Privacy Policy

Depending on how you use Funeral Funnel, we may collect:

• Account details such as your name, email address, optional phone number, login provider, age-of-majority attestation, and legal/consent receipts.
• Planning information such as location, timing, preferences, budget ranges, veteran status, cultural or religious preferences, tasks, notes, and family roles.
• Information about a deceased person or another living person that you choose and are authorized to enter.
• Contact, RSVP, and family-helper information that you provide. When enabled, the public guest RSVP form is limited to attendance and party size; it does not accept guest medical, meal, allergy, religious, or accessibility notes. The organizer may separately have entered contact information for invitations. On a valid private RSVP link, the invited guest can see the plan name, their guest name, their attendance response and party size. Because plan names are visible to invitees, organizers should use a neutral name that does not reveal health or other private details.
• Documents you upload, including potentially sensitive estate, insurance, identity, financial, military, health, or funeral records.
• AI writing inputs and saved drafts, AI request metadata, feedback, and related technical logs when you use AI features.
• Basic technical, device, security, and usage information needed to operate, protect, and troubleshoot the service.
• Support communications, privacy requests, dispute notices, and arbitration opt-out records needed to administer and honor an applicable contract election.

Before private planning tools collect sensitive planning information, Funeral Funnel presents a separate consent that is not bundled into acceptance of the Terms. The disclosure identifies the sensitive categories, the purpose of collection and use, the types of processors or authorized people who may receive the data, and how to withdraw consent.

The covered categories include religious or cultural preferences, health or end-of-life information, veteran or benefits information, sensitive documents, and AI inputs or drafts. The purpose is to provide the private planning, storage, collaboration, reminder, and user-requested AI features you choose to use.

You may withdraw that consent for future collection from Privacy & account settings. When the required safeguards are active, withdrawal blocks private planning and new data entry, including database, private-document, built-in AI, and connected external-AI access. Any affected feature that cannot enforce this restriction must remain unavailable. Withdrawal does not itself delete information already stored; use plan/account deletion or submit a privacy request.

New plans about another living person are temporarily unavailable while we establish a way to verify legally sufficient authorization. An account holder's general consent or statement that they have permission is not automatically consent from the other person. Do not place another living person's sensitive or health information in a self-plan, notes, documents, or AI requests. Existing third-person plans remain subject to privacy restrictions and applicable access, correction, and deletion rights.

The person the information is about, or an authorized agent where applicable law permits, may contact us to request access, correction, or deletion. We may verify identity and authority before acting.

• You, when you create an account, use features, upload documents, or contact us.
• People you invite to collaborate on a plan and other people who communicate with the service at your direction.
• Authentication providers, hosting providers, and other service providers that generate account, security, or operational information.
• Government, regulatory, benefits, and provider sources used to support published guidance or vendor verification.
• Publicly available sources when needed to verify a public provider listing or correct public content.

• Provide, personalize, and secure your planning workspace.
• Create checklists, budgets, reminders, family access, document storage, and vendor comparisons.
• Send family invitations, RSVP requests, and reminder emails when those features are enabled or requested.
• Authenticate users, enforce permissions and consent gates, prevent fraud or abuse, and investigate security incidents.
• Respond to support, privacy, correction, appeal, consent-withdrawal, and account requests.
• Operate built-in AI drafting and planning features only when you choose to use them.
• Allow a connected external AI app to use only the Funeral Funnel plan/task tools you separately approve through OAuth, subject to your current consent and plan permissions.
• Retain limited AI writing inputs and drafts for product improvement only when you opted in.
• Measure feature use and service performance, troubleshoot problems, and improve or develop products and services using account, technical, and usage information only as permitted by this policy, applicable law, and any required consent. We may create properly aggregated or deidentified statistics for those purposes. Detailed signed-in usage activity tracking remains optional and is not recorded until you enable it.
• Comply with applicable law, protect rights and safety, and enforce our Terms.

We do not sell personal information, including sensitive personal or consumer health data. We do not share personal information for cross-context behavioral advertising, use uploaded private documents for advertising, or use sensitive planning information to target advertisements. Some states prohibit selling sensitive information even when a person agrees; a general Terms checkbox cannot override that rule.

We do not treat information as deidentified merely because names have been removed. We use reasonable safeguards to avoid identification or reidentification when producing aggregate or deidentified findings, including any additional controls required for consumer health data. These general purposes do not authorize training general-purpose AI models on private planning content, sending identifiable information to unrelated partners for their independent uses, or expanding the processing of sensitive information without appropriate notice and any separate consent or authorization the law requires. New uses do not retroactively change the commitments that applied when information was collected.

