Privacy Policy

Last Updated: June 2026

1. Overview

This Privacy Policy explains how Grievyn collects, uses, discloses, retains, and protects personal information when you visit our website, create or manage an account, publish or contribute to a memorial, upload media, request an export, contact us, make a payment, or otherwise use our services. Memorial pages may contain personal, family, cultural, and remembrance information, so we aim to handle that information with care and transparency.

2. Information You Provide

We collect information you provide directly, such as name, email address, account details, memorial content, media, contributions, contact and support messages, and voluntary product feedback. Feedback may include the page, locale, device viewport, app version, and an optional screenshot you choose to upload; we do not automatically capture screenshots or form contents. Payment details are handled by payment providers; Grievyn receives only limited transaction references.

3. Information Collected Automatically

We collect technical and usage information such as IP address, browser and device data, operating system, log data, cookie or similar identifiers, approximate location derived from technical data, referring pages, interactions with memorials and account tools, fraud and security signals, analytics events, and activity signals used to support free-plan inactivity reminders, archive decisions, and service reliability.

4. Public and Private Memorial Visibility

Public memorial pages and public contributions may be visible to anyone with access to the page and may be indexed by search engines, shared, copied, saved, screenshotted, or reposted by others. Private, invitation-only, or access-link memorials reduce visibility but do not prevent invited viewers from forwarding links or copying content. Choose memorial settings and content based on the level of visibility you and your family are comfortable with.

5. How We Use Information

We use information to provide, maintain, personalize, secure, and improve Grievyn; create, display, archive, restore, and export memorial pages; manage accounts, authentication, owner/admin permissions, invitations, and sharing; process payments and upgrades; send transactional, support, verification, refund, export, inactivity, archive, and service communications; moderate content; respond to requests; detect abuse, fraud, and security issues; analyze product performance; comply with legal obligations; and enforce our Terms.

6. Legal Bases

Depending on your location and the type of information involved, we process personal information based on performance of a contract, legitimate interests, legal obligations, consent, protection of rights and safety, or other lawful bases recognized by applicable law. Our legitimate interests include operating and improving the platform, protecting users and memorial content, preventing abuse, communicating about the service, honoring privacy choices, and maintaining platform security.

7. Service Providers and Payment Partners

We use service providers to operate Grievyn, including hosting and infrastructure providers, cloud storage and ImageKit media handling, Resend or other email delivery tools, Paddle for payment processing, analytics and product tools such as PostHog, Microsoft Clarity, Google Analytics where enabled, monitoring and error tools such as Sentry, security tools, support tools, and professional advisers. These providers may process information only as needed to provide services to us or comply with law.

8. Cookies and Analytics

We use cookies and similar technologies for essential site functions, authentication, security, preferences, analytics, performance measurement, and product improvement. You can control cookies through your browser settings and may be able to use device, browser, or provider tools to limit some analytics. Blocking certain cookies may affect login, security, memorial management, or payment flows.

9. Sharing and Disclosure

We do not sell personal information for money. We may disclose information to service providers, payment processors, memorial owners or admins, people you invite or authorize, visitors to public memorials, and others according to your privacy settings. We may also disclose information when required by law, to protect rights and safety, investigate misuse, enforce our Terms, respond to legal process, or as part of a business transaction such as a merger, acquisition, financing, or transfer of assets.

10. Sensitive Memorial Content

Memorials may involve sensitive personal, family, cultural, religious, health, child, identity, or relationship information. Do not submit private information about another person unless you have permission or another lawful basis and are comfortable with the memorial’s visibility setting. Avoid posting financial details, government identifiers, medical records, confidential documents, or information that could put someone at risk.

11. Retention, Archive, and Deletion

We retain personal information for as long as reasonably necessary to provide the service, maintain memorial pages, administer accounts, process payments, provide exports, comply with legal and accounting obligations, resolve disputes, enforce agreements, prevent fraud, and protect platform security. Free memorials with extended inactivity may receive reminders, export options, archive, and eventual deletion after 12 archived months. Yearly and Lifetime memorials are not subject to that free-plan inactivity archive workflow. Backups, logs, transaction records, and legal or security records may be retained for limited periods after deletion.

12. Security Measures

We use technical, administrative, and organizational safeguards designed to protect personal information, including encrypted transport, access controls, authentication protections, monitoring, logging, backups, and service provider controls. No internet service can guarantee absolute security, but we work to reduce risk and respond appropriately to suspected security issues.

13. Your Privacy Rights

Depending on applicable law, you may have rights to access, correct, delete, export, or restrict the processing of your personal information; object to certain processing; withdraw consent where processing is based on consent; appeal or complain about a privacy decision; or opt out of certain marketing communications. Some US state laws and international laws provide additional rights. We may need to verify your identity or authority before responding, and some requests may be limited by legal, safety, security, billing, memorial integrity, or technical requirements.

14. Children and Minors

Grievyn is not directed to children under 13, or a higher age where required by local law. We do not knowingly collect personal information from children without appropriate consent or authorization. Adults who create memorials or post content about minors are responsible for ensuring they have the authority to do so and that the selected visibility setting is appropriate. If you believe a child has provided information without proper authorization, please contact us.

15. International Transfers

Grievyn and our service providers may process information in countries other than where you live. Those countries may have privacy laws that differ from your local laws. Where required, we use appropriate safeguards for cross-border transfers, such as contractual protections, technical controls, and vendor diligence.

16. Policy Updates

We may update this Privacy Policy to reflect changes in our services, data practices, providers, legal requirements, or security measures. Material changes will be reflected by an updated effective date and, where appropriate, additional notice through the website, account interface, email, or other reasonable means.

17. Contact Us

If you have privacy questions, access or deletion requests, opt-out requests, concerns about memorial content, or questions about exports and archive/deletion, please contact us through the Contact page on Grievyn.