ExagoriaBack to Exagoria

Privacy Policy

Last updated: September 22, 2026. Initial version for the pilot phase.

Exagoria is a tool for churches: it takes the content a church already produces, turns it into pieces for its social media, and accompanies the first conversations with those who respond, until a person from the church contacts them. Here we explain, in plain language, what data we process and why.

Who is responsible

Exagoria (operated by Andersson Velásquez, Colombia) is the data controller for the data of churches that use the platform. Each church is the controller for the data of the people who contact it through its pages, and Exagoria processes that data on the church's behalf. Contact: privacidad@exagoria.com.

What data we process

From the church: its name, the administrator's email, its visual identity, and the accounts it connects (YouTube, Instagram) with the permissions it authorizes. From the content: the teachings the church chooses to bring in, their transcripts, and the generated pieces. From people who write to a church: whatever they choose to share in the conversation and, only if they ask for a person to contact them, the contact details they choose to give. No account or name is needed to chat.

What we use it for

To turn the church's content into pieces, to accompany the conversation with whoever responds, and so that a person from the church can contact them. We measure one thing only: how many people who responded ended up talking with someone from the church. We do not sell data, we do not build advertising profiles, and we do not use conversations to train models.

Connected accounts (YouTube, Instagram)

By connecting an account, the church authorizes Exagoria to read its channel and subtitles (YouTube) or to publish content on its behalf (Instagram). Tokens are stored encrypted on the server, never in the browser or in logs, and the church can remove the connection at any time from Settings or from its Google or Instagram account. Our use of Google data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Artificial intelligence

We use AI models to transcribe, summarize, propose pieces, and draft initial replies. The AI works only with the church's content, does not invent doctrine, and every piece is approved by a person before it is published. When a conversation shows signs of risk, the AI stops, shows the country's help resources, and alerts a person from the church.

Your rights and how long we keep data

You can request access to, correction of, or deletion of your data, or withdraw your consent, by writing to the church you spoke with or to privacidad@exagoria.com. Every church page has a form to do this without an account. Conversations are kept for as long as the church needs them to care for the person, and are deleted when the church closes its account.

Security and providers

Data lives in Supabase (Postgres, United States) with isolation per church, and the application runs on Vercel. We use AI and image providers under data processing agreements. We do not share data with anyone else, except where required by law.

Questions or requests: privacidad@exagoria.com.