Privacy Notice

Information we collect

We collect information you provide, including identity and authentication details; profile information; Sanctuary settings and memberships; memories, stories, photographs and related attribution; invitations; messages; support requests; Trust reports; and privacy or deletion requests.

We also collect limited device, browser, IP, authentication, request, security and error information needed to operate, protect and troubleshoot the service.

Commercial and payment information

For Premium, MemorySanctuary processes plan selection, billing frequency, entitlement and storage state, recovery deadlines, and limited Stripe-linked customer, subscription, invoice and transaction identifiers and statuses.

Stripe collects and processes payment-method details through its hosted services. MemorySanctuary does not receive or store raw card numbers or card security codes. Stripe's own privacy terms apply to its processing.

How we use information

We use information to create and secure accounts; operate and display Sanctuaries; manage roles, contributions, invitations and visibility; provide support and Trust review; process subscriptions and entitlements; show storage and Payment Recovery status; prevent fraud; troubleshoot service failures; comply with legal obligations; and improve the service.

Commercial telemetry

We may record limited operational events about plan selection, checkout handoff and outcome, billing-state changes, cancellation, Payment Recovery, payment-method management, storage-state notices, and related failures. This telemetry is used to operate the commercial flow, detect failures, provide support and protect the service.

Commercial telemetry is not used to infer grief, rank memorial content, or place privacy, reporting, Trust or deletion rights behind payment.

Sharing and service providers

We use service providers for authentication, databases, file storage, application hosting, operational monitoring and payment processing. They may process information on our behalf as needed to provide those services. We may also disclose information when required by law or reasonably necessary to protect users, rights, safety or service integrity.

Sanctuary visibility and other people

Private Sanctuaries are limited to authorized members. Unlisted Sanctuaries may be viewed by anyone with the link. Public Sanctuaries may be viewed without membership. Contributors should consider visibility and the privacy of living people before sharing.

Retention, deletion and financial records

We retain information while reasonably needed to operate the service, protect users, maintain Sanctuaries and meet legal obligations. Visible removal may not immediately remove temporary backups or security records.

Account deletion removes ordinary account access and, where eligible, unnecessary internal linkage to retained billing evidence. Limited invoice, transaction, refund, reversal, dispute, tax, accounting, fraud-prevention and security evidence may be retained for the period reasonably required by those purposes or applicable law.

Retained financial evidence is separated from ordinary product access and does not restore a deleted account or subscription. Deleting an account does not silently delete shared Sanctuary content; governed contribution, membership, stewardship and Sanctuary-deletion rules continue to apply.

Preservation and storage

Core is not a trial, but MemorySanctuary does not promise perpetual service, storage or availability. A commercial downgrade or failed payment does not by itself trigger Sanctuary deletion. Existing overflow is preserved rather than immediately deleted solely because an account moves to Core Preservation; new storage growth may be restricted.

Your choices

Depending on your role and the feature involved, you may update profile information, change visibility, manage or remove contributions, cancel Premium, update payment details through Stripe, request account or Sanctuary deletion, seek privacy assistance, or report Trust and copyright concerns.

Security, children and international processing

We use technical and organizational safeguards intended to protect information, but no online service can guarantee absolute security. The service is not intended for children under 13 to independently create accounts. Our providers may process information in locations different from yours, subject to their safeguards and applicable law.

Official privacy, Trust and copyright contacts

For account-level privacy questions or requests, use the authenticated Help pathway. For privacy, Trust, safety, ownership or copyright concerns involving Sanctuary content, use Report a Concern from the applicable Sanctuary and select the relevant category. Reports may include a contact email when the reporter is not signed in. These are MemorySanctuary's official operational contact pathways.

Changes to this notice

We may update this notice as the service changes. We will revise the effective date and provide additional notice when a material change requires it.