Privacy Policy

1. Data Collection

We collect information you provide directly, including your name, email address, phone number, billing information, and any content you upload to the Service (videos, photos, text, family tree data). We also automatically collect technical data such as IP address, browser type, device information, operating system, and usage patterns through cookies and similar technologies.

2. How We Use Your Data

We use your data to provide and improve the Service, process payments, send service-related communications, personalize your experience, generate AI biographies from your content, provide customer support, and comply with legal obligations. We do not sell your personal data to third parties. We may use anonymized, aggregated data for analytics and service improvement.

3. Data Sharing

We may share your data with trusted service providers who help us operate the Service (cloud hosting, payment processing, email delivery, AI processing). These providers are contractually bound to protect your data. We may also disclose data when required by law, to protect our rights, or in connection with a merger or acquisition. We will never share your User Content with third parties for their marketing purposes.

4. Cookies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, analyze usage, and improve our Service. You can manage cookie preferences through your browser settings. For more details, see our Cookie Policy. Essential cookies are required for the Service to function and cannot be disabled.

5. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your personal data (“right to be forgotten”).
• Right to Portability: Receive your data in a structured, machine-readable format.
• Right to Restrict Processing: Limit how we process your data.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

California Residents (CCPA): You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise these rights, contact us at privacy@yourpersonalstories.com.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., billing records, legal compliance). User Content in active memorial pages shared with others may be retained per those users' preferences.

7. Security

We implement industry-standard security measures to protect your data, including AES-256 encryption at rest, TLS 1.3 encryption in transit, regular security audits, access controls, and intrusion detection systems. While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We encourage you to use strong passwords and enable two-factor authentication.

8. International Transfers

If you are located outside the United States, your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, to protect your data during international transfers.

9. Contact

For privacy-related inquiries, data access requests, or to exercise your rights, contact our Data Protection Officer at privacy@yourpersonalstories.com or visit our Contact page.