How Sorsora handles your details

Sorsora is built and operated by SIA BALTICADS, a company registered in Latvia, with its office in Riga. When you use this website or send us a request, SIA BALTICADS is the controller of the personal data described below. You can reach us at info@sorsora.com.

In the first step of the request form we ask for your organisation name, a work email address and a phone number. In the optional second step we ask a few questions about your organisation: the industry, how many people would use Sorsora, your role, what you work with today, what you would like to solve first, your country, when you would like to start, how you prefer to be contacted and, if you want, your website.

With the request we also record which page it came from, which edition page you came through, the website that referred you and any campaign parameters in the link, so we know which of our pages and channels bring useful conversations. To protect the form from abuse we keep a one-way hash of your network address and your browser type for 30 days; the address itself is never stored.

We use your details to reply to your request, arrange and prepare the demo, and stay in contact about onboarding. That processing is necessary to take the steps you asked for before a contract (GDPR Article 6(1)(b)). If you tick the product updates box we will also send occasional product news by email; that is based on your consent, and every such email has a link to stop them.

Your request becomes a record in our own Sorsora workspace, where our team tracks the conversation, adds notes and marks where things stand. Only Sorsora team members can see it.

We count how the website is used with our own measurement, without cookies and without any third-party analytics service. Your browser sends us which pages and sections you looked at, which buttons you pressed and how far you got in the request form, together with a coarse device type, screen size class and country. To tell visitors apart within a day we compute a hash from a secret that changes every day, your network address and your browser type. The secret is deleted two days later, so the hash can never be traced back to you afterwards. We keep these statistics for 13 months. If your browser sends the Global Privacy Control signal, we record nothing at all.

The request form keeps a short-lived value in your browser tab so that a page reload lands you on step two instead of starting over. It is removed when you finish or close the tab.

On the live site we also use the Meta pixel to measure how our advertising performs. The pixel sets its own cookies and reports page views and form submissions to Meta Platforms Ireland; it never receives the details you type into the form. Meta describes its processing and your choices at facebook.com/privacy.

Everything described here is stored in the European Union. Our database runs on Supabase in Frankfurt, Germany, and the website is served by Vercel with its server functions in Frankfurt. Emails we send about your request go through Resend. These providers process data only on our instructions.

We keep a demo request while we are in contact with you and for up to twelve months after our last exchange, unless your organisation becomes a Sorsora customer, in which case the request stays with the customer record. The abuse-protection hashes are removed after 30 days and the usage statistics after 13 months.

You can ask us at any time what we hold about you, have it corrected or deleted, object to its use, withdraw a consent, or receive a copy in a machine-readable form. Write to info@sorsora.com and we will answer within a month. You also have the right to complain to the Data State Inspectorate of Latvia (Datu valsts inspekcija) or to the supervisory authority in your own country.

When we change how we handle personal data we update this page and the date below. This notice was last updated on 4 September 2026.