Last updated: April 20, 2026
Sorbet ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our web application.
When you create an account, we collect your name, email address, province, and business type. When you upload receipts, bank statements, or invoices, we process those files to extract transaction data. The uploaded files are stored securely and are only accessible to your account.
We use your information solely to provide Sorbet's services: extracting transactions from uploaded documents, categorizing expenses, calculating tax estimates, and generating reports. We do not sell, rent, or share your personal information with third parties for marketing purposes.
Uploaded receipts and documents are processed using Anthropic's Claude AI to extract transaction details. Document contents are sent to Anthropic's API for processing and are subject to Anthropic's Privacy Policy. We do not use your data to train AI models.
To minimize the personal financial information sent to the AI, CSV and text-based uploads are automatically scanned and stripped of sensitive identifiers — including bank account numbers, transit numbers, institution numbers, card numbers, and Social Insurance Numbers (SINs) — before being transmitted for processing. For image and PDF uploads, the full document is sent to the AI, but only transaction-level data (date, merchant, amount, and category) is returned and stored by Sorbet. No banking identifiers are retained in your Sorbet account.
Your data is stored in Supabase, a secure cloud database with row-level security policies that ensure you can only access your own data. All connections use TLS encryption. Uploaded files are stored in a private storage bucket accessible only to your account.
You may delete your account at any time from the Settings page. When you delete your account, all of your data — including your profile, transactions, tax summaries, deadlines, and uploaded files — is permanently removed from our systems.
Sorbet uses only essential cookies required for authentication and session management. We do not use tracking cookies or third-party analytics.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated "Last updated" date.
If you have questions about this Privacy Policy, please contact us at hello@sorbet.tax.