These programs are proposals, not features currently operating under this policy. Accepting our general Terms or sensitive-data consent does not enroll you in either program. We do not currently sell personal information, share it with unrelated providers for their independent marketing, or train general-purpose AI models on private planning content under these proposals.

If we introduce an optional AI model-development program, we will first identify the exact kinds of content eligible for training or evaluation, the model developer and processors, the purpose, retention and withdrawal choices, and the limitations of deletion from models already trained, if applicable. We will require a separate, affirmative choice and any other lawful authorization before using private content. No agreement can authorize another living person's data unless sufficient independent legal authority exists.

If we introduce optional paid or unpaid provider referrals, we will disclose which categories of contact or planning information would be shared, the selected provider or recipients, how they may contact you, their independent use of that information, and any referral compensation or material relationship. A referral request is distinct from permission for advertising, automated calls, or resale; those activities require any additional permissions and choices required by law. You can decline a discretionary referral without losing access to ordinary planning features, subject to applicable law.

Selling sensitive personal information or consumer health data is not authorized and is not part of our proposed commercial model. Any future sale of other identifiable personal information would require a separate legal and operational review, updated policies, effective consumer choices and any applicable statutory authorizations. We will not apply expanded rights to information obtained under earlier promises.

Family access is separate from sensitive-data consent. An owner must deliberately invite each collaborator and choose an access level. Plans about another living person and plans whose subject cannot be verified remain restricted from family and RSVP sharing unless the required sharing permissions are active. Owners may remove prior access even while sharing is blocked. If outbound email is enabled, invitation, RSVP, and reminder messages use generic outward-facing wording rather than including plan names, task titles, medical details, or due dates. They can still contain a private action link, recipient address, and delivery metadata; queued internal payloads may contain private information. Do not forward private invitation or RSVP links.

When you choose a built-in AI feature, the specific text and limited plan context needed for that request may be sent to the built-in AI service provider. AI output can be inaccurate and must be reviewed before use. AI chat prompt and response bodies are not retained in operational logs; those logs keep limited request metadata and a generic success or failure result. Inputs and drafts created through AI writing tools may be saved with your plan so they can be exported or deleted with that plan. Funeral Funnel does not provide legal, medical, tax, financial, or crisis advice.

Funeral Funnel may also expose optional plan and checklist tools to an external AI app that you separately choose to connect, such as an AI assistant that supports the Funeral Funnel tool protocol. That external app receives only the information returned by the tools you approve and may make only the changes those tools permit. Current sensitive-data consent and your normal plan permissions are required each time those private tools are used. Information received by the external app is also subject to that app's own privacy and security practices.

We disclose only information reasonably needed for the following purposes:

• Hosting, database, storage, authentication, and security providers: account, plan, document, technical, and security information needed to operate and protect the service.
• Built-in AI providers: user-requested text and limited plan context only when you initiate a built-in AI request.
• External AI apps you connect: plan or checklist information returned by the specific Funeral Funnel tools you approve; these apps act at your direction and have their own privacy practices.
• Email and communications providers: recipient email address plus the subject, message content, delivery metadata, and private action link needed to send family invitations, RSVP requests, and reminder digests when those features are used.
• Support, monitoring, and incident-response providers: limited account, technical, support, or affected content when necessary to resolve a request or incident.
• People you authorize: plan information shared according to the family or collaborator permissions selected by the plan owner.
• Legal and safety recipients: information required by law or reasonably necessary to protect people, rights, property, or the service.
• Transaction participants: information subject to appropriate protections during a merger, financing, reorganization, or sale.

Service providers may process information only for the services they provide to us and subject to applicable contractual and legal protections.

Active plans are retained while needed for the user's requested service, subject to privacy rights and applicable law. Deleting a plan revokes ordinary access, but restricted recovery copies or optional AI-writing records may exist temporarily. Verified deletion requests must be processed within applicable legal requirements, including limits on backup retention where required; these records are not exempt from mandatory deletion. AI chat operational logs retain metadata rather than prompt or response text.

