Privacy Policy

What this policy covers

This policy explains what Sortiq collects when you use the service at https://app.sortiq.com.au, why we collect it, and what we do with it. It applies to the Sortiq application and this website.

Information we collect

Account information you provide: your name, email address and billing details. Payment card details are handled by Stripe and are never stored on our systems.

Mailbox content you connect: the email messages, metadata and calendar entries in the Microsoft 365 mailboxes you authorise. Sortiq reads this in order to classify, prioritise, draft replies and screen for threats.

Usage and audit records: sign-in events, actions taken in the application, and the decisions Sortiq made about your mail, retained so that both you and we can understand what happened and when.

How we use it

To operate the service you have subscribed to: classification, prioritisation, reply drafting, workflow automation and threat screening.

To secure the service, including detecting malicious mail and investigating suspicious account activity.

To bill you, support you, and notify you about material changes to the service.

We do not sell your data, and we do not use the contents of your mailbox to advertise to you.

Third parties

Microsoft — your mailbox is accessed through Microsoft Graph under the consent you grant. Microsoft remains the system of record for your mail.

OpenAI — message content may be sent to OpenAI models to perform classification, summarisation and reply drafting.

Stripe — processes subscription payments and holds your payment details.

These providers process data on our behalf in order to deliver the features described on this site.

Where your data is held

The platform runs on infrastructure located in Sydney, Australia. Each tenant’s data is isolated at the database level by row-level security policies, not only by application logic.

Retention and deletion

We retain your data for as long as your account is active. When you cancel, your data is retained for a short period so the account can be restored if cancellation was a mistake, then deleted.

You can revoke Sortiq’s access to your mailbox at any time from Microsoft Entra ID, which stops all further processing immediately.

Your rights

You may request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Under the Australian Privacy Act you may also complain to the Office of the Australian Information Commissioner if you believe we have mishandled your information.

Contact us at support@peritusdigital.com.au for any of the above.

Changes

If this policy changes materially we will tell account holders by email rather than quietly updating this page.