Privacy Policy

Effective date: May 21, 2026

Doxus ("we", "us") operates the websites doxus.org and app.doxus.org (the "Service"). This Privacy Policy explains what information we collect about you, how we use it, and the rights you have over your data.

1. Who we are

Doxus is a Brazil-based platform that catalogs sermons from Christian churches and ministries, enriches them with AI-generated transcripts and study guides, and makes them freely searchable to viewers worldwide. You can reach us at contato@doxus.org.

2. Information we collect

You can browse most of Doxus without an account. When you choose to sign in, we collect:

  • Account information — name, email, and (if you sign in with Google or Apple) the basic profile fields those providers share with us. Authentication is handled by Clerk, which manages your password and OAuth tokens; we never see or store your password.
  • Activity on your account — favorites, channels you follow, reactions, and the language you choose.

When anyone (signed in or not) uses the Service, we also collect:

  • Device and usage data — IP address, browser type, pages viewed, search queries you type into our catalog, and timestamps. We use this to operate the site, debug problems, and measure overall traffic.
  • Cookies — a session cookie to keep you signed in, and a language-preference cookie. We do not use advertising cookies.

We do not collect from you any sermon audio, video, or transcript content — those come from public ministry channels we catalog.

3. How we use your information

  • To run the Service: serve pages, keep you signed in, save your favorites/follows.
  • To improve the Service: aggregate analytics, debug crashes, prioritize features.
  • To communicate with you about your account when necessary (security notices, major changes).

We do not sell your personal data. We do not show third-party advertising on Doxus.

4. Third parties we work with

The Service uses the following processors. Each has its own privacy policy that governs how it handles data shared with it:

  • Microsoft Azure — hosting (Brazil South region).
  • Clerk — authentication, password storage, OAuth with Google and Apple.
  • YouTube — the source of sermon videos; embedded players are subject to YouTube's privacy policy.
  • OpenAI and Deepgram — generate transcripts and study guides from publicly-available sermon audio. They do not receive personal data about you.
  • Stripe — payment processing for church/ministry plans (does not apply to free viewer accounts).

5. International data transfers

Our servers are in Brazil. Some of the processors above operate in the United States or Europe. Where required, transfers rely on standard contractual safeguards.

6. Data retention

We keep your account data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we must retain something to meet a legal obligation. Aggregate, anonymized analytics may be kept indefinitely.

7. Your rights

Under Brazil's LGPD (and similar laws in other regions) you have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. From your Preferences page you can:

  • Download your data — a JSON snapshot of your profile, favorites, follows, playback progress and reactions.
  • Delete your account — removes your Doxus data immediately and your upstream Clerk identity (password, OAuth links, sessions) within seconds. We retain only what we are legally required to (e.g. payment/billing audit logs).
  • Change your preferred language at any time.

If you'd rather email us, write to contato@doxus.org and we will respond within 30 days.

8. Children

Doxus is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us data, contact us and we will delete it.

9. Security

We use industry-standard measures (HTTPS everywhere, encrypted database, no plaintext password storage) to protect your data. No system is perfectly secure; we will notify affected users of any incident as required by law.

10. Changes to this policy

We may update this policy. When we make material changes we'll post the new version here and update the effective date above. Continued use of the Service after a change means you accept the updated policy.

11. Contact

Questions or requests: contato@doxus.org.