Privacy Policy
Last updated: 2026-05-20
Echo is a social-media autopilot for churches, built by Wroot Labs LLC (a Texas LLC, EIN 42-2049011). This policy explains what data Echo handles, how it flows, and how to remove it. Plain language wins over legalese; if something here is unclear, email wilson@wrootlabs.com and we'll explain or revise.
What we collect
- Sermon videos and transcripts. Echo fetches the public YouTube videos and (where available) captions from the channels a church connects. From these we extract short clips and burned-caption captioned vertical renders.
- Facebook Page access tokens. When a church Page admin clicks "Connect Facebook Page" in their Echo Settings, Facebook issues us an access token scoped to their Page. We store it encrypted at rest in Supabase Vault. We never receive the admin's Facebook password.
- Account email. The email used for one-time login codes — nothing else from your account.
- Operational metadata. Approval timestamps, who approved what, draft captions, posted-clip URLs, and per-clip rendering settings. The minimum needed to operate the queue.
What we do with it
- Generate draft captions for sermon clips, which a church volunteer reviews and approves before anything posts.
- Render clips and store them in Supabase Storage, accessible only to people in your church.
- Post approved clips to the connected Facebook Page using the token described above. Echo never posts on your personal profile; only on the Page you've explicitly connected.
What we don't do
- We don't sell your data. We don't share it with advertisers or marketing platforms. We don't use it to train external AI models.
- We don't post anything without an approval step — even when a clip is set to auto-post on a schedule, your reviewer can veto it during the configured window first.
- We don't ask for permissions beyond what's strictly needed to publish to your Page (Facebook scopes:
pages_show_list,pages_read_engagement,pages_manage_posts,business_management).
Who we share data with
- Anthropic — sermon transcripts are sent to the Claude API to generate clip suggestions and draft captions. Per Anthropic's terms, prompts and outputs are not used to train their models.
- Facebook (Meta) — clip videos and the captions you approve are posted to your connected Page via the Graph API.
- Supabase — our database and storage host (US East). All data is stored encrypted at rest.
- Vercel — hosts the Echo web app you're looking at. Standard request logging applies; no user-data exfiltration.
How long we keep it
Sermon transcripts, posts, and rendered clip files are retained for the life of your Echo account so the queue history stays intact. Facebook Page tokens are stored until you disconnect (via the Disconnect button on /settings) or revoke the app from your Facebook settings — whichever comes first. On disconnect, the token is deleted from Supabase Vault immediately.
How to remove your data
Two paths:
- Self-serve disconnect. Visit your Settings page and click "Disconnect" on the Facebook panel. The Page Access Token is deleted from Vault immediately; we no longer can post to your Page.
- Full account deletion. Email wilson@wrootlabs.com and we will delete your church row, posts, source videos, rendered clip files, and Vault secrets within 7 days. See also our Data Deletion instructions.
Children
Echo is built for ministry contexts that include children's events (VBS, youth, baptisms). The current Echo Video product handles sermon clips only — no photo uploads, no children's faces. The future Echo Full photo pipeline will require explicit consent and minor-protection workflows before it ships. We're not there yet; when we are, this policy will be updated to describe how that works before any photo data is collected.
Changes
Material changes get a notice via your account email and a 30-day head start before they take effect. The "Last updated" date at the top is the canonical record. Non-material changes (clarifications, rewording) take effect immediately.
Contact
Wroot Labs LLC
Wilson Pruitt, founder
wilson@wrootlabs.com
Texas, USA