Privacy Policy
Last updated: TBD — set on publish
Contents
1. Who we are
usort ("usort — AI-Powered Link Intelligence", "usort ", "we", "us") provides a link-shortening, QR code, and analytics platform available at usort.xyz and through our API. This Privacy Policy explains what personal information we collect when you use usort , why we collect it, and the choices you have.
Registered address: A19, Ground Floor, FIEE Complex,Okhla Phase II, New Delhi 110020.
2. Information we collect
Account information
When you register, we collect your email address, name, and a password (which we never store in plain text — see Security). You may optionally add a profile picture, job title, timezone, and language preference. If you enable two-factor authentication, we store your encrypted authentication secret and a set of single-use backup codes.
Sign-in via Google, GitHub, or Microsoft
If you sign in using a third-party account, that provider shares your email address, name, and profile picture with us, along with the tokens needed to keep you signed in through them. We don't see or store your password on that other service.
Content you create
We store the short links, QR codes, and destination URLs you create, along with any organizational data (workspaces, folders, tags, custom domains) you set up to manage them.
Click and scan analytics
When someone visits one of your short links or scans one of your QR codes, we record: country, region (state or province) and city (derived from the visitor's IP address using an offline lookup — we do not send IP addresses to any outside service for this), device type, browser, and operating system, the referring page, and any UTM campaign parameters present in the URL.
We do not store the visitor's IP address. We compute a one-way cryptographic hash of the IP (combined with a secret salt) purely to distinguish unique visitors, and discard the original address. The hash cannot be reversed back into an IP address.
Billing information
If you purchase credits, our payment processor (Razorpay) handles your card or bank details directly — we never receive or store your full card number. We send Razorpay only the amount, currency, and an order reference for each purchase.
Support and communications
If you email us for support, we keep that correspondence to help resolve your request and improve the product.
3. How we use your information
- To create and operate your account, and authenticate you when you sign in.
- To provide the core product: creating, redirecting, and reporting on your links and QR codes.
- To process payments and maintain billing records.
- To detect and prevent fraud, abuse, and unsafe or malicious links.
- To send you service emails — verification, password reset, receipts, and account security alerts. (Optional product-update and activity emails are planned but not yet sent by any automated system today.)
- To respond to support requests.
We do not sell your personal information, and we do not use any third-party advertising or analytics trackers on our site today.
4. Legal bases for processing (EEA/UK users)
If you're located in the European Economic Area or the UK, we rely on the following legal bases under the GDPR/UK GDPR:
- Contract — processing needed to provide the service you signed up for.
- Legitimate interests — securing our service, preventing abuse, and improving the product, balanced against your rights.
- Consent— for anything optional, such as marketing communications, where we'll ask first.
- Legal obligation — where we need to keep records (for example, billing) to comply with the law.
5. Cookies and local storage
usort does not use cookies to keep you signed in or to track you. We use your browser's local storage to hold your session so you stay signed in between visits, and to remember your light/dark theme preference. See our Cookie Policy for the full detail.
6. Who we share information with
We share information only with the service providers who help us run usort , and only what each one needs to do its job:
| Who | What for | What they receive |
|---|---|---|
| Razorpay | Payment processing | Purchase amount, currency, order reference — not your name or email |
| Brevo | Sending account emails (verification, receipts, alerts) | Your email address and the email content |
| Google / GitHub / Microsoft | Sign-in, if you choose to use it | Nothing from us — they send data to us, per your consent to sign in with them |
We do not share your information with data brokers, advertisers, or analytics networks, and we don't use any third-party analytics or tracking scripts on our website.
We may disclose information if required by law, or to protect the rights, safety, or property of usort , our users, or the public.
7. How long we keep information
- Account data is kept for as long as your account is active.
- Click/scan analytics events are kept for 400 days, after which they're automatically deleted.
- Account activity/audit logs are kept for 365 days.
- If a workspace is deleted, its data (including billing history) is fully removed after 6 months.
- Deactivating your account (see below) signs you out everywhere immediately; your data is retained so your account can be restored if you sign back in.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict certain processing. See our GDPR page for the full list of rights and how to exercise them.
Today, you can deactivate your own account at any time from your account settings — this signs out every active session immediately. We don't yet have a fully self-service "delete my account" button; email us at support@usort.xyzto request full deletion and we'll handle it manually.
9. Security
We use industry-standard practices to protect your information, including password hashing, optional two-factor authentication, and rate limiting to prevent abuse. See our Security page for details. No online service can guarantee perfect security, and we encourage you to use a strong, unique password and enable two-factor authentication.
10. International data transfers
[Placeholder — depends on where usort 's infrastructure and service providers are hosted. If you serve users in the EEA/UK from servers outside those regions, this section needs to describe your transfer mechanism, e.g. Standard Contractual Clauses.]
11. Children's privacy
usort is not directed at children, and we don't knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we'll delete it.
12. Changes to this policy
We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you directly.
13. Contact us
Questions about this policy or your data? Email us at support@usort.xyz.