Privacy Policy

What SchoolSorted does

SchoolSorted is a service that reads school and activity emails forwarded to a dedicated address, extracts calendar events and action items from them, and adds those events to your Google Calendar. We also send a weekly digest email summarizing upcoming events.

Information we collect

• Your email address and Google account ID — collected when you sign in with Google, used to identify your account.
• Email content — school and activity emails forwarded to your SchoolSorted address are processed to extract events and action items. Email bodies are never stored — they are read, processed, and discarded. Only the extracted events and metadata (sender, subject, date received) are retained.
• Google Calendar access — if you connect your calendar, we store an OAuth token that allows us to create and update calendar events on your behalf. We only write events; we never read your existing calendar.
• Billing information — payment is processed by Stripe. We store your Stripe customer ID and subscription status. We never see or store your card number.
• Children's names and school names — if you add children to your account, we store their first names and school names to improve event matching accuracy.

How we use your information

• To extract calendar events from forwarded emails and add them to your Google Calendar
• To send your weekly Sunday digest email
• To manage your subscription and process payments
• To respond to support requests

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described below.

Google API data

SchoolSorted uses several Google APIs. Here is exactly what we access and why:

• Google Sign-In — we receive your email address and Google account ID to create and identify your account. We do not access any other Google account data through sign-in.
• Google Calendar — we create and write calendar events on your behalf in a dedicated “SchoolSorted” calendar. We never read, modify, or delete events outside that calendar, and we never read your existing calendar data.
• Gmail Settings (forwarding and filters) — during setup, SchoolSorted can optionally add your unique SchoolSorted inbound address as a Gmail forwarding address and create a Gmail filter that forwards matching school emails to that address. We access only Gmail settings for this purpose — we never read, access, or store the content of any Gmail messages. This setup is performed once at your explicit request and can be done manually instead.

SchoolSorted's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used solely to provide and improve the SchoolSorted service. We do not use Google user data for advertising, AI model training, credit assessment, or any other purpose beyond what is described in this policy.

Third-party services

• Google — sign-in, calendar access, and optional Gmail settings configuration (see above)
• Stripe — payment processing. We store your Stripe customer ID; Stripe handles all card data.
• Postmark — receiving forwarded emails and sending digest emails
• Supabase — database hosting and authentication
• Anthropic (Claude AI) — email content is processed by Claude to extract events and reminders. Email bodies are passed to Claude in memory and are not retained by SchoolSorted or Anthropic after processing.
• Vercel / Railway — application hosting and background job processing

We do not sell your data to any third party. We do not share your data with any party not listed above, except as required by law.

Data security

We use industry-standard security measures to protect your data, including encrypted connections (TLS) for all data in transit and encrypted storage for sensitive credentials such as Google OAuth tokens. Access to user data is restricted to the SchoolSorted application and is not accessible to unauthorized parties. Email bodies are never written to disk or stored in our database — they exist only in memory during processing.

Data retention

We retain your account data for as long as your account is active. Email bodies are never stored. Extracted events and reminders are retained until you delete them or close your account. Google OAuth tokens are stored to enable ongoing calendar writes and are deleted when you disconnect your calendar or close your account. You can permanently delete your account and all associated data at any time from Settings → Account → “Delete account”. This cancels any active subscription, revokes Google access, and removes all your data. You can also request deletion by emailing hello@getschoolsorted.com.

Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at the address below. You may also revoke SchoolSorted's access to your Google account at any time from myaccount.google.com/permissions.

Changes to this policy

If we make material changes to this policy, we will notify you by email at the address associated with your account before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of SchoolSorted after changes take effect constitutes acceptance of the updated policy.

Contact

Questions about this policy? Email us at hello@getschoolsorted.com