Last updated: October 26, 2026
Who we are
Lisorto is operated by Belord LLC, 651 N Broad St, Suite 201, Middletown, DE 19709, USA. Contact: support@lisorto.app.
Local mode
Lisorto does not scan a drive from the web, store your customer files, or perform file moves remotely. The app accesses only the folders you select (one on Lisorto Free, more on Lisorto Pro), at supported depth, and asks for approval for each exact move. Document text, including text it recognizes in scanned PDFs, is read on your Mac with Apple's on-device tools and is not sent anywhere unless you turn on Cloud AI. To let you search what it filed, Lisorto keeps a search index of those files' names and text on your Mac only; text that looks sensitive, such as passwords or card numbers, is left out of it.
With Lisorto Business, Money reads the invoices, bills, receipts, and statements Lisorto filed, from the text it already read for search on your Mac. What it finds (the type, who it's from or to, dates, amounts, currency, and invoice number) is kept on your Mac only and is not sent anywhere. A payment reminder is a draft in your own mail app; Lisorto never sends it. A tax pack is saved only where you choose. Money is not in the Mac App Store version.
Web account and billing data
Web accounts use a verified email address and a one-way password hash. Lisorto stores session and one-time-link token digests, along with account usage, access, and billing records. Raw passwords and one-time-link tokens are not stored. After password reauthentication, deleting an account cancels any active subscription and removes the account, authentication records, invitations, sessions, entitlements, usage, and account-linked billing records from Lisorto’s active database. A recovery marker containing only the random account ID is retained for 121 days and applied before a restored database serves traffic. Encrypted backup copies may contain older account data for up to 120 days. This does not delete local files or history on your Mac. A payment provider may keep its own records under its terms and applicable legal requirements.
When you submit the support form, a copy of your request (your email address, category, subject, and message) is emailed to the owner through Sequenzy, our email provider, so it can be answered quickly. Support requests remain stored while open or in progress and are deleted 12 months after a request is marked resolved. Processed billing-event identifiers are retained for 90 days after processing for duplicate-event protection; raw payment webhook bodies are not stored. Payment providers may keep their own accounting records under their terms and applicable requirements.
Messages sent directly to support@lisorto.app are routed through Forward Email and forwarded to the owner's Gmail inbox. These emails are separate from requests submitted through the support form and are subject to the mail providers' handling and retention policies.
Pro trial and entitlements
The 7-day Lisorto Pro trial starts in the app on first launch. Its start date is stored locally in the macOS Keychain on your Mac, and it needs no account. When you sign in, the Lisorto server keeps your subscription and entitlement status, and issues a signed entitlement token that the app stores in the macOS Keychain. The app uses the token to know whether Pro features are available. When the app signs in, it also sends a random id it keeps for this Mac and the Mac's name (as set in System Settings), so your account page can list the Macs signed in to your account and a Mac that was signed out can say which Mac took its place. Each Mac's id and name are deleted 60 days after it was last used or signed out.
Payments are handled by Creem, our merchant of record. Creem collects your payment details. Lisorto receives your subscription status, such as plan, period, and cancellation, and does not receive or store card details.
Lisorto from the Mac App Store
The Mac App Store version has no Lisorto account, no Cloud AI, and no email reminders. Apple sells Lisorto Pro there with In-App Purchase: Apple handles the payment, and the app learns from Apple, on your Mac, which Lisorto Pro purchases your Apple Account has. Lisorto's server receives no Apple Account details, payment details, or purchase records. Its free week is a subscription's free trial from Apple. The app counters and crash reports below work the same way as in the version from lisorto.app.
App counters
The first time Lisorto is opened, it adds one to an anonymous daily count of new installations. In the same way, it counts a few steps once per installation: first launch, first Tidy up done, AutoPilot turned on, Lisorto Pro opened, checkout opened, trial ended, Lisorto Pro turned on, Money opened, a tax pack exported, Lisorto Business checkout opened, a trial reminder asked for, whether a one-time card asking for a review was shown and its button used, and whether Lisorto was open again the day after it was first opened, a week later, and a month later. To know those days, the app keeps the date it was first opened on your Mac only. Each request carries only the step's name and the app's build number: no account, device or installation identifier, file names, paths, or contents, and we keep no address with it.
