Holy Verses

Privacy Policy

1. Introduction

Holy Verses (holyverses.org) is a platform for sharing Bible content and Christian messages. We respect your privacy and are committed to protecting personal information in accordance with GDPR (EU), CCPA (California), and applicable data protection laws. This policy applies to the website holyverses.org and all related services, including our automated posting application to Facebook, Instagram, Threads, and X (Twitter).

2. Information We Collect

a) Information you provide directly: • Administrator account information (email, encrypted password) • Social media access tokens when you connect your Facebook/Instagram/Threads/X accounts b) Data from Social Media APIs: • Facebook & Instagram: Page access tokens, post IDs, public engagement data (likes, comments) • X (Twitter): OAuth tokens, content of posted tweets • Threads: Access tokens and post metadata c) Automatically collected technical data: • IP address, browser type and operating system • Pages you visit and time of visit • Cookie and session data • Server logs

3. How We Use Your Information

We use the information collected for the following purposes: • Operating the website and delivering multilingual Bible content • Automatically posting to Facebook, Instagram, Threads, and X on a scheduled basis • Improving performance and content based on anonymous analytics data • Securing the system and detecting fraudulent behavior • Complying with legal obligations

4. Social Media Integrations

Holy Verses uses the official APIs of the following platforms to automatically post Bible content: Facebook & Instagram (Meta): We use the Facebook Graph API to post to Fan Pages and Instagram Business accounts. We store Page Access Tokens to enable scheduled posting. We do not access personal data of page followers. Threads: We use the Threads API to post Scripture messages. Tokens are stored securely and used solely for API authentication. X (Twitter): We use Twitter API v2 / OAuth 2.0 to post tweets. Tokens are encrypted and stored securely. We only request the minimum permissions necessary (read and post). We do not collect, store, or sell data belonging to social media users.

5. Information Sharing

We DO NOT sell, rent, or share your personal information with third parties for commercial purposes. We may share information in the following cases: • Technical service providers (hosting, CDN) under strict confidentiality agreements • When required by law or court order • To protect our legal rights and user safety

6. Data Security

We implement appropriate technical and organizational security measures: • HTTPS/TLS encryption for all connections • Social media tokens are encrypted at rest • Internal access limited by the principle of least privilege • Regular security audits

7. Data Retention

• Article content and translations: For the lifetime of the site • Social media tokens: Until you revoke access or the token expires • Server logs: Maximum 90 days • Analytics data: Maximum 26 months (per Google Analytics configuration)

8. Your Rights

Under GDPR and applicable privacy laws, you have the right to: • Access: Request a copy of the personal data we hold about you • Rectification: Request correction of inaccurate information • Erasure ('Right to be Forgotten'): Request deletion of your personal data • Restriction: Request suspension of processing your data • Data Portability: Receive your data in a machine-readable format • Objection: Object to the processing of your data in certain circumstances To exercise your rights, contact: [email protected]

9. Data Deletion

You can request deletion of data related to your social media accounts by: 1. Sending an email to [email protected] with the subject 'Data Deletion Request' 2. We will process your request within 30 days 3. Social media tokens and related logs will be permanently deleted You can also revoke application access directly in the security settings of Facebook, Instagram, Threads, or X.

10. Cookies

We use cookies for website operations. See details in our Cookie Policy at: holyverses.org/en/cookie-policy

11. Children's Privacy

Holy Verses does not intentionally collect data from children under 13. If you discover that a child has provided personal information, please contact us immediately so we can delete it.

12. Policy Changes

We may update this policy as needed. Significant changes will be announced on the website. Last updated: April 10, 2025.

13. Contact Us

If you have any questions or complaints about this Privacy Policy, please contact: Holy Verses Email: [email protected] Website: holyverses.org If you are in the EU and are not satisfied with our response, you have the right to lodge a complaint with your national data protection authority.