Privacy policy

Last update: 12/08/2026 · In accordance with Paraguay Personal Data Protection Law No. 7593/2025

1. Who we are and data controller

EXA (exa.com.py) is the alumni network of Paraguay, operated by Grupo SAT SRL, Asunción, Paraguay. We are the Data Controller of the personal data you entrust to us.

2. What data we process

We process the data you provide: name, email, photos, education history, optional contact info, posts, connections and platform activity. With Google/Facebook sign-in we receive your name, email and photo. We do not process sensitive data.

3. Purposes

Providing the service (profile, classmate matching, messages, groups), security, service communications, and anonymous aggregate metrics. We never repurpose your data without new consent.

4. Legal basis

Contract performance (Terms of Use), express consent (revocable) for optional features like analytics cookies, and legitimate interest in security. We apply data minimization.

5. Sharing

Your profile is visible according to YOUR privacy settings, field by field, including Private Profile (visible only to people who shared a school or university with you). We never sell your data. Tech providers act as Processors under confidentiality.

6. Security and breaches

Technical and organizational measures by design: bcrypt passwords, HTTPS, secure sessions. Incidents affecting your data will be notified within 72 hours per Law 7593/2025.

7. Retention

We keep your data while your account is active. If you delete your account, your profile becomes invisible immediately and data is deleted or anonymized within applicable periods.

8. Your rights

Exercise them free from your account: Access/Portability (download your data as JSON under Privacy), Rectification (edit your profile), Erasure (delete your account with immediate effect), Objection (configure visibility and Private Profile).

9. Cookies

Essential cookies work without consent; analytics (Google Analytics) are ONLY activated if you expressly accept them in the banner, with equally easy rejection.

10. Minors

EXA is intended for adult alumni. Unauthorized accounts of minors will be removed.

11. Contact

For questions or claims about your personal data, write through the contact page. You may also file a claim with the Law 7593/2025 authority.