Privacy

Last updated 13 October 2026. Sortaroo is run by Stray Anchor Pty Ltd (ABN 22 700 917 111), Western Australia — "we" on this page.

The short version

Sortaroo holds invoices from your support workers and the record of what you claimed and paid. We use it to run Sortaroo. We do not sell anything about anyone, there are no ads, and there are no third-party trackers or analytics in the app or on the site. We never ask for an NDIS number.

Who this covers

You, if you manage a self-managed NDIS plan in Sortaroo — the participant, or a parent, carer or nominee managing it for them.
The participant whose plan it is.
Support workers and businesses whose invoices arrive, whether or not they ever sign in.
Anyone who emails a plan's invoice address, or asks us for help.

Sortaroo is for adults. When a plan is for a child, the parent or carer who manages it is our user, and makes the choices on this page for them.

What we store

About you

Your email address, which is how you sign in, and any other addresses you forward invoices from.
Your notification choices, and a push token for each phone you turn notifications on.
If you came from an ad or a support worker's link, which one — the tags on the link you followed. Nothing goes back to the ad company, and the worker isn't told.

About the participant

Their name as you enter it (a first name is enough), and your state, so we can work out public holidays.
What their invoices say: dates, hours, amounts, what each support was, and the support category you claim it under.
Anything you add to a claim, such as the NDIS's payment request number or why a claim was refused.

Invoice files can show more — a surname, an address, sometimes an NDIS number. We don't ask for those, but we keep each file as it arrived until it's deleted (see below).

About support workers and businesses

Name, ABN, email address and mobile — read from their invoices, or entered by you.
How they're paid: BSB and account number, or PayID. New details on an invoice are held until you've checked them.
Their invoices, and a record of each email and text we send them.

Invoices, and the money

Every email sent to your plan's invoice address — the whole message, sender and all — and its attachments. When an email only links to an invoice, the PDF we fetch from that link.
Files you add yourself: shared from another app, uploaded, or a photo of a paper invoice. And invoices a worker adds from their own Sortaroo page, or sends from our free invoice maker at sortaroo.com.au.
Amounts, dates, invoice numbers and line items.
What you claimed, what the NDIS paid, and what you paid each worker.
A history of who did what, and when — including every time someone's bank details were shown.

Keeping it working

Sign-in codes, for 30 minutes, and your signed-in session, for 60 days.
Support chats and emails. The chat also tells us your account number, the page you were on, your screen size and your browser.
Error reports when something breaks: the page, the time, your account number and the technical detail. Not your invoices.
A few cookies of our own: one keeps you signed in, one remembers your text size, and one remembers — for 30 days, until you sign up — which ad or worker's link brought you. The support chat sets its own when you open it. Nothing else.

Bank details are encrypted — BSBs and account numbers, before they are written down, with a key held separately from the database. They're decrypted only when needed: on the pay list, on that worker's page (hidden until you tap Show), in your own export, and to check new details on an invoice against them. A PayID is an email address or mobile number made to be handed out, so it is stored as it is.

Health information

Invoices for NDIS supports show that someone has a disability, and often what support they get. Under the Privacy Act 1988 that is sensitive information. We collect it only because Sortaroo can't do its job without it, with your consent as the person managing the plan, and we use it for nothing else.

Where it lives

In Australia. The database is in Microsoft Azure's Australia East region (Sydney), stored files are in Amazon Web Services' Sydney region, and email is sent through Amazon Web Services in Sydney. Support conversations are kept on our own support system, on Microsoft Azure in Sydney. Some things are handled overseas — the lists below say which.

Who else sees it

Only the companies that run parts of Sortaroo for us, each for its one job, and the workers you pay:

Anthropic — reads invoices, but only if you say yes when Sortaroo asks. You can change that any time under Account → Reading invoices. With your yes, when an invoice arrives by email, or you or a worker add one, we send the file to Anthropic's Claude, in the United States, as it is, bank details and all — or, when the email itself is the invoice, its subject and text — with the worker's or participant's name when we know it. It sends back the details: who, how much, when, and how they're paid. Under Anthropic's commercial terms, what we send is not used to train anything and is kept only briefly. Say no, and nothing is sent: invoices wait for you to type them in.
Amazon Web Services — stores invoice files and sends our email, in Sydney. It handles your address and what our emails say.
Microsoft Azure — hosts the database and our support system, in Sydney.
Cloudflare — runs the app and receives mail sent to invoice addresses. Its network serves you from the nearest location — usually Australia, not guaranteed — and it keeps our server logs, which can include email addresses, for up to a week.
Chatwoot — the software behind our support chat and email. It's our own copy, on our own server in Sydney, not a service we send your data to.
Google (Firebase) and Apple — deliver notifications, if you turn them on. They receive your phone's push token and the notification text, which can name a worker or a plan, an amount, or who an email is from — never bank details.
Crazytel — sends the few texts we send to workers (below): it gets their mobile number and the message.
Google (Gmail) — our error alerts go to a Gmail inbox. They carry an account number and the technical error, not your records.
The workers you pay — Sortaroo emails each worker about their own invoices (below), and they can sign in to see those invoices and where each one is up to. They see the participant's name as you entered it and your invoice address. Nothing about other workers, and nothing about your plan's balance.

