Privacy Policy

1. Information We Collect

• Personal Information: Your name and email address whenever you register an account, your mobile number if you choose to give it to us, and payment details handled by trusted outside processors such as Stripe when you choose to complete a purchase. Payment details are collected and stored by Stripe under Stripe's own privacy policy, not by us. Lovekept never receives or keeps your full card number.
• Fundraiser Data: Should you start or give to a Memorial Fundraiser, we and our payment processor Stripe gather what is needed to handle donations and payouts. From donors, we collect your name and email address at checkout, the amount you give, and whether you chose to give anonymously. Unless you gave anonymously, your name and donation amount appear publicly on the memorial. Your email address is never displayed publicly, and organizers do not see donor email addresses in the Service today; we use it to send receipts and to process refunds. For organizers, the identity and bank information that payouts require, meaning your Social Security number, date of birth, photo ID, and bank account details, is collected directly by Stripe under Stripe's own privacy policy. Lovekept does not store your Social Security number, identity documents, or bank account numbers. Lovekept retains only your verification status, your payout state, and an opaque bank-account fingerprint used for fraud prevention. Lovekept does not receive or keep organizer bank details beyond that fingerprint, and that applies to our internal system logs as well. Section 15 of our Fundraising Terms covers donor information and privacy in more detail.
• Mobile Number and Text Message Consent: Adding a mobile number is optional, when you create an account or later in your account settings. Entering a number means you agree to receive the text messages described in our Terms of Service at it, and we keep a record of that agreement: the number, the exact wording you were shown, the date and time, the page where you entered it, a one-way hashed (HMAC-SHA256) form of your IP address, and your browser's user agent. We record opt-outs, number changes, and removals the same way. Your mobile number is never displayed on a memorial and cannot be seen by other users.
• Memorial Content: The photographs, video, obituaries, guestbook messages, and other tributes you choose to add to a memorial page. Unless you change this, memorial pages can be seen by anyone.
• Usage Data: Technical signals your device sends automatically, including your IP address, browser and operating system, device characteristics, the page that referred you, and the pages you open. To learn how the platform is used and to make it faster, we rely on PostHog for product analytics and Google Tag Manager for event tracking.
• Advertising Attribution Log: When you arrive from one of our own ads, we record on our servers the advertising click identifier that the ad network placed in the web address (for example Google's gclid, gbraid, or wbraid, or Microsoft's msclkid) together with a one-way hashed (HMAC-SHA256) form of your IP address, your browser's user agent, and the page you landed on. We keep these records for at most 7 days and use them for a single purpose: to reconcile which of our ads brought a signup when the click identifier is lost between your browser and the moment you create an account, for instance when you switch from an in-app browser to another browser or from a phone to a computer. We never store your readable IP address, and only the advertising click identifier the network itself issued is ever shared back with that network. This log is recorded only where your consent settings allowed advertising measurement when the visit began, and never if your browser sends the Global Privacy Control signal or you declined our cookie banner.
• Drafting Tool Data: When you turn to our assisted writing features, such as the obituary writer, or save a draft through the Lovekept app in ChatGPT or Claude, we work with whatever information you supply as the prompt. The drafts these tools return come from outside technology partners and may be saved as part of your memorial content.
• Sensitive Data Disclaimer: When you build a memorial or publish tributes, stories, or obituaries, you expressly consent to the public processing of any sensitive personal data you decide to include, for instance a person's health history, religious beliefs, or political opinions. You confirm that you are entitled to share that information and accept that it will be openly accessible.

2. Cookies and Tracking Technologies

To run, protect, measure, and refine the Service, we use cookies and comparable tools, browser local storage among them. A cookie is simply a small file saved to your device when you arrive at our site.

• Strictly Necessary: Needed for the Service to work at all, for example keeping you signed in and managing your session through our provider Supabase, routing and protecting requests through our host Vercel, and remembering the cookie preference you set. These cannot be switched off.
• Analytics (consent-gated): Placed by PostHog, and where we have enabled them Google Tag Manager, Google Ads, and Reddit Ads, to show us how the Service is used so we can improve it. Analytics load only where permission allows, as described below.

If your browser's time zone suggests you are probably in the European Economic Area or the United Kingdom, we present a cookie banner and hold back every analytics cookie until you select "Accept." Choosing "Reject" means no analytics cookies load. Visitors in other regions may have analytics enabled by default and can opt out whenever they wish through their browser controls. We store your selection in your browser so that we can respect it.

