Privacy Policy

The table lists categories of personal information as defined by California law, what falls in each, and where it comes from.

We do not knowingly collect information from anyone under 18. Provider profiles also display ratings and review counts from Google, which come from Google’s public listings.

• The Social Security number is encrypted with AES-256-GCM before it is stored. Only ciphertext travels through our payment processor’s metadata. It is decrypted only to transmit it to the funeral home you selected.
• No Eternal Dream employee views decrypted Social Security numbers in the ordinary course of business, and they are never sent to analytics, advertising or AI systems.
• The other sensitive fields are optional. Leave them blank if you prefer to give them to the funeral home directly.
• We keep arrangement records only as long as needed to complete the arrangement and meet legal record-keeping. You may ask us to delete the sensitive fields at any time after the funeral home has received them.
• We do not use sensitive personal information to infer characteristics about you, and we do not sell or share it.

• To run the marketplace: show funeral homes near you, match your needs to services, place orders, process payment and transfer it to the funeral home, and deliver messages between you and the funeral home.
• To verify funeral homes against state licensing boards and re-check them weekly.
• To operate the assistants and obituary builder you choose to use.
• To send transactional email: order confirmations, messages, security notices, and replies to your requests.
• To send marketing email if you asked for it; every message has an unsubscribe link.
• To understand how the site is used, fix errors and improve it.
• To measure advertising campaigns and reach people who visited the site (you can opt out; see section 7).
• To prevent fraud, enforce our terms and comply with law.

The chatbot and the planning assistant send the text of your conversation to OpenRouter, which routes it to a Google Gemini model, to generate replies and to match you with services. Those providers process the text under their business terms as our service providers; we do not use your conversations to train models of our own. Conversations may include names and circumstances you type in. Please do not enter Social Security numbers, card numbers or other people’s sensitive information into the assistants.

We also publish verified funeral home listings, prices and our knowledge files in formats that third-party AI assistants read, and we run a Model Context Protocol server through which an assistant acting for a family may search providers and, after confirming with the family, submit a consultation request that becomes a lead in the funeral home’s inbox. Your account data, messages and orders are never published to those systems. Public pages of the site may be crawled by AI systems, as stated in our robots.txt.

Funeral homes. When you send a request or message to a funeral home, it sees your first name, last initial and what you wrote, and replies through the platform. When you book, it receives your full name, email, phone and the arrangement details you entered, including the sensitive fields above. Funeral homes are independent businesses bound by our Provider Agreement to use your information only for your arrangement.

Service providers that process information on our behalf:

Advertising partners. Google Ads and Microsoft Advertising receive identifiers, page views and conversion events so we can measure campaigns and show ads to people who visited the site. This is “sharing” for cross-context behavioral advertising under California law. We do not sell personal information for money. You can opt out at any time; see section 7.

Legal and safety. We disclose information when required by law or legal process, to protect the safety of a person, or to enforce our terms. Business transfers. If we sell or reorganize the business, information transfers to the successor under this policy; we will notify you before it becomes subject to a different one. At your direction, for example when you share a plan with a family member.

• Do Not Sell or Share My Personal Information. Turn off advertising sharing on the Privacy choices page. The setting is saved in your browser and applies immediately.
• Global Privacy Control. If your browser sends a GPC signal we treat it as a valid opt-out of sharing and switch advertising tags off automatically, without you having to do anything.
• Session recordings and analytics. Microsoft Clarity records how visitors move through the site, with the text you type into form fields masked, so we can find confusing pages. It runs by default; the banner on your first visit and the Privacy choices page let you turn recordings and analytics off.
• Marketing email. Use the unsubscribe link in any message or email us. Transactional email about your orders continues.
• Precise location. Your browser asks before sharing it; you can decline and type a city instead.
• Do Not Track. There is no industry standard for DNT and we do not respond to it. We do respond to GPC.

Depending on where you live (California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia and other states with privacy laws), you may have the right to:

• Know what personal information we have about you and receive a copy in a portable format.
• Correct inaccurate information.
• Delete your personal information, subject to exceptions such as completing an order or keeping records the law requires.
• Opt out of the sale or sharing of personal information and of targeted advertising (section 7).
• Limit the use of sensitive personal information (we already use it only for the arrangement).
• Not be discriminated against for exercising these rights.

How to ask. Email support@eternaldream.io with “Privacy request” in the subject, or call +1 (786) 271-2788. We will confirm your identity by matching the request to the email on your account and, for deletion or access to arrangement records, by asking for details only the account holder would know. An authorized agent may submit a request with your signed permission. We respond within 45 days, extendable once by 45 days with notice. If we deny a request you may appeal by replying to our decision; we answer appeals within 45 days and tell you how to contact your state attorney general if you still disagree.

• All traffic is encrypted in transit (TLS) with HTTP Strict Transport Security.
• Data is stored in an encrypted PostgreSQL database; the deceased’s Social Security number is additionally encrypted at the field level with a key held separately from the database.
• Sign-in is handled by Clerk with optional two-factor authentication for funeral home accounts; card data is entered directly into Stripe.
• Access to production data is limited to staff who need it, and partner-facing lead views strip contact details automatically.
• Our hosting, authentication and payment providers maintain independent security certifications (SOC 2 or PCI DSS).
• No system is perfectly secure. If a breach affects your information we will notify you as the law requires.

The service is for adults. We do not knowingly collect personal information from anyone under 18, and we delete it if we learn we have. Information about a deceased minor entered by an adult arranging services is handled as arrangement information.

We will post changes here with a new version and effective date, and for material changes we will email account holders before they take effect. The change history at the end of the page lists every version.

Privacy requests and questions: Eternal Dream Inc · support@eternaldream.io · +1 (786) 271-2788 (24/7).