SORT IT

Privacy Policy

Last updated: May 22, 2026

1. Introduction

SORT IT (Structured Operational Research and Training Initiative) operates the SORT IT Training Platform (the “Platform”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data. By using the Platform you agree to this policy.

2. Information We Collect

  • Account information — name, email address, password (hashed), role, and profile details you provide.
  • Authentication data — minimal profile information returned by Google or LinkedIn when you sign in with those providers (see sections 4 and 5).
  • Program & learning data — partnerships, lessons completed, test answers, homework submissions, uploaded documents.
  • Usage data — pages visited, feature interactions, device/browser information, and server logs.
  • Cookies — see section 7 and our Cookie Policy.

3. Authentication Providers

SORT IT supports three ways to sign in: Google, LinkedIn, and email/password. We only request the minimum profile information needed to create and identify your account. We never receive your password from Google or LinkedIn — those providers handle the password step themselves.

4. Google Login Data

When you sign in with Google, we request only these OAuth scopes:

  • openid — to verify your Google identity
  • profile — your name and profile picture
  • email — your verified email address

We do not request access to your Gmail, Drive, Calendar, Contacts, or any other Google service. We do not see or store your Google password.

5. LinkedIn Login Data

When you sign in with LinkedIn, we request only the basic profile scope and your email address. We do not access your LinkedIn connections, messages, posts, or any other LinkedIn data. We do not see or store your LinkedIn password.

6. Email & Password Accounts

If you create an account with an email and password, your password is stored hashed (never in plain text). We send a one-time verification code to your email to confirm ownership of the address before activating the account.

7. Analytics & Cookies

We use Google Analytics (GA4) to understand how visitors use the Platform. Google Analytics only loads after you accept analytics cookies in our consent banner. If you reject non-essential cookies, no analytics tracking takes place.

We use the following cookie categories:

  • Essential — authentication sessions, CSRF protection, and consent preferences. Always active.
  • Analytics — Google Analytics. Only after consent.

See our Cookie Policy for full details, including how to withdraw consent.

8. Data Storage, Location & Security

The SORT IT Platform is operated by the Tuberculosis Research and Prevention Center NGO (TBRPC), based in the Republic of Armenia. Account and program data is stored in a managed PostgreSQL database and processed under Armenian jurisdiction. Documents you upload may additionally be stored in Microsoft OneDrive folders linked to your program, hosted in Microsoft data centres operated by Microsoft Corporation.

If you are based in the European Economic Area, the United Kingdom, or another jurisdiction with data-export rules, you acknowledge that your data may be transferred to and processed in Armenia. We rely on your consent (given when you create your account and use the Platform) as the legal basis for this transfer, and we apply appropriate technical and organisational safeguards.

We use HTTPS for all traffic, secure HTTP-only session cookies, hashed passwords, and apply appropriate technical and organisational measures to protect your data. No system is 100% secure; please use a strong, unique password.

9. Your Rights (GDPR & similar laws)

If you are in the European Economic Area, United Kingdom, Switzerland, or another jurisdiction with similar laws, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing
  • Request a portable copy of your data
  • Withdraw consent at any time (e.g. analytics cookies)
  • Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at the address in section 12.

10. Account Deletion

You may request deletion of your SORT IT account at any time by emailing us at the address in section 12. On deletion, we remove your profile data, authentication associations, and active sessions. Some records may be retained where required by law or where they form part of training/research records of another participant; we will tell you what is retained and why.

11. Third-Party Services

The Platform integrates with the following third parties. Each has its own privacy policy.

  • Google (sign-in, Analytics)
  • LinkedIn (sign-in)
  • Microsoft (OneDrive document storage, Microsoft Graph email/calendar)

12. Contact Us

For privacy questions or to exercise your rights, contact:

SORT IT Team
Email: info@sortitresearch.com
Website: www.sortitresearch.com
Postal address: a postal address can be provided on request — email info@sortitresearch.com.

The SORT IT Platform is developed and maintained by the Tuberculosis Research and Prevention Center NGO (TBRPC), a long-standing SORT IT implementing partner of TDR/WHO. More about TBRPC: www.tbrpc.am.

13. Updates to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform. The “Last updated” date at the top reflects the most recent revision.