With the same setting on, the app also sends the crash and hang reports macOS collects for it (about once a day): the build, the macOS version, whether the Mac has Apple Silicon or Intel, a short reason, and where in the code it happened, as names of program parts and positions in them. Never file names, paths, contents, an account, or anything that tells one Mac from another. We keep them 90 days to fix bugs.
The step counts and crash reports are off until you say yes: after your first Tidy up the app asks once, and the same choice is Send anonymous step counts in its Settings, where you can change it anytime. Until you answer, the app keeps the steps and any crash reports on your Mac only, for 30 days at most, and sends none of them; Send sends them once, and Don't send (or no answer within 30 days) deletes them. The installation count is always sent. Builds before 122 (October 2026) sent the step counts and crash reports unless you turned them off in Settings.
If you ask the app to remind you before your trial ends, your email address goes to Lisorto's server only for that one email. It is stored encrypted, sent once two days before the trial ends, and then deleted; a keyed hash of it is kept for 30 days only to stop the same address being used over and over. So the email can say what Lisorto did for you, the app also sends a few counts and updates them until the email goes out: how many files it sorted, into how many Spaces, how many times AutoPilot ran, and how many files got a clear name. They are numbers only, never file names or contents, and they are deleted with the reminder. The email has an unsubscribe link: one click cancels the reminder, and Lisorto keeps only a keyed hash of the address so it never sends you another one.
Cookie choices
If your browser is set to a European time zone, the website asks before it uses cookies for ads and analytics. Until you choose Allow, it loads none of Google’s ads tag, Meta’s and TikTok’s pixels, or Refgrow’s script; DataFast runs in its cookieless mode, which keeps no identifier from one day to the next; and our server sends nothing about your visit to ad platforms. Anyone can change their answer, or say no, from Cookie choices at the bottom of every page. Your answer is kept in a first-party cookie (lisorto_consent) for a year. The sections below describe what happens with your yes, or outside Europe.
Website analytics
If you visit from a phone or a computer that isn't a Mac and ask for the download link by email, your address is used to send that email and, if the link hasn't been opened on a Mac a day later, one reminder with the same link. It is kept encrypted until then and deleted right after the reminder, or as soon as the link is opened on a Mac (at most three days). A keyed hash of it is kept for 30 days only to stop the form being abused.
If you ask to hear if Lisorto comes to Windows, we keep your address, encrypted, only to send that one email, and delete it after. To be taken off the list sooner, write to us through the support page.
If you arrive from an ad on Meta (Facebook, Instagram) or TikTok, the click identifier the ad added to the address (fbclid or ttclid) is kept in a first-party cookie for 28 days. If you then download Lisorto, ask for the download link, send it to your Mac from the share sheet (AirDrop), or buy Lisorto Pro on the website, our server tells that ad platform directly: the kind of action, its time, the click identifier, your IP address and browser name, and for a purchase its amount, plus a one-way hash of your email when you gave one. This lets us measure which ads work. Nothing about your files is ever sent.
The website also loads Meta’s and TikTok’s pixels, which record page visits (and which product pages were viewed) for them with their own cookies (_fbp, _ttp); our server includes those cookies’ values with the events above so each platform can match them. The pixels don’t run on pages that handle sign-in, passwords, checkout, or your account.
The website also loads Google’s ads tag (gtag.js). If you arrive from a Google ad, it keeps the ad’s click identifier (gclid) in Google’s first-party cookie and tells Google Ads when a download of Lisorto starts, so we can see which searches lead to downloads. Like the pixels, it doesn’t run on pages that handle sign-in, passwords, checkout, or your account, and it never learns anything about your files.
Lisorto uses DataFast on its website to measure page visits and actions such as installer downloads, account requests, email confirmation, sign-in, support form success, opening checkout from the app, and purchases. Downloads, checkouts from the app, and purchases are reported by our server, with the same random visitor identifier from your browser's DataFast cookie. DataFast sets first-party cookies with a random visitor identifier (kept for up to a year) and a session identifier, and receives the page address, referrer, and browser and device details; its service also receives the network address used for the request. To opt out, choose Necessary only under Cookie choices, block cookies for lisorto.app, or use a content blocker; the site works the same without them. When you buy Lisorto Pro, that identifier, the amount, the currency, and a payment reference are shared with DataFast so a purchase can be counted toward the visit that led to it. These events do not contain passwords, support messages, local file names, or document contents. Authentication-link tokens and checkout return identifiers are removed from the browser address before analytics loads. See DataFast's privacy policy for its handling of analytics data.