Your browser settings also let you block or clear cookies, though turning off the strictly necessary ones may stop you from signing in or using key features. We work to meet the cookie consent rules that apply to us, including the GDPR and the ePrivacy Directive for people in the European Economic Area and the United Kingdom. Our Cookie Policy lists in full the cookies and storage we rely on and how to adjust your choices.

3. How We Use Your Information

• Running our memorial services, keeping them working, and improving them over time.
• Completing your transactions and sending order confirmations.
• Reaching out about your account, product updates, or the help you have requested.
• Delivering memorial digest emails when you have subscribed to a memorial's updates.
• Sending the text messages you have agreed to receive, such as new guestbook messages, donation alerts, and service reminders, sending one text to confirm your sign-up before any others, and keeping a record of your agreement and any opt-out.
• Producing draft content at your request, such as obituary drafts.
• Reviewing content so that it stays within our Terms of Service.
• Watching over the security and integrity of the platform.
• Meeting our legal obligations.

4. Data Sharing and Disclosure

• Service Providers (Subprocessors): Some of your data goes to vetted outside vendors that help us run the Service: payments (Stripe, and, for flower orders, Authorize.net, the payment processor used by our flower partner Florist One, which receives the card details you enter directly from your browser); our database, authentication, and file storage (Supabase); site hosting and delivery (Vercel); transactional email (Resend); text message delivery (Telnyx), which receives your mobile number and the content of the texts we send you; product analytics (PostHog), plus Google Tag Manager, Google Analytics, Google Ads, and Reddit Ads where we have enabled them; flower fulfillment (Florist One); tree planting fulfillment (1ClickImpact); and the assisted generation and moderation of content, including obituary drafting and content review (Google's Gemini API and OpenAI, which receive the input you provide). Contracts require these providers to safeguard your data and to use it solely in performing work for us.
• Text Messaging: We do not sell, rent, or share your mobile number or your text message consent with third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from every other category of sharing in this policy and are not shared with any third party, except our text messaging provider, Telnyx, which uses them solely to deliver the messages you asked for, and where the law requires disclosure.
• Legal Requirements: We may hand over information where the law, a subpoena, a court order, or another legal process compels us, or where doing so protects the safety, rights, or property of Lovekept or other people.
• Business Transfers: Should we undergo a merger, acquisition, restructuring, or a sale of all or substantially all of our assets, user information may pass along as part of that transaction. Before your personal information falls under a different privacy policy, we will tell you by email or through a clear notice on the Service.
• Advertising Measurement: We never sell your personal data. To learn whether our own advertising brought someone to Lovekept, we may share a one-way hashed (SHA-256) version of your account email address with Google through its Enhanced Conversions service, solely so Google can match a signup or purchase back to a click on one of our ads. This happens only when the memorial involved was created from a visit that began with one of our Google ads, only where your consent settings allowed advertising measurement when that visit was recorded, and never if your browser sends the Global Privacy Control signal or you declined our cookie banner; an opt-out made later while signed in is stored against your account and honored from then on. Google never receives your readable email address, your name, your phone number, memorial content, or browsing history from this process. Beyond that single measurement practice, we do not disclose your personal data to outside parties for cross-context behavioral advertising or tracking; Section 9 explains the opt-out rights this practice carries in California.
• Protection of Memorial Authors: We guard our users' privacy closely. We will not reveal a memorial author's identity, email address, or other personal information to anyone who asks, whether an individual or a third party, unless the author has clearly authorized it or a valid legal process such as a court order or subpoena requires it.
• Fundraiser Payouts: Where Memorial Fundraisers are concerned, we share donation and organizer information with our payment processor Stripe, using Stripe Connect, so that donations can be processed, required identity verification can run, and payouts can reach organizer-controlled connected accounts. Stripe collects organizer identity and bank-account information directly. Donor names and donation amounts appear on the memorial as Section 1 describes; donor email addresses are used for receipts and refund processing and are never displayed publicly.

5. Data Retention

So that a loved one's legacy endures, we keep memorial data indefinitely unless the account holder or an authorized family member asks us to remove it. Account and transaction records are held for as long as our legal and accounting obligations require. A mobile number you add is kept until you remove it or your account is deleted. The record of your text message agreement and any opt-out is kept for five (5) years after the agreement ends, even after the number or account is deleted, because it is the proof that we had your permission to text you. When an account is closed, we handle your data as set out in Section 12 of our Terms of Service.

If you use Memorial Fundraisers, records of donations, refunds, payouts, and identity-verification outcomes are kept for as long as tax, accounting, anti-fraud, and other legal obligations require, even after the related account or memorial is deleted. The identity and bank information that Stripe collects directly is retained under Stripe's own policies.

6. Security

We protect your data with widely used safeguards, among them SSL/TLS encryption, hardened servers, and access controls. Even so, no way of sending information across the Internet or storing it electronically is completely secure, and we cannot promise absolute security.

If a breach ever affects your personal information, we will notify you and the relevant regulators to the extent the law requires, and take commercially reasonable steps to limit the impact.

7. Your Rights and Choices

• Access and Correction: From your account settings you can view and change certain details, such as your email address, password, and mobile number. If you own a memorial, you can edit its content yourself and delete it from your dashboard.
• Deletion: To have your account and its personal data deleted, email support@lovekept.co from the address tied to your account so that we can confirm it is you. We aim to reply within thirty (30) days. Bear in mind that material others have posted in public areas, such as guestbook entries, and anything we must keep for legal, accounting, or security reasons may remain as Section 5 describes, and memorials may be kept in a read-only state as explained in our Terms of Service.
• Data Export and Portability: You can ask for a copy of your personal data in a structured, commonly used format by writing to support@lovekept.co from your account email address. Once we have confirmed your identity, we respond within thirty (30) days. For now, our support team processes export and deletion requests by hand rather than through an automated in-app tool.
• Cookies: Your browser settings let you control or switch off cookies. Section 2 covers this in more detail.
• Text Messages: Reply STOP to any text from us to stop receiving texts, or HELP for help. You can also add, change, or remove your mobile number at any time in your account settings. Stopping texts does not affect your emails, and declining texts never limits what you can do on the Service.
• Marketing Communications: To stop promotional emails, follow the "unsubscribe" instructions in any message we send, and you may leave memorial digest emails at any time. Note that opting out of marketing does not end the transactional messages about your account, such as payment receipts or security updates, which will still reach you.

8. Children's Privacy

The Service is meant for adults and is not designed for anyone under the age of 18, and we do not knowingly gather personal information from people in that age group. If we learn that we have collected such information from someone under 18, we delete it without delay. Should you believe a person under 18 has given us personal information, please write to us at support@lovekept.co.

9. California Privacy Rights

California residents hold specific rights under the California Consumer Privacy Act and the California Privacy Rights Act (CCPA/CPRA). These include:

• The right to know what personal information we collect, use, and disclose;
• The right to request deletion of your personal information;
• The right to opt out of the sale or sharing of personal information. We do not sell personal information. The one practice California law may treat as "sharing" is the hashed-email advertising measurement described in Section 4, and you can opt out of it at any time: we honor the Global Privacy Control browser signal automatically and treat it as a valid opt-out request, declining our cookie banner has the same effect, and you may also email support@lovekept.co;
• The right to non-discrimination for exercising your privacy rights.

To use any of these rights, contact us at support@lovekept.co. We confirm your identity before acting on a request and respond within the periods the law sets.

10. Rights for Users in Europe and the UK

If you are in the European Economic Area (EEA) or the United Kingdom (UK), you hold specific rights under the General Data Protection Regulation (GDPR) and the UK GDPR:

• Legal Basis for Processing: Our processing rests on: (a) contractual necessity, to deliver the memorial services you request; (b) consent, for the sensitive data you choose to include in memorial content, for non-essential cookies, and for the text messages you agree to receive; and (c) legitimate interests, to secure, improve, and market our platform where those interests are not overridden by your data protection rights.
• Your Rights: You may request access to your personal data, correct inaccuracies, ask for erasure (the "right to be forgotten"), restrict processing, object to processing we base on legitimate interests, and receive your data in a portable, machine-readable format.
• Withdrawal of Consent: Where consent is our basis for processing, you can withdraw it at any time. Withdrawal does not affect the lawfulness of any processing carried out before you withdrew.
• Complaints: If you believe your rights have been violated, you may lodge a complaint with your local data protection supervisory authority.

11. International Data Transfers

Lovekept is based in the United States. When you reach the Service from another country, your information may be sent to, held, and processed here, under data protection laws that can differ from those where you live. For personal data moving from the EEA or the UK to the United States, we depend on the appropriate legal safeguards, including the European Commission's Standard Contractual Clauses where they are required, to keep your data adequately protected. By using the Service, you consent to your information being transferred to the United States and to the other jurisdictions where we or our service providers operate.

12. Using Lovekept in ChatGPT and Claude

Lovekept offers an app inside ChatGPT, the assistant operated by OpenAI, and inside Claude, the assistant operated by Anthropic, that lets you write an obituary, create and manage a memorial, start a Memorial Fundraiser, and send sympathy flowers from a ChatGPT or Claude conversation, and helps you plan: it estimates funeral and cremation costs, finds funeral homes, and finds programs that can help pay for a funeral. This section explains how that app handles your information. Everything else in this Privacy Policy applies to it as well.

• What We Receive: Only what you ask the app to save or act on. When you ask ChatGPT or Claude to use Lovekept, the assistant sends us the details that request needs, such as a memorial's name, dates, and obituary, service details, the email addresses of family members you invite, or the flowers and delivery details you pick. When you connect your Lovekept account, we also receive your account email address and name through sign-in. With each request, ChatGPT also sends an anonymous identifier that is not your name or email address, which we use in hashed form to apply usage limits, and a general location hint (such as your country, region, or time zone), which we use to tell you whether flowers or fundraisers are available where you are, to set the time zone of a service you add, and to look for funeral homes near you when you have not named a place. Claude sends us neither an anonymous identifier nor a location hint, and it cannot pass photos to us: in Claude the app gives you a link to add photos on lovekept.co. Photos you add in ChatGPT arrive through temporary download links; we resize them and remove embedded metadata, including any location data, before saving them. When you start a fundraiser, the purpose you describe is reviewed by Google's Gemini API, as Section 4 describes. For each request we record, through our analytics provider PostHog, which app feature was used and whether it worked, tied to your account, or in ChatGPT to that anonymous identifier in hashed form, or in Claude to a single shared anonymous record when you are not connected, but never the content of your request. We also note that an account, memorial, or flower order was started through ChatGPT or Claude.
• Planning Tools: The cost estimates, funeral home search, and funeral assistance finder work without a Lovekept account. They receive only what a request includes: a state, ZIP code, or city; the kind of service, prices you were quoted, your savings, and whether Social Security or veterans benefits apply; and, for the assistance finder, the answers you choose to share about the person who died and your family, such as the date of death, your relationship to them, how they died, whether they served in the military, and benefits they received, like Social Security, SSI, or Medicaid. When you ask for funeral homes near you without naming a place, we use ChatGPT's general location hint instead, and the result says which place we used; in Claude, which sends no location hint, you are asked to name a place. We use these details only to answer that request. We do not save them, attach them to an account, or send them to our analytics provider; as with every request, we record only which feature was used and whether it worked.
• No Access to Your Conversations: Lovekept cannot see your ChatGPT or Claude conversation history or anything you have not asked the app to use. OpenAI's own privacy policy, not this one, governs how ChatGPT handles your conversations, and Anthropic's own privacy policy governs how Claude handles them.
• How Connecting Works: The first time you ask the app to save something, ChatGPT or Claude asks you to connect your Lovekept account. You sign in to Lovekept, or create an account, on a Lovekept page and approve the connection there. Lovekept never sees your ChatGPT or Claude password, and neither OpenAI nor Anthropic ever sees your Lovekept password.
• How to Disconnect: You can disconnect Lovekept at any time from the apps or plugins area of your ChatGPT settings, or from the connectors area of your Claude settings. Disconnecting stops the assistant from acting on your account; a request already under way finishes, and any remaining access ends within an hour at most. Memorials and other content you already saved stay in your Lovekept account, where you can manage or delete them as Section 7 describes. To have us end the connection from our side as well, email support@lovekept.co from your account email address.
• Payments Happen on Lovekept: You never pay inside ChatGPT or Claude. Flower orders are paid at checkout on lovekept.co, and donations to a Memorial Fundraiser are made on the memorial page on lovekept.co, under the same terms and with the same payment processors described in Section 4.
• Same Rules as the Site: Content you save through the app is Memorial Content and is handled exactly like content you add on lovekept.co, including that a published memorial can be seen by anyone unless you change its visibility.

13. Changes to This Policy

This Privacy Policy may change from time to time. When a change is material, we give at least thirty (30) days' advance notice, either by email to your registered account address or through a prominent notice on the Service. The current version always appears on this page with an updated effective date. Continuing to use the Service after a change takes effect means you accept the revised Privacy Policy.

14. Governing Law

This Privacy Policy is governed by and construed under the laws of the State of Delaware, United States, without regard to its conflict of law provisions, in keeping with our Terms of Service.

15. Contact Us

For questions about this Privacy Policy, or to exercise any of your rights, reach us here:

Email: support@lovekept.co

Operator: Albatross Ecommerce LLC