Privacy Policy

Last Updated: May 2026

1. Overview

This Privacy Policy explains how Grievyn collects, uses, discloses, retains, and protects personal information when you visit our website, create or manage an account, publish or contribute to a memorial, contact us, make a payment, or otherwise use our services. Memorial pages may contain personal, family, cultural, and remembrance information, so we aim to handle that information with care and transparency.

2. Information We Collect

We collect information you provide directly, such as name, email address, account details, memorial details, life stories, photos, media, tributes, invitations, privacy settings, contact form submissions, and support messages. We also collect technical and usage information such as device data, browser type, IP address, log data, cookies or similar technologies, approximate location derived from technical data, and interactions with the platform. Payment information is handled by payment providers; Grievyn receives limited transaction details such as payment status, plan type, and provider references, but does not store full card numbers.

3. How We Use Information

We use information to provide, maintain, personalize, secure, and improve Grievyn; create and display memorial pages; manage accounts and authentication; process payments and plan upgrades; send transactional, support, and service communications; respond to inquiries; enable invitations and sharing; detect abuse, fraud, and security issues; analyze product performance; comply with legal obligations; and enforce our Terms.

4. Legal Bases

Depending on your location and the type of information involved, we process personal information based on performance of a contract, legitimate interests, legal obligations, consent, or other lawful bases recognized by applicable law. Our legitimate interests include operating and improving the platform, preventing abuse, protecting users and memorial content, communicating about the service, and maintaining platform security.

5. Sharing and Disclosure

We do not sell personal information. We may disclose information to service providers that help us operate Grievyn, such as hosting, cloud storage, email delivery, analytics, monitoring, security, customer support, and payment processing providers. Public memorial content may be visible to anyone who accesses a public page, and private memorial content may be visible to people with authorized access links or permissions. We may also disclose information when required by law, to protect rights and safety, to investigate misuse, or as part of a business transaction such as a merger, acquisition, financing, or asset transfer.

6. Data Retention

We retain personal information for as long as reasonably necessary to provide the service, maintain memorial pages, support account administration, comply with legal and accounting obligations, resolve disputes, enforce agreements, prevent fraud, and protect platform security. Retention periods vary based on the type of data, user settings, account status, legal requirements, and operational needs. When information is no longer needed, we delete, de-identify, or archive it using reasonable safeguards.

7. Security Measures

We use technical, administrative, and organizational safeguards designed to protect personal information, including encrypted transport, access controls, authentication protections, monitoring, logging, backups, and service provider controls. No internet service can guarantee absolute security, but we work to reduce risk and respond appropriately to suspected security issues.

8. Your Privacy Rights

Depending on applicable law, you may have rights to access, correct, delete, export, or restrict the processing of your personal information; object to certain processing; withdraw consent where processing is based on consent; or opt out of certain communications. We may need to verify your identity before responding, and some requests may be limited by legal, safety, security, billing, or technical requirements.

9. Children's Privacy

Grievyn is not directed to children under 13, or a higher age where required by local law. We do not knowingly collect personal information from children without appropriate consent or authorization. If you believe a child has provided personal information to Grievyn without proper authorization, please contact us so we can review and take appropriate action.

10. International Transfers

Grievyn and our service providers may process information in countries other than where you live. Those countries may have privacy laws that differ from your local laws. Where required, we use appropriate safeguards for cross-border transfers, such as contractual protections, technical controls, and vendor due diligence.

11. Policy Updates

We may update this Privacy Policy to reflect changes in our services, data practices, legal requirements, or security measures. Material changes will be reflected by an updated effective date and, where appropriate, additional notice through the website, account interface, or other reasonable means.

12. Contact Us

If you have privacy questions, requests, or concerns about memorial content, please contact us through the Contact page on Grievyn.