Effective October 26, 2026 · Version 2026-10-26.1
Published memorials are public. Account, payment and complaint information is handled privately for the service, safety and legal needs described here. We do not sell personal information, build advertising profiles, or use advertising pixels or session replay.
1. Who is responsible and who the site is for
Canary Doctor LLC, the operator of GraveBot is responsible for the personal information described here. Contact support@grave.bot or write to 350C Fortune Ter #227, Potomac, MD 20854. This policy covers our website, accounts, submissions, purchases, support and reports. It does not cover the independent practices of websites linked from a memorial.
Public browsing is available globally. Accounts, submissions and purchases are limited to U.S. participants aged 18 or older. We do not knowingly accept children’s accounts or submissions. If we learn that a participant is under 18, we will restrict participation and investigate removal of the account and associated personal information, subject to necessary legal and safety records. Report an underage account to support@grave.bot.
2. Information we collect
- Account information: email address, authentication and account identifiers, sign-in and security information, eligibility confirmations and records of policy acceptance.
- Material you provide: names, epitaphs, images or logos, website links, funeral schedules, share text and your rights declaration. Private drafts and pending images are part of this information.
- Purchase records: the item, quantity, quoted price, payment and refund status, billing country and the payment references necessary to fulfill or reconcile the order. Stripe hosts payment collection; we do not receive your full payment-card details through our checkout.
- Support, reports and requests: contact details, the message and evidence you send, the affected content or order, and our response and resolution records.
- Technical information: network and device information necessary to deliver the website, service logs, request times, security and abuse-prevention information, and essential authentication storage. Hosting and infrastructure providers may process IP addresses and request metadata when serving the site.
- Preferences you choose: a music preference if you ask us to remember it on your device.
Please avoid submitting sensitive personal information, real-person memorials, unauthorized faces, identity documents or payment-card numbers. If a specific verification need arises, we will ask for the minimum appropriate information through a suitable channel.
3. What becomes public
Once approved and published, a memorial’s name, image or logo, epitaph, website link, plot location, headstone and scheduled funeral details are public. Approved sponsored placements and requested public share pages can display the same material. Public content is available worldwide and may be indexed by search engines, copied, linked or shared. Downloaded cards and third-party copies may persist after our display ends.
Your account email, internal owner identifier, private drafts, unpublished uploads, billing information and payment references are not public memorial fields. Reports and privacy complaints are handled with restricted access rather than displayed publicly. We may disclose a report or parts of it when necessary to investigate it, provide a fair response, comply with law or process a copyright claim.
4. Why we use information
We use information to create and secure accounts; check participation eligibility; save and moderate submissions; reserve and publish memorials; provide funerals and requested share material; process and reconcile payments and refunds; respond to support and rights requests; investigate abuse and legal claims; and maintain the service and required records.
Where a law requires a legal basis, these uses may rely on performing the service you request, legitimate interests in operating and securing it and resolving claims, compliance with legal obligations, or consent where required. Public browsing does not mean we use every listed basis in every jurisdiction. You may contact us about the basis relevant to your information.
We do not sell personal information or share it for cross-context behavioral advertising. We do not run advertising pixels, session-replay tools or optional analytics profiling. A sponsored convoy is a public placement purchased by a participant; it does not involve selecting viewers using a personal advertising profile.
Our recent-visit display uses aggregate cemetery page-navigation counts in short time bins, without assigning a visitor or session identifier. It counts visits, not unique people, and does not create an individual browsing history.
5. Service providers and other recipients
| Provider | Purpose and information involved |
|---|---|
| Supabase | Authentication, database records and private upload storage, including account identifiers, drafts, order references and submitted material. |
| Vercel | Website hosting and request delivery, including necessary request metadata, application processing and service logs. |
| Stripe | Hosted payment collection, billing, fraud controls, receipts and refunds. We retain necessary order and payment references and statuses. |
| OpenAI | Safety moderation of normalized submitted images and text such as the bot name, epitaph and requested share text. A moderation result may approve, reject or require a retry. |
| Resend | Delivery of authentication email, involving the recipient’s email and the authentication message. |
| CopyByte | Designated copyright-agent and copyright-report administration. A report may include claimant contact details, the claim, affected material and correspondence. See the copyright page for the assigned agent’s contact details. |
The optional local epitaph-writing aid selects from a fixed set of lines; it does not send a prompt to a generative AI service. Safety moderation is a separate process. This policy does not make an unsupported promise that a provider never retains information or uses it under a particular training setting; provider handling depends on the applicable service terms and settings.
