Data & Privacy
Privacy
Privacy Pillar
Family Data Stewardship
Personal and memorial data inside Ancestra is managed within family-controlled workspaces, with role-based access and visibility controls.
Privacy Pillar
Purpose-Limited Use
Information is used to operate registration, family governance, memorial assignment, activation, payments, and trust-and-safety review workflows.
Privacy Pillar
Visibility By Choice
Clusters and memorial records may remain private or become public depending on the family’s settings and the state of the record.
Data Scope
What The Product Handles
Information You Provide
- Account details such as name, email address, password-derived credentials, and optional phone number.
- Family registry information including family names, head names, descriptions, member details, tribute text, and lineage relationships.
- Support, payment, and safety submissions such as misuse reports, failure queries, and other review requests.
Operational Product Data
- Cluster, space, and memorial states including reservation, purchase, assignment, activation, verification, and visibility settings.
- Audit and activity records tied to workflow actions, governance events, and security-sensitive operations.
- Payment and checkout references necessary to verify reservation and purchase flows.
Publicly Visible Data
- Only records intentionally marked public through the product workflow are surfaced in the public memorial experience.
- Public memorial pages may display names, years, tribute text, family association, cluster details, and related family connections.
- Private clusters and private memorial records are not intended for public browsing.
How We Use Data
- To create and secure accounts, manage family access, and operate memorial workflows.
- To process reservation and payment verification, support requests, misuse reports, and trust-and-safety review.
- To maintain security, auditability, fraud prevention, and service continuity.
Your Control
Visibility, Review & Context
Controls
Visibility And Review
Families can manage visibility settings for clusters and memorial records where supported by the product flow.
Users can update certain account and profile details through account settings and authenticated requests.
Support and safety submissions may be retained to investigate policy concerns, payment disputes, and abuse patterns.
Important Notes
Context For Use
Public memorial data should be treated as intentionally published archival information by the family workspace.
Private family workspace data is intended for authorized family members, administrators, and designated verifiers only.
Data practices described here reflect current product behavior and internal workflow design.