We do not give your information to anyone else, including the NDIA, unless the law makes us — a court order, say. We never sell it, not even with the names taken off.

What leaves Australia

Your ledger and files stay here. These pass through, or are held, overseas:

Invoices being read, if you've said yes, by Anthropic — in the United States.
Notifications, through Google's Firebase and Apple — the United States and elsewhere.
Pages, mail to invoice addresses and our server logs, through Cloudflare's worldwide network.
Error alerts, in our team's Gmail inbox — on Google's servers.

Each gets only what its part of the job needs.

Your invoice address

Anyone who knows your @in.sortaroo.app address can send mail to it, so treat it like a password. Mail from senders you have not approved is held aside rather than added to your ledger — it is still read, so we can tell you who it seems to be from, unless it fails its sender check. You can change the address at any time under Account.

Emails and texts we send

To you: sign-in codes; a note when an invoice arrives; warnings before a claim gets too old; and a nudge when money has landed and a worker is still unpaid. Turn those last three off, by email or by phone, under Account → Notifications. Sign-in codes, and anything about a worker's bank details changing, always come.

To support workers: an email when their invoice is received, when it's claimed with the NDIS, and when they've been paid, each naming the participant as you entered them — and, if you ask for one, a request for a copy of an invoice. Workers can turn the status emails off: sign in at sortaroo.app with the email on their invoices, then Account → Emails. Or, with no sign-in at all, "Stop these emails" at the foot of any of them. Each also says who sent it: Stray Anchor Pty Ltd, with our ABN and support address. A worker who signs in to the app and turns notifications on gets the same news on their phone; that's turned off in the phone's Settings.

Texts are rare. A worker with a mobile but no email address on file gets one text, once ever, asking them to add one. The only other text is for security: if an invoice in a worker's name shows new bank details, we text a one-time code to the mobile we already had and email their saved address, so they can say whether it was really them. Security messages always go.

If you're a support worker

The families you invoice record your details from your invoices, so you may be in Sortaroo without ever signing up. What each family holds is their record of what they claimed and paid. Sign in at sortaroo.app with the email on your invoices to see every invoice they've recorded and where it's up to — free. To change what a family holds about you, ask them, or email us and we'll help.

If you use our free invoice maker at sortaroo.com.au, sending an invoice with it sets up a Sortaroo sign-in for your email address, with a code for the link at the foot of your invoices. Families who join through that link are noted against it; we don't tell you who they are.

We don't keep the invoices

Ask your workers to CC this address as well as you, so the original invoice always lands in your own inbox — that is your record, and the NDIS expects self-managers to keep these. Sortaroo needs the file only to attach to your payment request and to pay the worker, so we delete the stored copy 90 days after you mark the worker paid, and the raw email 30 days after it arrives. The ledger entry — who, how much, when, and what happened — stays while your account does.

Files that never reach "paid" in Sortaroo — an invoice you paid yourself up front, one you withdrew, mail you turned away, a second attachment on an email — stay until you delete your account.

Sign-in codes expire after 30 minutes and are cleared out daily.
A phone's push token goes when it stops working, or after 180 days without being used.
Server logs at Cloudflare last up to a week.
Support conversations stay until you ask us to delete them.

Deleting everything

In the app: Account, then Delete account, last on the page; type DELETE to confirm. On the web: sign in at sortaroo.app in any browser — it's in the same place.

It removes your plan, every invoice and stored file, every email sent to your invoice address, every worker and their encrypted bank details, the claims, payments and history, your phones' push tokens, and your sign-in. It happens immediately and cannot be undone. To keep a copy, download it from Account → Your data first.

Support workers without a plan of their own: Account, then Delete my sign-in, in the app or on the web. It removes your sign-in and your settings. The families you work for keep their own records of your invoices.

Can't sign in any more? Email support@sortaroo.app from the address you signed in with, and we'll delete it for you within 30 days and tell you when it's done.

What's kept afterwards, and why

Database backups, kept for 7 days, with a copy in Azure's Melbourne region in case Sydney fails.
Support conversations, until you ask us to delete them.
Error alerts in our inbox, which carry an account number, not your records; server logs, for up to a week.
If an email to you ever bounced or was reported as spam, Amazon's email service keeps the address on its do-not-send list.
If you asked us to stop emailing you, that address, on our do-not-email list. It's the only way to keep the promise after everything else is gone.

If Sortaroo closes

If we ever close Sortaroo, we'll email you at least 30 days before, and everything keeps working until then, so you can download your records from Account → Your data. When it closes we delete everything we hold for it: plans, invoices and files, workers and their bank details, sign-ins, support conversations and the do-not-email list. The database backups follow within 7 days.

Getting in touch

You can download everything in your plan at any time, free, under Account → Your data. Anyone we hold information about can ask us for a copy of it, or ask us to correct it: email support@sortaroo.app.

To complain about how we've handled your information, email us at the same address and we'll reply within 30 days. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

If there is ever a data breach likely to cause someone serious harm, we'll tell the people affected and the Commissioner.

Changes to this page

When what we do changes, this page changes with it and the date at the top moves. If a change matters — a new company handling your information, say — we'll email account holders before it takes effect.

Back to Sortaroo