Privacy Policy

Information provided by funeral homes: When a funeral home creates an account, we collect business name, billing address, contact name, email address, and payment information (processed by Stripe — we never see raw card numbers).

Information about families in their care: Funeral home staff enter information about the families they serve, including the name and date of death of the deceased, family contact names, email addresses, and phone numbers. This information is entered by the funeral home — not collected directly from families.

Portal activity: When a family member accesses their aftercare portal, we collect which resources they viewed and whether they opened messages sent to them. We do not track browsing outside our platform.

Technical data: Like all web services, we automatically log IP addresses, browser type, and pages visited to keep the service running and secure. We do not use this data for advertising.

We use the information we hold to:

• Deliver the aftercare platform to funeral homes and their families
• Send scheduled check-in messages and resources on behalf of the funeral home
• Process subscription billing and send invoices
• Provide customer support and troubleshoot issues
• Improve and develop new platform features (using aggregated, anonymized data only)
• Comply with legal obligations

We do not use family data for marketing, sell it to third parties, or use it to train AI models.

We share information only with the following trusted service providers, and only to the extent needed to run the platform:

• Neon (database hosting) — stores all platform data on servers in the United States
• Resend (email delivery) — sends transactional emails (portal invitations, check-ins) on behalf of funeral homes
• Stripe (payments) — handles billing for funeral home subscriptions
• Vercel (hosting) — serves the application and stores uploaded files (logos, resources)

All providers are contractually required to protect data and may not use it for their own purposes. We do not share personal information with anyone else unless required by law.

We take security seriously because we know the information on our platform is sensitive. Our measures include:

• All data is encrypted in transit (TLS) and at rest
• Passwords are hashed using bcrypt — we cannot see them
• Each funeral home's data is isolated — one customer cannot access another's records
• Database backups run daily with point-in-time recovery enabled
• Access to production systems is limited to authorized personnel

Cookies: We use a single essential session cookie to keep you signed in. We do not use advertising, analytics, or tracking cookies.

We retain data for as long as a funeral home has an active account. When an account is cancelled:

• Case and family data is deleted within 90 days of account closure
• Billing records are retained for 7 years as required by law
• Anonymized, aggregated usage statistics may be retained indefinitely

Funeral homes can request earlier deletion by contacting us at support@afterrelay.com.

Depending on where you live, you may have the right to access, correct, or delete personal information we hold about you. Family members whose information was entered by a funeral home can contact us to request access or deletion of their records.

To exercise any of these rights, email us at support@afterrelay.com. We will respond within 30 days.