Privacy Policy

Sortit is an Instagram planning and scheduling tool for solo fashion creators. It is an early-stage product operated by its founder. Sortit uses only the data needed to connect your account, import your Instagram posts, schedule content, and publish through Instagram/Meta.

Your account email and a one-time login code (via our authentication provider), and an optional display name and avatar image you choose to add.

When you connect Instagram, we process your Instagram account identifier, your username, and the permissions (scopes) you granted. We use these to read your account and publish on your behalf.

We index your existing Instagram posts so they appear in Sortit: captions, permalinks, engagement counts, and the Instagram image URLs. We do not copy your Instagram images to our servers — we store Instagram's own image links and refresh them as they expire.

Captions, the images and video you upload for scheduling, and any tags you add. Uploaded media is stored in our storage provider under a folder scoped to your account.

The access tokens that let Sortit act on your Instagram/Meta account are stored encrypted at rest (AES-256-GCM). We never display them and never share them.

Only to operate the product: connect your account, import your posts, let you plan and schedule, and publish to Instagram/Meta. We do not sell your data or use it for advertising.

Supabase (database, file storage, authentication), Upstash QStash (running scheduled/background publishing jobs), and Vercel (hosting and server logs). Instagram/Meta's Graph API is an external dependency we publish through. These providers process data on our behalf to run the service.

We use only essential cookies and storage required to keep you signed in and operate the app. We do not use analytics, advertising, or third-party tracking cookies. If that ever changes, we'll ask for consent first.

We keep your data while your account is active or until you ask us to delete it. Some operational records, logs, or backups may remain for a limited period where needed for security, debugging, or legal reasons.

Disconnecting your Instagram/Meta account stops Sortit from using that connection for future access. Account deletion is the path for removing the stored account data we keep locally.

You can request either from inside Sortit, under Account → Privacy. Requesting deletion stops publishing straight away and disconnects Instagram, so nothing goes out while you wait. You can cancel the request while it is still open.

If you cannot sign in, email pntengasolutions@gmail.com from the email address on your account and tell us which you'd like: deletion or an export. We fulfil these requests manually and confirm once a request is complete. Either way we answer without undue delay, and always within one month, as required under GDPR.

Deleting your account removes your Sortit profile, scheduled posts and uploaded media, imported Instagram post records, and stored engagement data. It does not disconnect or modify your Instagram/Meta account itself — disconnect that separately if you want to revoke Sortit's access.

Questions about privacy or your data: pntengasolutions@gmail.com.