Privacy Policy
1. About Us
Concora is an AI-powered Bible study and preaching assistance tool operated by Relead Pty Ltd (61688610611), a company registered in Queensland, Australia.
In this Privacy Policy, "Concora," "we," "us," and "our" refer to Relead Pty Ltd. "You" and "your" refer to any person who accesses or uses the Concora application at concora.app.
We are committed to protecting your privacy and handling your personal information responsibly in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. Information We Collect
2.1 Account Information
When you create a Concora account, we collect:
- Your email address
- A username or display name of your choosing
- A hashed password (we never store your password in plain text)
- Your profile avatar image, if you choose to upload one
We do not collect your full name, date of birth, phone number, physical address, or any other personal identifying information beyond what is listed above.
2.2 Payment Information
If you subscribe to a paid plan, payment is processed by Stripe, Inc., a third-party payment processor. We do not collect, store, or have access to your credit card number, bank account details, or any other full payment card information.
We store only the following Stripe-provided identifiers in our database for subscription management purposes:
- Your Stripe customer ID
- Your Stripe subscription ID
- Your subscription status (e.g. trialing, active, canceled)
- Your current billing period end date
2.3 Audio and Voice Data
When you start a sermon session, Concora listens via your device's microphone. Unlike some voice applications, this audio is not processed entirely on your device. Here is exactly how it works:
- Your device's microphone audio is streamed, in real time, directly from your browser to Deepgram, Inc., a third-party speech-to-text service, for transcription. This connection is authorised by a short-lived access token issued by our servers; the audio itself is sent directly to Deepgram, not routed through or stored by us.
- The transcript text produced by Deepgram is then sent to two further third parties for the purpose of identifying and surfacing relevant Bible passages: OpenAI, to generate a numerical representation of the text used for matching against scripture, and Anthropic (the Claude API), to confirm and refine the specific verse identified.
- Neither raw audio nor transcript text is stored by us at any point. Processing happens in real time, for the sole purpose of surfacing scripture during your active session.
By using Sermon Mode, you consent to your microphone audio being transmitted to Deepgram, and to derived transcript text being transmitted to OpenAI and Anthropic, for this purpose.
2.4 Usage and Technical Data
We may collect limited technical information necessary to operate the service, including:
- Authentication events (sign in, sign out, password reset)
- Subscription lifecycle events (trial start, plan change, cancellation)
- Error logs where required for diagnosing service issues
We do not use analytics tracking tools, advertising pixels, or behavioural tracking technologies on our platform.
2.5 Marketing and Communications Data
If you sign up for Concora, your email address and username are shared with GoHighLevel, our marketing and customer communications platform, so that we can send you onboarding and lifecycle emails (such as a welcome message) and keep our records of your contact details up to date. You can opt out of marketing communications at any time; this does not affect transactional emails necessary to operate your account (such as password resets or billing notices).
3. How We Use Your Information
We use the information we collect solely for the following purposes:
- To create and manage your Concora account
- To provide, operate, and maintain the Concora application, including real-time scripture detection during sermon sessions
- To process your subscription payments through Stripe
- To send you transactional emails (account confirmation, password reset, subscription notices) and, where applicable, marketing/onboarding communications
- To diagnose and resolve technical issues
- To comply with our legal obligations
We do not use your data for advertising purposes. We do not sell, rent, or trade your personal information to any third party. We do not use your data to train AI models, and none of our AI processing partners use your data to train their models under their respective API usage policies.
4. Third-Party Services
Concora uses the following third-party service providers to operate the application. Each provider processes data only as necessary to perform their specific function:
4.1 Supabase
Supabase provides our authentication system and database infrastructure. Your account information (email, hashed password, username) and subscription data are stored in a Supabase-hosted database. Supabase is SOC 2 Type II certified. Data is stored in AWS data centres. See supabase.com/privacy.
4.2 Deepgram
Deepgram provides real-time speech-to-text transcription. During an active sermon session, your microphone audio is streamed directly from your browser to Deepgram for transcription. See deepgram.com/privacy-policy.
4.3 OpenAI
OpenAI's embedding models are used to generate a numerical representation of transcript text, which is used to identify candidate Bible verses that may match what was spoken. See openai.com/policies/privacy-policy.
4.4 Anthropic
Anthropic provides the Claude API, used to confirm and refine the specific Bible verse identified from transcript text. Anthropic does not use API inputs to train its models by default under its API usage policy. See anthropic.com/privacy.
4.5 Stripe
Stripe processes all subscription payments. Stripe collects and stores your payment card details directly and is PCI DSS Level 1 certified. We do not handle your payment card data. See stripe.com/privacy.
4.6 Resend
Resend provides delivery for transactional account-related emails, including signup confirmation and password reset emails. Your email address is shared with Resend for the sole purpose of delivering these emails. See resend.com/privacy.
4.7 GoHighLevel
GoHighLevel is our marketing and customer communications platform. Your email address and username are shared with GoHighLevel to manage onboarding emails and general communications about your account. See gohighlevel.com/privacy-policy.
4.8 Cloudflare
Cloudflare hosts the Concora web application and provides DNS and network security services. Cloudflare may process connection metadata and standard web server logs as part of hosting and network operations. See cloudflare.com/privacypolicy.
4.9 Bolls Life
Bolls Life provides the Bible verse text API used to retrieve and display scripture passages in your selected translation. When you request a verse or passage within the app, the verse reference is sent to the Bolls Life API to retrieve the corresponding text. No personal information is transmitted to Bolls Life — only the verse reference (e.g. "John 3:16") and translation identifier. See bolls.life.
5. Data Storage and Security
Your account data is stored in Supabase-hosted databases with the following protections:
- Row Level Security (RLS) policies ensure each user can only access their own data
- All data is transmitted over HTTPS using TLS encryption
- Passwords are hashed and never stored in plain text
- Authentication is managed through Supabase Auth with JWT-based session tokens
While we take reasonable steps to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal data for as long as your account remains active. If you delete your account, your profile information and subscription records are permanently deleted from our database, along with any uploaded avatar image. Deletion is processed immediately upon request.
Stripe may retain billing records for their own legal and compliance purposes in accordance with their privacy policy.
Audio and transcript text are not retained by us at any point; they are processed transiently, in real time, and discarded once a scripture match has been surfaced or the session ends.
7. Your Rights
Under the Australian Privacy Act 1988 (Cth) and applicable privacy laws, you have the following rights:
- Access: You may request a copy of the personal information we hold about you
- Correction: You may request that we correct inaccurate or incomplete information
- Deletion: You may delete your account at any time from within the app, which permanently removes your data from our systems
- Portability: You may request a copy of your data in a portable format
- Complaint: You have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au
To exercise any of these rights, contact us at [email protected].
8. Children's Privacy
Concora is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child under 13 has created an account, please contact us at [email protected].
9. International Users
Concora is operated from Queensland, Australia. If you access Concora from outside Australia, your information may be transferred to and processed in Australia and in the countries where our third-party providers operate (including the United States). By using Concora, you consent to this transfer.
If you are located in the European Economic Area (EEA), the United Kingdom, or other regions with data protection laws, you may have additional rights. Please contact us at [email protected] for further information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this document and notify you by email if the changes are material. Your continued use of Concora after any changes constitutes your acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:
Relead Pty Ltd
Trading as Concora
Queensland, Australia
Email: [email protected]
Website: concora.app