Privacy Policy

Last updated: June 2026

CEMETERRA ("we", "us", "our") operates the website and platform at cemeterra.com. This Privacy Policy explains what information we collect, how we use it, and your rights.

1. Information We Collect

• Account information: Name, email address, organization name, and country when you register.
• Cemetery records: Plot data, burial records, documents, photos, and any other data you upload to the platform.
• Usage data: Log files including IP addresses, browser type, pages accessed, and timestamps — for security and debugging purposes.
• Cookies: A secure HTTP-only authentication cookie and a CSRF protection cookie on the platform. On our public marketing pages we also use Google Analytics cookies to understand site traffic; these do not run on the authenticated dashboard. We do not use advertising cookies.

2. Legal Bases for Processing (EEA/UK)

When GDPR or equivalent laws apply, we process personal data under the following legal bases:

• Contract: To create and manage your account, provide the service, and perform our contractual obligations.
• Legitimate interests: To secure the platform, prevent fraud and abuse, troubleshoot issues, and improve reliability.
• Legal obligation: To comply with applicable legal, tax, accounting, and regulatory requirements.
• Consent: Where required by law for a specific processing activity, we will request consent and you may withdraw it at any time.

3. How We Use Your Information

• To provide and operate the CEMETERRA platform.
• To send transactional emails (account verification, password reset, task notifications).
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

4. Data Sharing

We do not sell your data. We do not share your personal information with third parties except:

• Email delivery: We use Brevo to send transactional emails. Your email address is transmitted to Brevo for this purpose.
• Payment processing: If you subscribe to a paid plan, payments are processed by Stripe. We do not store card details.
• Analytics: Our public marketing pages use Google Analytics to understand site traffic. Google receives standard analytics data (pages visited, referrer, approximate location, device type) for visitors to those pages; this does not run on the authenticated dashboard.
• Legal requirements: We may disclose information when required by law.

5. International Data Transfers

Your data may be processed in countries outside your own, including outside the European Economic Area. Where required, we use appropriate safeguards for international transfers, such as Standard Contractual Clauses and equivalent mechanisms provided by our service providers.

6. Public Memorial Pages

If you enable QR memorial pages for plots, the information you add to those pages (name, dates, biography, photo) will be publicly visible on the internet and may be indexed by search engines and AI systems.

7. Data Retention

We retain account data for as long as your account is active. After account closure, we retain data for a limited period where necessary for security, fraud prevention, legal compliance, dispute resolution, and enforcement of agreements. Backup copies are deleted or anonymized on a rolling schedule. You may request deletion at any time by emailing support@cemeterra.com.

8. Security

We use industry-standard security practices including encrypted connections (HTTPS), bcrypt password hashing, HTTP-only secure cookies, and CSRF protection. However, no internet service can guarantee absolute security.

9. Your Rights

Depending on your location, you may have rights to access, correct, export, restrict, object to, or delete your personal data, and to data portability where applicable. To exercise your rights, contact support@cemeterra.com. We may verify your identity before completing a request.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

10. Cookies

CEMETERRA uses strictly necessary cookies for authentication, session security, and CSRF protection across the platform. On our public marketing pages we also use Google Analytics cookies to measure traffic; these are not present on the authenticated dashboard and are not required for the site to function. See our Cookie Policy for details and opt-out options. If we introduce non-essential cookies beyond analytics, we will request consent where required by law.

11. Data Processing Roles

For most account and billing data, CEMETERRA acts as a data controller. For customer-uploaded cemetery records managed through your account, CEMETERRA generally acts as a data processor on your behalf, and you are responsible for ensuring you have a lawful basis for your uploaded personal data.

12. Contact

Questions about privacy or data protection? Email support@cemeterra.com.