We may also share information with people authorized to operate or support the service, professional advisers, authorities when legally required, parties necessary to investigate or defend a claim, or a successor in a business transaction subject to appropriate protections. We do not give an ordinary memorial visitor access to private account or payment records.
6. Cookies, local storage and privacy signals
We use essential authentication and security storage needed for sign-in, session integrity and abuse prevention. Music defaults to off. When you use the music button, we save your chosen on or off preference locally; an explicit on choice can be restored on a later visit. You may clear browser storage or use the site’s music controls. Blocking essential storage can prevent sign-in and account features.
We do not use optional advertising or analytics cookies, so there is no optional analytics consent banner. We do not create a cross-site advertising profile. We do not change these practices in response to a browser’s Do Not Track signal because no standard response is generally established. A Global Privacy Control signal does not activate a separate sale or targeted-advertising workflow because we do not engage in those activities; applicable opt-out rights remain available through a privacy request.
7. Retention and deletion
We retain information for the service you request, support and security needs, payment reconciliation, dispute resolution and applicable legal duties. Published material remains while its display is active unless removed for another reason. Closing an account does not automatically cancel a delivered purchase or erase records we must keep.
Our routine cleanup targets are abandoned private drafts after 90 days of inactivity when they have no order, checkout or purchased benefit, and rejected or unattached uploads after 30 days once they are no longer linked to retained content. Reports, moderation evidence, pending appeals and privacy reviews can require retention. These are operational cleanup targets, not promises that every infrastructure copy disappears at the same moment. Backups, provider retention, ongoing processing and legal holds can affect deletion timing.
We limit retained financial and acceptance records to what is needed under our documented retention schedule and applicable obligations. Reports, complaints and security evidence are retained only for their resolution, related safety needs and lawful recordkeeping. Legal holds can temporarily override routine cleanup. Ask us about the schedule that applies to your request; we do not promise an unverified universal backup-erasure deadline.
8. Security and processing locations
We use access controls, restricted upload storage and other reasonable safeguards appropriate to the information. Public artwork is served only after approval, and private service credentials are kept on the server. No website, transmission or storage system can be guaranteed completely secure.
Our providers may process information in the United States and other locations where they operate. We do not promise that every copy stays in one country or region. Where required by applicable law, transfers are subject to an appropriate legal mechanism and safeguards. Contact us for information about a transfer relevant to you.
9. Your choices and applicable rights
You can review your memorials through your account and use account privacy controls for available export, removal and closure requests. You can also use Privacy requests or email support@grave.bot. Provide enough information to locate the record; do not send passwords, sign-in links or payment-card details.
Depending on your residence, our legal obligations and whether a particular law applies, you may have rights to access, correct, delete or obtain a copy of personal information, restrict or object to processing, withdraw consent, appeal a request decision, or complain to a regulator. Some U.S. state rights have business-coverage thresholds; we do not represent that every visitor has the full set of rights under every state law. If the GDPR or a similar law applies, its applicable access, portability, objection, erasure and supervisory-authority rights remain available.
California residents may contact us about our privacy practices, including categories of information and recipients described above and any applicable disclosure or direct-marketing rights. We do not sell information or disclose it to third parties for their own direct marketing. This policy is intended to provide the online privacy disclosures required by applicable law, including CalOPPA where applicable.
We may need to verify a request and an authorized agent’s authority before disclosing or changing private information. We will not require more information than reasonably necessary. Exceptions may apply to security, others’ rights, legal records and unresolved transactions. We respond within the period required by applicable law, explain a denial where required and provide an appeal route through support@grave.bot. We do not penalize you for exercising a legally protected right.
10. Policy changes and contact
We update this policy when our practices or obligations change. The effective date and version appear above. We will provide additional notice or seek consent for material changes when required, and do not silently apply a new incompatible use to information previously collected.
For a question, complaint or request, contact support@grave.bot, use Privacy requests, or write to Canary Doctor LLC, 350C Fortune Ter #227, Potomac, MD 20854. Support is by email or mail.