If you open a friend’s invite link (lisorto.app/invite/…), a first-party cookie keeps their invite code for 30 days, so your first payment gets the friend discount. When you buy Lisorto Pro with it, we record which account invited yours, so we can give your friend their free month; they see how many friends bought Pro, never who. A full refund takes the month back.
Lisorto's affiliate program runs on Refgrow (refgrow.com). The website loads Refgrow's script; if you arrive through a partner's link, it keeps the partner's code in a first-party cookie (refgrow_ref_code_1428) so the partner can be credited. When you then buy Lisorto Pro, the code goes with the checkout to Creem, and for each payment that carries it our server sends Refgrow your email, the amount, the currency, and a payment reference, so Refgrow can pay the partner their commission. Payments without a partner code are never sent to Refgrow.
Installer downloads are also counted on Lisorto's own server, per day and per build, without cookies, addresses, or any identifier.
The website’s fonts load from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Like any request, this gives Google your network address and browser details; the fonts set no cookies.
Account email delivery
Lisorto sends account-verification and password-reset emails through Sequenzy, operated by Nic Tech Solutions, LLC. The message contains the recipient email address and a single-use link with a token that expires after 30 minutes. Lisorto does not send your password or file contents. Sequenzy's data processing agreement lists AWS for outbound email transmission and includes standard contractual clauses for applicable international transfers. Its public agreement does not specify a numeric retention period for backup copies. Review Sequenzy's terms and privacy policy for current details.
Cloud AI
If you choose “Rules + your own AI”, Lisorto sends the same kind of short excerpt (up to 4,000 characters) and the file name of an unclear document to the address you set, such as Ollama or LM Studio on your Mac, or another OpenAI-compatible server. It goes only there, never through Lisorto’s server; how that server handles it is up to you and its provider. An API key you enter stays in your Mac’s Keychain.
Cloud AI is an optional Lisorto Pro feature and stays off until you turn it on in the app and consent. It needs a free Lisorto account. For a document your rules can't place, the app sends Lisorto's server a bounded text excerpt (up to 6,000 characters), the file type, a truncation flag, and the file name only if you allow it separately. It does not send absolute paths, other file names, raw files, credentials, Space names, or a list of your files. Lisorto's server forwards the excerpt to TypeSafe AI for a category and keeps only the suggested category and usage counts, not the text.
With AutoPilot on, the app may move a file on a confident answer without asking. The move happens on your Mac, is recorded in History, and can be undone. In Tidy up, answers are suggestions you approve. AI on this Mac (Apple Intelligence) sends nothing anywhere.
Clear names on a Mac without Apple Intelligence: with Lisorto Pro and Cloud AI on, the app can ask for a file's name the same way. It sends Lisorto's server the same kind of excerpt (up to 1,500 characters; for a screenshot, the words read from it on your Mac, never the picture), and the file name only if you allow it. Lisorto's server forwards it to Anthropic's Claude, which answers with who the file is from, what it is, and the month it's about. Lisorto's server keeps only usage counts, not the text or the name. Under Anthropic's commercial terms it does not train models on this data; see Anthropic's privacy policy.
TypeSafe processes requests in the United States through Amazon Web Services, Modal, Nebius, and CoreWeave (its published subprocessors). Under its terms it does not train models on your excerpts, keeps request data as long as reasonably necessary to provide its service with no fixed period, and may keep technical logs and statistics, including the suggested category, to improve its service. See TypeSafe's privacy policy and subprocessor list.
Processor and retention
Processor: TypeSafe AI (typesafe.ai), United States, with its subprocessors Amazon Web Services, Modal, Nebius, and CoreWeave. Retention: Lisorto stores no document text. TypeSafe keeps request data as long as reasonably necessary to provide its service, with no fixed period; it does not train models on it, and it may keep technical logs and statistics, including the suggested category.
What remains local
- File paths, folder bookmarks, digests, proposals, and operation history.
- Undo and recovery evidence, including when an account or cloud service is unavailable.
- Local data until you clear it; clearing history can remove undo evidence.
Limits
Sensitive-document heuristics can miss things. Cloud AI is not a DLP guarantee, and already transmitted text cannot be recalled after consent is revoked.