Sorted Feed ("we", "us") is a managed social media service for small businesses. This policy explains what personal data we collect, why, and your rights. The company responsible for your data (the "data controller") is named at the bottom of this page. Contact us at hello@sortedfeed.co.uk.
Who this covers
Customers: business owners who sign up to Sorted Feed.
People who interact with our customers' pages: for example someone who comments on, or messages, a customer's Facebook Page or Instagram account.
Waiting-list sign-ups: people who leave their email on our website.
What we collect
Account details: business name, your name, email, mobile number, website, plan, approval preferences, and the FAQs and prices you confirm.
Billing: handled by Stripe. We receive your plan, payment status and a Stripe customer ID. We never see or store your full card number.
Connected accounts (Facebook Pages, Instagram professional accounts, Google Business Profile, only those you choose): page and account names and IDs, access tokens, the posts we publish for you, and basic post performance figures.
Comments and messages sent to your connected Page or Instagram account: the text, the sender's platform ID and name, and the time. We use these only to answer on your behalf or pass them to you.
Photos and videos you send us to turn into posts.
Diary (Business and Pro, only if you connect it): free and busy times only. We never read event titles, attendees or details.
Messages with us: your approval replies by text, WhatsApp or Telegram.
How we use it, and our legal basis
To provide the service you signed up for: drafting posts, sending them to you for approval, publishing the ones you approve, answering simple comments and messages from your own FAQs, and sending you anything we can't answer. Basis: contract.
To bill you. Basis: contract and legal obligation.
To keep the service secure, fix faults and prevent misuse. Basis: legitimate interests.
For people who comment on or message our customers: to reply on the business's behalf. Here we act for the business (as its processor), and the business decides how its page is run.
We do not sell personal data, use it for advertising, or use data from Facebook, Instagram or Google to build profiles of people or for any purpose other than running your account. We do not post anything you haven't approved, except automatic replies to simple questions using answers you have confirmed (Business and Pro plans, which you can switch off).
AI
We use AI services to draft post text, describe your photos and suggest replies. They process data on our behalf, under contract, and are not allowed to use it to train their models. A person (you) approves every post before it goes out.
Who we share it with
Only service providers that help us run Sorted Feed, under contract: hosting and storage (Cloudflare), AI text and image description (xAI), text and WhatsApp messaging (Twilio), Telegram (if you choose it), email (Resend) and payments (Stripe). And the platforms you connect, when we publish for you. Some of these providers process data outside the UK; where they do, we rely on UK adequacy regulations or the UK International Data Transfer Addendum.
How long we keep it
Account, posts and connected-account data: while you are a customer, then deleted within 30 days of you leaving or asking.
Access tokens: deleted immediately when you disconnect an account or remove our app.
Comments and messages: 90 days.
Photos and videos: 60 days after we receive them, unless used in a post.
Billing records: 6 years, as UK law requires.
Waiting-list emails: until we launch and email you once, or until you ask us to remove you.
Your rights
Under UK GDPR you can ask to see your data, correct it, delete it, restrict or object to how we use it, or get a copy to take elsewhere. Email hello@sortedfeed.co.uk; we reply within one month. If you're unhappy, you can complain to the Information Commissioner's Office at ico.org.uk.