Privacy Policy

Memorya (memorya.me) is operated by [Legal entity name], [registered address], VAT [number] (the data controller). You can reach our privacy team at [privacy@memorya.me] or through the Contact page.

Account data (email address, display name, language, time zone, country); content you add to memorials (texts, photos, audio, video, family relationships); messages, tributes and memories you leave; payment records from Stripe (we never see your full card number); consent records; and technical data needed for security, such as hashed IP addresses and sign-in events.

To provide the memorials you create or join (contract); to keep the service safe and prevent abuse (legitimate interest); to meet tax and accounting duties (legal obligation); and, only with your consent, to measure how the site is used. Optional AI features process the text you submit only to produce the result you asked for; AI translations are shown to you and not stored.

Memorials often mention living relatives. Uploaders confirm that living people shown have agreed to it. Anyone who appears in content can use "This is me – remove or blur" to hide it immediately while we review the request.

Hosting and storage providers in the EU, Stripe for payments, our email provider for transactional emails, and the AI provider when you use AI features. They act on our instructions under data processing agreements. Public memorials are visible to anyone; private ones only to invited family.

Where a provider processes data outside the European Economic Area, we rely on the European Commission's standard contractual clauses or an adequacy decision.

You can access, correct, export and delete your data, object to or restrict some processing, and withdraw consent at any time. Use "Download my data" and "Delete my account" in your account, or write to us. We answer every request within 30 days. You can also complain to your data protection authority (in Italy, the Garante per la protezione dei dati personali).

When you delete your account it is closed at once and erased after a 30-day grace period. For each memorial you own you choose to give it to a family member or delete it. Your payments stay in our accounting records as "Deleted user"; your messages stay signed "Former member" unless you choose to delete them.

Necessary cookies are always on. Preference and analytics cookies are set only after you agree, and you can change your mind at any time from "Cookie settings" in the footer. See the Cookie Policy for details.

Private media is stored encrypted and served through short-lived signed links. Administrators use two-factor authentication and every sensitive action is recorded in an audit log.

When we change this policy in a meaningful way we publish a new version and ask signed-in users to accept it again.