Privacy Policy
Last updated: October 2026
CEMETERRA ("we", "us", "our") operates the website and platform at cemeterra.com. This Privacy Policy explains what information we collect, how we use it, and your rights.
1. Information We Collect
- Account information: Name, email address, organization name, and country when you register.
- Cemetery records: Plot data, burial records, documents, photos, and any other data you upload to the platform.
- Usage data: Log files including IP addresses, browser type, pages accessed, and timestamps — for security and debugging purposes.
- Cookies: A secure HTTP-only authentication cookie and a CSRF protection cookie on the platform. On our public marketing pages we also use Google Analytics cookies to understand site traffic; these do not run on the authenticated dashboard. We do not use advertising cookies.
2. Legal Bases for Processing (EEA/UK)
When GDPR or equivalent laws apply, we process personal data under the following legal bases:
- Contract: To create and manage your account, provide the service, and perform our contractual obligations.
- Legitimate interests: To secure the platform, prevent fraud and abuse, troubleshoot issues, and improve reliability.
- Legal obligation: To comply with applicable legal, tax, accounting, and regulatory requirements.
- Consent: Where required by law for a specific processing activity, we will request consent and you may withdraw it at any time.
3. How We Use Your Information
- To provide and operate the CEMETERRA platform.
- To send transactional emails (account verification, password reset, task notifications).
- To detect and prevent fraud, abuse, and security incidents.
- To comply with legal obligations.
4. Data Sharing
We do not sell your data. We do not share your personal information with third parties except:
- Email delivery: We use Brevo to send transactional emails. Your email address is transmitted to Brevo for this purpose.
- Payment processing: If you subscribe to a paid plan, payments are processed by Stripe. We do not store card details.
- Analytics: Our public marketing pages use Google Analytics to understand site traffic. Google receives standard analytics data (pages visited, referrer, approximate location, device type) for visitors to those pages; this does not run on the authenticated dashboard.
- Legal requirements: We may disclose information when required by law.
5. Text Messaging (SMS)
If CEMETERRA sends you text messages about a cemetery record you're connected to (for example maintenance updates or pre-need payment reminders), it is because you opted in yourself: by ticking the optional, unchecked text-message box when you electronically signed a pre-need contract or interment authorization, or by turning on Text Updates in the family portal. Cemetery staff cannot opt you in on your behalf. When you opt in we store the mobile number you entered, the consent wording you agreed to, and the date, time and IP address of your agreement, as a record of your consent. We then send one text asking you to reply YES; no other message is sent until you do. You can reply STOP at any time to opt out, or HELP for help. Message frequency varies by cemetery and by activity on your record, typically no more than a few messages per month. No mobile information will be sold or shared with third parties for promotional or marketing purposes. Mobile opt-in data and consent are not shared with any third party except our SMS delivery provider (Telnyx), solely to deliver the messages you've consented to receive. Message and data rates may apply. Consent to receive these messages is not a condition of using CEMETERRA or of any purchase.
6. International Data Transfers
Your data may be processed in countries outside your own, including outside the European Economic Area. Where required, we use appropriate safeguards for international transfers, such as Standard Contractual Clauses and equivalent mechanisms provided by our service providers.
7. Public Memorial Pages
If you enable QR memorial pages for plots, the information you add to those pages (name, dates, biography, photo) will be publicly visible on the internet and may be indexed by search engines and AI systems.
8. Data Retention
We retain account data for as long as your account is active. After account closure, we retain data for a limited period where necessary for security, fraud prevention, legal compliance, dispute resolution, and enforcement of agreements. Backup copies are deleted or anonymized on a rolling schedule. You may request deletion at any time by emailing support@cemeterra.com.
9. Security
We use industry-standard security practices including encrypted connections (HTTPS), bcrypt password hashing, HTTP-only secure cookies, and CSRF protection. However, no internet service can guarantee absolute security.
10. Your Rights
Depending on your location, you may have rights to access, correct, export, restrict, object to, or delete your personal data, and to data portability where applicable. To exercise your rights, contact support@cemeterra.com. We may verify your identity before completing a request.
If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.
11. Cookies
CEMETERRA uses strictly necessary cookies for authentication, session security, and CSRF protection across the platform. On our public marketing pages we also use Google Analytics cookies to measure traffic; these are not present on the authenticated dashboard and are not required for the site to function. See our Cookie Policy for details and opt-out options. If we introduce non-essential cookies beyond analytics, we will request consent where required by law.
12. Data Processing Roles
For most account and billing data, CEMETERRA acts as a data controller. For customer-uploaded cemetery records managed through your account, CEMETERRA generally acts as a data processor on your behalf, and you are responsible for ensuring you have a lawful basis for your uploaded personal data.
13. Contact
Questions about privacy or data protection? Email support@cemeterra.com.