Privacy Policy

Last updated: March 1, 2026

GraveLink ("we", "us", or "our") operates the website gravelink.co (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

1. Information We Collect

We collect information in the following ways:

Information You Provide

  • Account information: When you sign in via Google OAuth, we receive your name and email address from Google.
  • Memorial content: Names, dates, biographical text, photographs, and other content you upload when creating a memorial page.
  • Guest book entries: Messages and names submitted to memorial guest books.
  • Contact form submissions: Your name, email address, and message when you contact our support team.
  • Newsletter subscriptions: Your email address if you subscribe to our newsletter.

Information Collected Automatically

  • Usage data: Pages visited, time spent, and interactions with the Service, collected via analytics tools.
  • Device information: Browser type, operating system, and IP address for security and performance purposes.
  • Cookies: Session cookies to maintain your signed-in state. We do not use third-party advertising cookies.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process payments and manage your account
  • Display memorial pages to visitors
  • Send transactional emails (account confirmation, payment receipts)
  • Send newsletter communications (only if you have subscribed)
  • Respond to support inquiries
  • Monitor and improve the performance and security of the Service
  • Comply with legal obligations

3. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share information in the following limited circumstances:

  • Service providers: We use Stripe for payment processing. Stripe's privacy policy governs the handling of your payment information. We do not store full credit card details.
  • Legal requirements: We may disclose information if required by law or in response to valid legal process.
  • Business transfers: If GraveLink is acquired or merged, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

4. Memorial Page Content

Memorial pages are publicly accessible by default. Any content you add to a memorial page — including names, photographs, biographical text, and guest book entries — may be viewed by anyone with the link or QR code. Please do not include sensitive personal information (such as financial details or private addresses) in memorial content.

You may request deletion of a memorial page and all associated content by contacting us at [email protected].

5. Data Retention

We retain your account information and memorial content for as long as your account is active or as needed to provide the Service. If you request deletion of your account, we will delete your personal data within 30 days, except where retention is required by law.

6. Security

We implement industry-standard security measures including HTTPS encryption, secure session management, and access controls to protect your information. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your personal data.
  • Objection: Object to certain processing of your data.
  • Portability: Request transfer of your data in a machine-readable format.

To exercise any of these rights, please contact us at [email protected].

8. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: