Privacy policy

What we collect

When you create an account or accept an invitation we collect your email address and the name you provide. When you contribute to a memorial we collect the photos, videos, audio, written memories, and any captions or metadata you upload. When a funeral home creates a case we collect details about the loved one (name, dates, place of service) supplied by the arranger.

How we store it and who processes it

Account data lives in a managed PostgreSQL database operated by Supabase, and uploaded media lives in Amazon S3 — both in the United States. To produce a memorial we rely on a small set of reputable service providers, each handling only the data needed for its function:

• Supabase — database and sign-in authentication.
• Amazon Web Services— S3 stores your photos, videos, audio, and written memories; Amazon Rekognition performs face matching so the same person can be recognized across a memorial’s photos and videos.
• Google Cloud (Vertex AI)— Google’s Gemini drafts suggested captions and descriptions from your media. Google does not use this data to train its models, and processing stays within the United States.
• Vercel — hosts and runs the application.
• Inngest — coordinates background processing jobs.
• Upstash — short-lived sign-in session state and rate limiting.
• Modal — renders the finished memorial video.
• Resend — sends transactional email such as invitations and sign-in links.
• Stripe — billing for funeral-home accounts.
• OpenStreetMap (Nominatim) — converts location data embedded in a photo into a readable place name.

How we use it

Your data is used solely to produce the memorial story you or your funeral home is gathering — assembling videos, building memorial pages, and notifying invited family members. We do not sell or rent your data, and we do not share it with advertising or analytics partners. Aggregated, non-identifying usage metrics may be used to improve the product.

Retention

Memorial stories are retained for the lifetime of the account that created them. You can request deletion at any time. Audit logs (sign-in events, invitation redemptions) are retained for up to 12 months for security review, then deleted.

Your choices

You can request a copy of your data, correct it, or delete it by emailing privacy@anthavi.com. Deletion requests are honoured within 30 days. Funeral-home arrangers can additionally delete or close cases from their dashboard.

Sign-in providers

If you sign in with Google, Apple, or Facebook, those providers share your email and basic profile (name, avatar) with us. We do not receive your password, your contacts, or your wider account data. You can revoke our access at any time from the provider’s account settings.

Contact

For privacy questions, deletion requests, or any concerns, contact privacy@anthavi.com.