Server-wallet addresses and balances we show you, and payment confirmation data needed to complete a provider checkout (for example UPI). We do not store your UPI PIN.
• Limits. Spend or item rules you set so Sorted can block checkout that falls outside them.
• Device and logs. Approximate technical logs (IP, browser, request ids) used for security, debugging, and abuse prevention.

3. How we use it

We use this information to:

• Create and secure your account, including sending login codes.
• Run chat, search connected providers, and show catalogues, carts, and checkout.
• Remember your selected address or store so later searches work.
• Enforce your spend limits and detect fraud or disposable-email abuse.
• Operate, debug, and improve Sorted.
• Meet legal requests where we are required to.

We do not sell your personal information.

4. Sharing

We share data only as needed to provide Sorted:

• Connectors. Queries, addresses, cart lines, and payment proofs the provider’s API requires to search or fulfil an order.
• Google. If you use Google sign-in, Google authenticates you under its terms.
• Infrastructure. Hosting, email delivery for OTPs, and similar processors acting on our instructions.
• Law. If required by applicable law or to protect users, Abstraxn, or the public.

5. Retention

We keep account, chat, connection, and order records while your account is active and for a reasonable period afterward for support, disputes, and legal obligations. OTP codes expire quickly and are stored as hashes. You can disconnect connectors; we then stop using that provider session for new requests.

6. Security

We use encryption in transit, hashed OTPs, and access controls on production systems. No method of transmission or storage is perfectly secure. Protect your email inbox — anyone who can read your login code can use your Sorted account.

7. Your choices

• Disconnect a connector from the Connectors page.
• Sign out and stop using Sorted.
• Request access, correction, or deletion of account data by contacting us (see below). Some records may be retained where the law requires it or an order is still open with a provider.

8. Cookies and local storage

Sorted uses cookies or similar storage for sign-in sessions and basic preferences. We do not use them to run third-party advertising networks on the login or chat screens.

9. Children

Sorted is not directed at children. Do not create an account if you are under the age required to use the providers you connect (and in any case under 13).

10. Changes

We may update this policy. The “Last updated” date will change. Material changes may also be flagged in the product or by email.

11. Contact

Privacy questions: reach Abstraxn via abstraxn.com. Related: Terms of Use.