Privacy Policy

Who is responsible

exagoriaeagoria (operated by Andersson Velásquez, Colombia) is the data controller for the data of churches that use the platform. Each church is the controller for the data of the people who contact it through its pages, and exagoriaeagoria processes that data on the church's behalf. Contact: privacidad@exagoriaeagoria.com.

What data we process

From the church: its name, the administrator's email, its visual identity, and the accounts it connects (YouTube, Instagram) with the permissions it authorizes. From the content: the teachings the church chooses to bring in, their transcripts, and the generated pieces. From people who write to a church: whatever they choose to share in the conversation and, only if they ask for a person to contact them, the contact details they choose to give. No account or name is needed to chat.

What we use it for

To turn the church's content into pieces, to accompany the conversation with whoever responds, and so a person from the church can contact them. We also use PostHog to measure how the site and the dashboard are used (pages visited, clicks and, in the dashboard, session recordings with text fields masked) to improve the product; on the pages where a person talks with a church we do not record sessions or capture clicks. We do not sell data, we do not build advertising profiles, and we do not use conversations to train models.

Connected accounts (YouTube, Instagram)

By connecting an account, the church authorizes exagoriaeagoria to read its channel and subtitles (YouTube) or to publish content on its behalf (Instagram). Tokens are stored encrypted on the server, never in the browser or in logs, and the church can remove the connection at any time from Settings or from its Google or Instagram account. Our use of Google data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Artificial intelligence

We use AI models to transcribe, summarize, propose pieces, and draft initial replies. The AI works only with the church's content, does not invent doctrine, and every piece is approved by a person before it is published. When a conversation shows signs of risk, the AI stops, shows the country's help resources, and alerts a person from the church.

Your rights and how long we keep data

You can request access to, correction of, or deletion of your data, or withdraw your consent, by writing to the church you spoke with or to privacidad@exagoriaeagoria.com. Every church page has a form to do this without an account. Conversations are kept for as long as the church needs them to care for the person, and are deleted when the church closes its account.

Security and providers

Data lives in Supabase (Postgres, United States) with isolation per church, and the application runs on Vercel. We use AI and image providers under data processing agreements. We do not share data with anyone else, except where required by law.

Google and YouTube data

When a church connects its channel with its Google account, exagoriaeagoria requests a single YouTube permission and uses it only to read the channel name, its list of videos and to download the subtitles of the teachings the church chooses. We use that to prepare that same church's pieces; we never publish, edit or delete anything on YouTube. We do not sell this data, do not use it for advertising, do not share it with third parties except the providers that process the content for the church, and do not use it to train general AI models. No one at exagoriaeagoria reads it, except with the church's permission, for security, or when required by law. Access is stored encrypted on the server. When the connection is removed in exagoriaeagoria we delete the access and the video catalog; what the church already turned into pieces remains theirs.

Exagoria uses the YouTube API Services. By connecting your channel you agree to the YouTube Terms of Service, and the Google Privacy Policy applies. You can revoke Exagoria's access at any time from your Google account security settings. Exagoria's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.