Privacy Policy

What we collect

Your account. Your email address, your password (kept by our sign-in provider in a form we can’t read), your name, your confirmed time zone, and a record of which versions of our Terms and this policy you agreed to and when.

Your profile, if you choose to fill it in. Your legal name and any other names you use, your date of birth, where you live, your home address and a second address, other email addresses and phone numbers, how you prefer us to contact you, notes for our team about checking on you, and a profile photo. Every part is optional. Only you and our team can see your profile, and we never show it on your Memorial. We use your date of birth and address to help confirm that a report of a death is about you, and your contact details and notes to reach you.

Your Memorial Pages. The words, photos and videos you add, your design choices, saved versions, and release settings. We check each uploaded file and convert it so that it displays in browsers.

People you tell us about. Please let them know you’ve shared their details.

• People to let know when your page is published: their email addresses.
• Trusted contacts: name, relationship, email and phone.
• A death-confirmation contact, if you choose one.
• Possible future hosting sponsors, if you choose to list them: their names, email addresses and relationship to you. We only store them: we don’t use them or contact these people until a sponsor feature exists, and they are deleted when the Memorial is deleted.

Check-ins. Your schedule, time zone, the dates of each check-in and your responses, the reminders we send, and our team’s notes when we try to reach you or your trusted contacts.

Death reports and emails to us. What people send to contact@thereafter.life, including reports of a death, and our team’s notes and decisions about them.

Payments. Stripe, our payment provider, collects your card details, billing address and the US service address used for tax. We never see or store your full card number. We receive and keep the amounts, tax, dates, payment status and Stripe reference numbers. If you turn on automatic renewal, we also keep the exact wording you agreed to and when.

Visitors to published pages. If a page has a guestbook, the name and message a visitor posts. To play a page’s photos and videos, we set a short-lived, secure cookie that only our site can read. Visitors don’t need an account.

Technical information. A record of each sign-in. Error reports when something breaks (see Sentry below). When you load our pages, your browser fetches our fonts from Google, which receives your IP address. Our hosting provider measures overall visitor numbers.

How we use it

We use this information to:

• run your account and your Memorial Pages;
• send check-ins and reminders;
• look into reports of a death and verify them;
• publish your page and let the people you chose know;
• take payments, work out tax and send receipts;
• answer you;
• keep the service secure and prevent misuse;
• meet legal obligations.

We never sell your information or use it for advertising. We don’t use your Memorial content to train AI models.

Who can see it

• You, through your account.
• Our team. Authorised members of our team can see your account and Memorial content so they can support you, review your page before publication, and handle reports. They act only for those purposes.
• After publication, anyone with your page’s link (or, for a searchable page, anyone) can see the published page and its guestbook.
• Your trusted contacts and death-confirmation contact. We contact them only when we need to, as described in our Terms.
• Nobody else. Other customers can’t see anything of yours. This is enforced by the database itself.

Service providers

These companies process information for us only to run the service:

• Lovable (Lovable Cloud, built on Supabase): Hosts our website, database, sign-in and stored photos and videos; sends our emails from notify.thereafter.life; measures overall traffic.
• Stripe (United States): Takes payments, works out tax (Stripe Tax), sends receipts, runs automatic renewals.
• GitHub (Actions) (United States): Checks uploaded photos and videos and converts them on temporary machines, which are discarded after each job.
• Sentry (Functional Software, Inc.) (United States): Error monitoring. It receives technical details of an error, with email addresses and other identifiers removed, and never your account details, writing or files.
• Zoho Mail: Our contact@thereafter.life mailbox.
• Google (United States): A copy of contact@thereafter.life email in our team’s Gmail; website fonts.
• Customer support: Service providers that help us run customer support (such as email and support tools).

We share information outside these providers only when you direct it (for example, publishing your page) or when the law requires it.

How long we keep it

Your account

While it is open. When you ask us to delete it, we delete it, except records we must keep (below).

A Memorial Page, its media and guestbook

While it is in use. When its hosting ends, it goes offline and is kept privately for 90 days, and then our team deletes it. A page that was never published and never had hosting may be deleted once all its editing time has ended.

Future hosting sponsors you listed

Until you remove them or the Memorial is deleted.

Payment, tax and consent records

At least 4 years, which is how long Maryland requires us to keep sales tax and refund records, or longer if the law requires.

Sign-in and activity records

As long as we need them to keep the service secure. Some audit records can’t be altered.

Emails to contact@thereafter.life

As long as we need them to answer you and handle any report, in Zoho and in our team’s Gmail.

Backups

Our database provider keeps a daily backup for about 14 days, so deleted information can stay in backups for up to 14 days.

Error reports

Up to 90 days.

Photo and video processing logs

Up to 90 days. They don’t contain your photos or videos.

How we protect it

• All traffic uses encrypted connections.
• Photos and videos sit in private storage and are shown only through short-lived links.
• The database itself keeps each account’s data separate.
• Signed-in sessions can be cut off at once if an account is restricted.

No system is perfectly secure, and we’ll tell you if a breach affects your information, as the law requires.

Your choices

• You can see and change most of your information in your account.
• You can turn off automatic renewal and hosting update emails at any time.
• To get a copy of your information, correct it or delete it, email contact@thereafter.life. We may need to confirm it’s you. We reply within 48 hours. Some records can’t be deleted while the law requires us to keep them.

Cookies and browser storage

We don’t use advertising or tracking cookies. Our site stores your sign-in in your browser so you stay signed in. It may keep details of a payment in progress so you aren’t charged twice. It sets one short-lived, secure cookie to play photos and videos on published pages. Signing out clears your sign-in.

Children

Our service is for adults. We don’t knowingly collect information from children under 13, and accounts are for people 18 and over.

Changes to this policy

Each version has a version identifier and an effective date. If we make a material change, we email account holders before it applies.

Contact

Email contact@thereafter.life with any privacy question or request.