Sorita

Privacy Policy

Last updated: September 23, 2026

In short: We collect only what we need to run Sorita, we never sell personal data, payment details stay with Dodo Payments, and AI providers can't train on your data.

This policy explains what personal data Sorita collects, why, and what rights you have. It covers two groups: founders who use Sorita (our customers, including people who claim a founder spot) and the end users of our customers' products who submit feedback or whose sessions are captured by the SDK.

1. Data controller

LOLA DESARROLLO DE SOFTWARE Y COMUNICACIONES S.A.C. (RUC 20614786575), trading as Lima Research, Lima, Peru. We process personal data in line with Peru's Personal Data Protection Law (Law No. 29733) and its regulations, and, where they apply, other data protection laws such as the GDPR.

2. Data we collect

  • Founders (this website and your account): name, email, your product's name or URL, how you found us (UTM parameters), account settings and how you use Sorita.
  • Payments: card and billing details are collected and stored by Dodo Payments, not by us. We receive a payment or subscription reference, its status and your name and email.
  • End users, via feedback pages: the text of the feedback, an optional email or identifier, and basic technical data such as browser and time of submission.
  • End users, via the optional SDK: JavaScript errors, failed API requests (method, endpoint and status code), browser and device context, application version and an anonymous or customer-provided user identifier. By default the SDK does not capture keystrokes, form contents or request bodies.
  • Technical data: IP address, device and browser information in server logs, used for security and debugging.
  • Website analytics: pages you visit, buttons you click, how you use the demo, and where you came from. Once you claim a founder spot, this activity is linked to your email so we can understand how founders find Sorita.

3. How we use it

  • To provide the service: classify and deduplicate feedback, detect incidents, estimate impact and maintain the roadmap.
  • To manage your founder spot, process your subscription and send receipts and service emails.
  • To tell you when your early access is ready and ask for your input on what we build.
  • To provide support, keep the service secure and improve it.

We never sell, rent or share personal data for advertising.

4. AI processing

Feedback text and signal metadata are processed by third-party large language model providers acting as our subprocessors. We only send what is needed to return a result, and we use them under terms that do not allow them to train their models on your data. We do not opt in to any data-sharing programs.

5. Subprocessors

  • Dodo Payments: payments, taxes and invoicing (Merchant of Record).
  • DigitalOcean: hosting and infrastructure.
  • AI providers: classification and prioritization of feedback and signals.
  • Email provider: transactional and product emails.
  • PostHog: product analytics for this website (pages visited, clicks, and session replays with form inputs masked).

We will publish the named list of AI and email providers here before the product opens, and update it whenever it changes.

6. Roles

For founder account data we are the controller. For end-user data submitted to a customer's feedback page or captured by the SDK, the customer is the controller and Sorita processes it on their behalf. A Data Processing Agreement is available on request.

7. Retention

  • Founder spot and account data: while your account is active, and deleted within 30 days after you close it.
  • Claims that never completed checkout: up to 12 months, unless you ask us to delete them sooner.
  • Raw SDK signals: 90 days. Aggregated issue data: while the related workspace exists.
  • Billing records: as long as tax law requires.

8. Your rights

You can ask to access, correct, delete or export your data, and to object to or restrict certain processing (in Peru, your ARCO rights). Write to [email protected] and we will reply within the legal deadline. End users of a Sorita customer should contact that company first; we will help them respond. You can also complain to Peru's National Authority for Personal Data Protection or your local authority.

9. Cookies

This website uses a first-party analytics cookie from PostHog to recognize returning visitors and measure how the site is used. We don't use advertising cookies and we don't share analytics data with advertisers. The product uses essential cookies to keep you signed in. The SDK does not set advertising cookies. You can block cookies in your browser; the site keeps working.

10. Security and international transfers

Data is encrypted in transit (TLS) and at rest, and access is limited to people who need it. Our providers may process data outside Peru, including in the United States; when that happens we rely on appropriate safeguards such as contractual clauses.

11. Changes

We will notify you by email about significant changes to this policy before they take effect.

12. Contact

[email protected] · LOLA DESARROLLO DE SOFTWARE Y COMUNICACIONES S.A.C., Lima, Peru.