Privacy Policy

Last updated: May 24, 2026

At Eterna, we believe that the trust you place in us to preserve your most precious memories is sacred. This Privacy Policy explains how we collect, use, store, and protect your personal information. We are committed to transparency and giving you control over your data.

Information We Collect

  • Account information: name, email, date of birth
  • Memorial content: photos, videos, voice recordings, written stories
  • Usage data: interactions with AI personas, memory uploads, share activity
  • Voice data: recordings used for voice synthesis (with explicit consent)
  • Payment information: handled securely by our payment processor (Paddle/Stripe)

How We Protect Your Data

  • AES-256 encryption for stored content
  • TLS 1.3 for all data in transit
  • Row-level security (RLS) policies on all user data tables
  • Regular security audits and penetration testing
  • Access limited to essential personnel only

How We Use Your Data

  • Provide and improve memorial and legacy services
  • Train AI personas and voice models (only with explicit consent)
  • Process payments and manage subscriptions
  • Send service notifications and optional updates
  • Comply with legal obligations

Your Privacy Rights

  • Access: request a copy of all data we hold about you
  • Correction: update inaccurate personal information
  • Deletion: request account and data deletion (subject to legacy guarantees)
  • Portability: export your memorial content at any time
  • Consent withdrawal: revoke AI training consent at any time

Cookies & Tracking

  • Essential cookies: required for authentication and security
  • Analytics cookies: help us improve the platform (optional, opt-out available)
  • Preference cookies: remember your settings and display choices
  • You can manage cookie preferences via your browser or our cookie banner

Data Transfers & Storage

  • Data is stored in secure cloud infrastructure within the United States
  • Backups are replicated across multiple regions for disaster recovery
  • Heirloom tier includes 100-year hosting guarantee with succession planning
  • We do not sell your data to third parties
  • Third-party processors are bound by strict data processing agreements

Data Retention & Deletion

  • Active accounts: data retained while subscription is active
  • Cancelled accounts: downgraded to free tier; content may be archived
  • Deletion requests: processed within 30 days, except where legally required to retain
  • Legacy memorials: retained per the terms of the Heirloom hosting guarantee
  • Voice training data: deleted within 90 days if consent is withdrawn

Contact Our Privacy Team

  • Email: privacy@eterna.app
  • Response time: within 48 hours for privacy-related inquiries
  • Data Protection Officer: appointed for GDPR and CCPA compliance
  • Postal: Eterna LLC, 123 Legacy Lane, Suite 400, Wilmington, DE 19801

GDPR Compliance

For users in the European Economic Area, we process data under Article 6(1)(b) and (f) of the GDPR. You have the right to lodge a complaint with your local supervisory authority.

CCPA Compliance

California residents have the right to know, delete, and opt-out of the sale of personal information. Eterna does not sell personal information.

Questions about your privacy? Contact our privacy team