• Active account and plan information is kept while needed to provide the requested service, subject to applicable retention and deletion rights; we do not promise indefinite storage.
• Deleting a plan removes it from the active app and revokes ordinary user access.
• The current product does not run a timer-driven automatic purge of restricted recovery copies or retained AI-writing records.
• Restricted recovery copies of private files may remain outside ordinary user access until an explicit authorized deletion action, verified privacy request, operator cleanup, or a future reviewed retention architecture removes them.
• AI chat operational logs do not retain prompt or response bodies.
• When product-improvement retention is enabled, saved AI writing inputs and drafts may remain in restricted storage until you opt out or an authorized deletion process removes them.
• Retained AI-writing copies keep restricted source-account lookup information so Funeral Funnel can find and remove them if you later turn the retention option off or submit a verified deletion request. Those lookup fields and retained payloads are not available through normal browser roles.
• Turning product-improvement retention off removes linked retained AI-writing copies through the current opt-out deletion flow.
• Per-plan analytics are not retained after plan deletion.
• Provider-managed backups may persist temporarily under controlled restoration practices. Verified deletion requests are subject to applicable statutory deadlines, including backup-deletion limits where required. Restricted recovery storage is not a permanent exemption from deletion rights.
• Limited security, fraud-prevention, tax, or dispute records may be retained only where legally permitted and reasonably necessary; they must not be repurposed for general planning or product improvement.

Funeral Funnel does not use cross-site advertising pixels or intentionally authorize advertising companies to follow your activity over time across unrelated websites when you visit Funeral Funnel. We do not currently sell your personal information or share it for cross-context behavioral advertising. Hosting, authentication, security, and other infrastructure providers may process necessary technical data to deliver and protect this service as described above; that is distinct from permission to follow your browsing across other companies' websites for advertising.

We do not currently change essential security or operational data collection in response to legacy browser "Do Not Track" (DNT) signals. Our optional, signed-in detailed usage analytics remain off until you affirmatively enable them, regardless of your DNT setting, and can be switched off in your privacy settings. The service does not currently use personal information for targeted advertising or sales that require a separate opt-out. If such processing is introduced, any applicable legally required opt-out signals and consumer choices must be implemented and disclosed before it begins. We do not control tracking that occurs when you leave Funeral Funnel for an independent third-party website.

Detailed signed-in usage analytics are off until you choose to enable them. If enabled, the service may keep page visits, navigation actions, form-submit event types, device category, and viewport dimensions associated with your account. We keep only broad page categories, generic action labels and external-link categories, not nested URL paths or referrer details. This feature does not collect typed form values, private document contents, private notes, passwords, payment credentials, or authentication tokens. You can disable the feature later. Turning it off stops future detailed events and deletes your stored usage events through the current account privacy control.

You can review or change this separate preference on the Usage analytics page. Essential security, account and operational records remain separate from this optional analytics choice.

We use access controls, private storage, row-level database policies, signed download links, upload restrictions, authentication controls, and operational monitoring intended to protect information. Family and other sensitive-data sharing features must remain restricted unless their required consent and database safeguards are active. No online service can guarantee absolute security. We investigate suspected unauthorized access or disclosure and provide notices when applicable law requires them.

• Access and update information through the app.
• Export an owned plan in the Privacy & account area.
• Remove family access separately from sensitive-data consent, including after consent is withdrawn.
• Withdraw sensitive-data consent for future collection.
• Delete a plan or account, subject to disclosed restricted recovery/retention copies and lawful exceptions.
• Disable optional product-improvement retention; linked retained AI-writing copies are removed through the current opt-out deletion flow.
• Ask to access, correct, delete, restrict, or receive a portable copy of personal information where applicable.
• Opt out of sale, targeted advertising, or qualifying profiling where applicable; Funeral Funnel does not currently engage in those activities.
• Appeal a denied privacy request where applicable law provides that right.
• When an accepted Terms version permits arbitration opt-out, use the deadline and method in those Terms without cancelling your account. Records of that election do not authorize collection or sharing of sensitive information.

Submit a privacy request or appeal by emailing privacy@funeral-funnel.com. You do not need to create a new account to submit a request. We may need to verify your identity and authority before completing it. We must meet the deadline applicable to your request and jurisdiction. For covered Washington consumer-health requests, the usual deadline is 45 days from receipt. Nevada generally requires a response within 45 days after authentication but requires covered active-system consumer-health data deletion and recipient notices within 30 days after authentication. New Jersey's amended privacy law also requires a covered controller to make consent withdrawal at least as easy as giving consent, and to cease the affected consent-based processing as soon as practicable, no later than 15 days after receiving the request. Where this law applies, we must honor that deadline even when manual handling is required. Any permitted extension requires timely notice; a denial will explain the reason and available appeal path. We will not discriminate against you for exercising applicable rights.

Funeral Funnel accounts are limited to people age 18 and older. We do not knowingly permit children or teens to create accounts. If you believe a person under 18 created an account or provided personal information, contact us so we can investigate and take appropriate action.

We may update this policy as the service changes. We will update the effective date and provide additional notice or obtain consent when required. Questions, privacy requests, and appeals may be sent to privacy@funeral-funnel.com. For general product or account support, email support@funeral-funnel.com.