Privacy Policy

Enumerate categories: account/staff data, decedent and family information entered by funeral homes, family-portal submissions, payment data, usage/analytics data, and note that decedent/family data is entered by the funeral home as data controller, not collected directly from the data subject in most cases.

List purposes: providing the service, AI-assisted drafting features, customer support, product improvement, legal compliance, and communications.

If subject to GDPR/UK GDPR for any users, state the legal basis relied on for each processing purpose (contract, legitimate interest, consent, legal obligation).

Describe sharing with subprocessors (link to /subprocessors), integrations the customer opts into (e.g. QuickBooks), legal disclosure circumstances, and confirm data is not sold.

State retention periods for account data, case/decedent records (likely long, given funeral industry recordkeeping norms and statutory requirements), and deletion procedures on account closure.

Cover access, correction, deletion, and portability rights where applicable, and how to exercise them — including the distinction between the funeral home (controller) and Procession OS (processor) for decedent/family data.

Describe technical and organizational measures at a level appropriate for public disclosure (encryption in transit/at rest, access controls) without detailing specific defenses.

State that the service is not directed to children and is not knowingly used to collect data from them, with the standard carve-out for decedent records that may reference a minor.

State where data is hosted/processed and the transfer mechanism used if data crosses borders (e.g. SCCs).

Describe how material changes are communicated and that the “Last updated” date and version above reflect the current version.

Provide a contact method for privacy questions and data subject requests.