Privacy Policy

Our Commitment to Privacy

1. Information We Collect

Information You Provide to Us

We collect information you provide directly to us, including:

• Account Information: Name, email address, phone number, business address
• Business Information: Funeral home details, licensing information, staff details
• Client Data: Deceased person information, family contact details, service arrangements
• Financial Information: Billing addresses, payment methods (processed securely by third parties)
• Communications: Messages, support requests, feedback

Information We Collect Automatically

When you use our Service, we automatically collect:

• Usage Data: Features accessed, time spent, actions taken
• Device Information: IP address, browser type, operating system
• Performance Data: System errors, response times, crash reports
• Cookies and Similar Technologies: Session management, preferences, analytics

Information from Third Parties

We may receive information from:

• QuickBooks Integration: Financial data, customer information
• Payment Processors: Transaction confirmations, payment status
• Business Partners: Referral information, integration data

2. How We Use Your Information

We use the information we collect to:

Provide Our Service

• Operate and maintain our software platform
• Process service arrangements and generate documentation
• Facilitate integrations with third-party services
• Provide customer support and technical assistance

Improve Our Service

• Analyze usage patterns and performance metrics
• Develop new features and functionality
• Conduct research and development
• Fix bugs and resolve technical issues

Business Operations

• Process payments and manage billing
• Send important service notifications
• Comply with legal obligations
• Protect against fraud and security threats

Legal Basis for Processing (GDPR)

We process your personal information based on:

• Contract: To provide our Service as agreed
• Legitimate Interests: To improve our Service and prevent fraud
• Legal Obligation: To comply with applicable laws and regulations
• Consent: For marketing communications (where required)

3. Information Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

Service Providers

We work with trusted third-party service providers who help us operate our Service:

• Cloud Infrastructure: AWS, Google Cloud (data hosting and processing)
• Payment Processing: Stripe, PayPal (secure payment handling)
• Communication: SendGrid, Twilio (email and SMS services)
• Analytics: Google Analytics (usage analysis - anonymized)

Business Integrations

When you connect third-party services:

• QuickBooks: Financial data synchronization
• Other Integrations: As specifically authorized by you

Legal Requirements

We may disclose information if required by law or in good faith belief that disclosure is necessary to:

• Comply with legal process or government requests
• Enforce our Terms of Service
• Protect the rights, property, or safety of FuneralHQ, our users, or the public
• Investigate potential violations of our policies

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Security

Technical Safeguards

• Encryption: Data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Multi-factor authentication, role-based permissions
• Network Security: Firewalls, intrusion detection, VPN access
• Regular Updates: Security patches and system updates

Operational Safeguards

• Staff Training: Regular security and privacy training for all employees
• Background Checks: Screening for personnel with data access
• Incident Response: Procedures for security breach detection and response
• Regular Audits: Internal and external security assessments

Physical Safeguards

• Secure data centers with 24/7 monitoring
• Biometric access controls
• Environmental controls and backup power

5. Your Rights and Choices

You have several rights regarding your personal information:

Access and Portability

• Request a copy of your personal information
• Export your data in a machine-readable format
• Receive information about how we process your data

Correction and Updates

• Update your account information directly in our Service
• Request correction of inaccurate information
• Complete incomplete personal information

Deletion and Restriction

• Request deletion of your personal information (subject to legal obligations)
• Restrict processing in certain circumstances
• Object to processing based on legitimate interests

Communication Preferences

• Opt out of marketing communications
• Manage notification preferences
• Control cookie settings

How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@funeralhq.com. We will respond to your request within 30 days (or as required by applicable law).

6. Data Retention

We retain your information for as long as necessary to:

• Provide our Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Meet regulatory requirements specific to funeral services

Retention Periods

• Account Data: Until account deletion plus 90 days
• Service Records: 7 years (or as required by state law)
• Financial Records: 7 years for tax purposes
• Communication Records: 3 years
• Usage Data: 2 years

7. International Data Transfers

Our Service is hosted in the United States. If you access our Service from outside the US, your information may be transferred to, stored, and processed in the US where our servers are located.

For users in the European Economic Area (EEA) or UK, we ensure adequate protection through Standard Contractual Clauses approved by the European Commission.

8. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.

9. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell data)
• Right to non-discrimination for exercising privacy rights

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending email notification to registered users
• Providing in-app notifications

Changes become effective 30 days after notification, unless immediate changes are required by law.