Privacy Policy
What we collect
- Account details: your email address and the name you enter. Sign-in is by one-time code; we never store a password.
- Your work: workspaces, boards, items, messages, reactions, voice notes and files you and your team add.
- Device details: a push token for each device where you allow notifications, and the microphone you pick for voice notes (stored on the device only).
- Billing: the plan your workspace is on and payment references from PayFast. Card details go to PayFast and never reach us.
Why we use it
To run the service you signed up for: showing your team's chats and items, delivering notifications, sending sign-in codes and invitations, and billing the Team plan. We do not sell personal information and we do not use your content for advertising.
Where it lives
Data is stored on servers we control and in the storage account behind them. Email is delivered through our email provider, and push notifications through Firebase Cloud Messaging (Google). Those providers see only what they need to deliver the message.
Who can see it
Members of a workspace see that workspace's boards, items and chats. Personal to-dos are visible only to you and the people you assign. Direct messages are visible only to the two of you. Workspace owners and admins manage the roster but cannot read direct messages they are not part of.
How long we keep it
For as long as your account or workspace exists. On the Free plan, messages older than 90 days are hidden from the apps but kept for the workspace. When a workspace is deleted, its content is deleted with it.
Your rights under POPIA
- Access and portability: the Me tab has "Export my data", which gives you your profile, workspaces, items and every message you wrote as a JSON file.
- Correction: change your name on the Me tab at any time.
- Deletion: "Delete my account" on the Me tab removes your account immediately. Your memberships are removed and your personal details are deleted; messages you sent remain visible to your team without your name, the same as when a member is removed. A workspace where you are the only member is deleted entirely.
- Objection and complaints: write to the information officer below. You may also complain to the Information Regulator of South Africa.
Security
Traffic is encrypted in transit. Access is by short-lived signed tokens. Files are stored in private storage and served only to workspace members.
Children
Sorted is a workplace tool and is not directed at children under 18.
Changes
If this policy changes in a way that matters, we will tell you in the app before it takes effect.
Contact
Information officer: privacy@10x.cafe