Privacy Policy

1. What this covers

This Privacy Policy explains what information EverBond ("we," "us") collects when you create an account, build a memorial page, or visit one, and how that information is used, shared, and protected.

2. Information we collect

• Account information — your name and email address, whether you sign up with email/password, Google, or a magic link.
• Memorial content — anything you or your family add to a memorial page: photos, videos, voice recordings, life story text, family member names and relationships, gravesite location, and a favorite song link.
• Visitor messages — the name, email, and message text a visitor submits when leaving a tribute, commenting on a photo, or requesting access to a private memorial.
• Payment intent details — if you choose to upgrade to Plus, we record your choice (monthly/yearly) so our team can follow up to arrange payment manually via GCash or Maya. We do not process card payments ourselves and do not store card numbers.
• Usage data — page views and candle-lights on a memorial (shown as aggregate counts to the family), and standard analytics data (see Cookies below).

3. How we use this information

• To create, display, and let you edit your memorial page.
• To send account-related emails: signup confirmation, password reset, magic-link sign-in, and notifications about access requests or family admin invites.
• To follow up manually about Plus upgrades and payment.
• To send an annual Undas (All Souls' Day) reminder if you've opted into a memorial.
• To moderate guestbook messages and photo comments before they appear publicly, at the family's discretion.
• To improve the product and measure which marketing efforts are working, using aggregated, non-identifying analytics.

4. Who can see a memorial

You control this. A memorial can be set to Public (anyone with the link can view it) or Private (visitors must request access, which the family owner or an admin approves or denies). Guestbook messages and photo comments are held for family review before they're shown to other visitors.

5. Cookies

We use a small number of cookies: one to keep you signed in, and one that remembers an approved visitor's email for a private memorial (so they aren't asked to request access again on return visits, for up to a year). We also use Google Analytics and, where enabled, the Meta (Facebook) Pixel, to understand how visitors find and use the site. These do not identify you personally and can be limited using your browser's privacy settings.

6. Third parties we use

We rely on a small number of service providers to run EverBond: Supabase (database, authentication, and photo storage), Resend (sending emails), Google Analytics, and Meta (advertising measurement). Each only receives the information needed to perform its function, and none are permitted to use your data for their own purposes.

7. Where your data is stored

Our service providers (Supabase, Resend, Google, Meta) may store or process data on servers outside the Philippines. Where that happens, we rely on those providers' own data protection safeguards and only share the minimum information each needs to do its job.

8. Security

We use industry-standard measures to protect your data — encrypted connections (HTTPS), access controls on our database, and restricted admin access. No system is 100% secure, but we work to keep your information safe and will notify affected users if a breach is likely to put their data at risk.

9. Data retention and deletion

We keep your account and memorial data for as long as your account is active. If you'd like your account or a specific memorial deleted, email us at hello@everbond.ph and we'll process the request, generally within a few business days.

10. Your rights

Under the Philippine Data Privacy Act of 2012, you have the right to be informed about, access, correct, and request deletion of your personal data, and to object to certain uses of it. To exercise any of these, contact us using the email above. If you're not satisfied with our response, you may also file a complaint with the National Privacy Commission.

11. Children's privacy

EverBond isn't directed at children, and account holders must be 18 or older. A memorial page may of course be about or feature photos of someone who passed away as a child — that's different from collecting data from a child directly, which we don't knowingly do.

12. Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page. Continued use of EverBond after a change means you accept the updated policy.

13. Contact us

Questions about this policy or your data? Email hello@everbond.ph.