Privacy policy
Privacy Policy
TreulogyAI treulogy.com Operated by: Common Sense Goods Inc. Last updated: April 23, 2026 Version: 2.0
1. Who we are
This Privacy Policy applies to TreulogyAI (treulogy.com), a SaaS application that helps users write eulogies and memorial content using an AI-assisted guided process.
TreulogyAI is a brand of Common Sense Goods Inc., a corporation incorporated in Alberta, Canada.
Contact details:
- Privacy inquiries: legal @ treulogy . com
- Postal address: Suite 129, 440-10816 Macleod Trail, Calgary, Alberta T2J 5N8, Canada
2. The short version
We collect only what we need to write your eulogy. We do not sell your personal information. The stories and memories you share about your loved one are used only to generate your eulogy — nothing else. We use privacy-first analytics that do not track you or set cookies. You have rights over your data and we will honour them. If you have questions, email us.
3. What information we collect and why
3.1 — Account and purchase information
| Information | How it is collected | Why we collect it |
|---|---|---|
| Email address | Shopify checkout and Bubble account | To create your account, deliver your purchase, and send service communications |
| Purchase information | Shopify checkout | To process your payment and grant access to the application |
| Payment data | Handled directly by Stripe — we never see or store your card details | Payment processing |
| Magic link authentication token | Generated automatically on purchase | To provide secure, passwordless access to your account |
| Aggregate website usage data | Fathom Analytics (cookieless, no personal data) | To understand how our website is used |
3.2 — Eulogy generation information
| Information | How it is collected | Why we collect it |
|---|---|---|
| Preferred name of the deceased (nickname or first name) | In-app entry | To personalize your eulogy |
| Pronouns of the deceased | In-app entry | To generate grammatically appropriate content |
| Your relationship to the deceased | In-app entry | To set the appropriate tone and voice |
| Whether the deceased was married | In-app entry | Used for conditional logic in the guided questions only |
| Whether the deceased had children | In-app entry | Used for conditional logic in the guided questions only |
| Narrative responses to guided questions | In-app question-and-answer process | To generate your eulogy |
3.3 — Important notes on eulogy content
We do not use this content for profiling, advertising, or analytical purposes. We may occasionally use fully anonymized eulogy excerpts for promotional purposes, with all identifying information removed or replaced before use. You may opt out of this at any time by contacting legal@treulogy.com. See our Terms of Service for full details.
Who reads your responses: Your responses are not read by our team for content, marketing, or editorial purposes. Access to user data is limited to essential operational purposes only — such as responding to deletion requests, resolving technical issues, or complying with legal obligations — and is subject to strict confidentiality obligations. Your content is processed by an AI writing tool to generate your eulogy. You will be asked to acknowledge this before your first eulogy is generated.
The deceased are not users: The individuals described in your responses are not users of our service. Only you are. We treat all content about deceased individuals with the highest level of care and confidentiality.
Data minimization: We deliberately collect the minimum information required to generate a meaningful eulogy. We do not collect last names, birth dates, addresses, or other personal details about the deceased as structured data fields. Any additional details you choose to include appear only within your narrative responses.
Account-to-application handoff: Upon completing your purchase on treulogy.com, your email address is passed from our payment platform to our application platform to create and authenticate your account. A time-limited, single-use login link is sent to your email address to provide secure access to the application.
3.4 — Business customers (funeral homes and professional users)
TreulogyAI offers business licensing to funeral homes and other professional users. Where a business customer accesses the Service on behalf of bereaved individuals ("end users"), the following applies:
- The business customer is responsible for informing end users that AI technology is used to generate eulogy content
- The business customer is responsible for obtaining any consents required from end users under applicable law before entering their information into the Service
- Common Sense Goods Inc. processes end user data submitted by business customers solely to deliver the Service under contract with the business customer
- End users whose information has been submitted by a business customer may exercise their privacy rights by contacting us at legal@treulogy.com — we will work with the business customer to fulfil any such request
- Business customers are subject to a separate Data Processing Agreement governing the processing of end user data on their behalf
4. Legal basis for processing (GDPR — EU/UK users)
If you are located in the European Union or United Kingdom, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):
| Processing activity | Legal basis |
|---|---|
| Creating and managing your account | Contract (Article 6(1)(b)) — necessary to fulfil our agreement with you |
| Processing your payment | Contract (Article 6(1)(b)) — necessary to fulfil our agreement with you |
| Processing eulogy generation content | Contract (Article 6(1)(b)) — necessary to deliver the service you purchased |
| Sending service and transactional emails | Contract (Article 6(1)(b)) — necessary to deliver the service |
| Sending marketing emails (if opted in) | Consent (Article 6(1)(a)) — you gave us explicit permission at registration |
| Website analytics | Legitimate interests (Article 6(1)(f)) — Fathom Analytics processes no personal data and presents negligible privacy risk |
| Complying with legal obligations | Legal obligation (Article 6(1)(c)) |
A note on AI processing and GDPR Article 22: The eulogy generation process involves automated processing of the content you provide. This does not constitute solely automated decision-making that produces legal or similarly significant effects on you — you retain full control over the output and are encouraged to review and edit it before use. No legal or significant personal decisions are made about you based on this processing.
Withdrawing consent: Where we rely on consent as our legal basis, you may withdraw it at any time. For marketing emails, use the unsubscribe link in any email. For other consent-based processing, contact us at the address in Section 1.
5. Legal basis for processing (PIPEDA — Canadian users)
As a Canadian corporation, we are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).
We collect, use, and disclose personal information only with your knowledge and consent (express or implied depending on the sensitivity and context), for purposes that a reasonable person would consider appropriate, and only to the extent necessary for those purposes.
You may withdraw consent to non-essential uses of your personal information at any time by contacting us at the address in Section 1.
6. How long we keep your information
| Data type | Retention period |
|---|---|
| Account information | Until you delete your account, or after 24 months of inactivity |
| Eulogy generation content and responses | Deleted within 90 days of generation, unless you have an active account |
| Purchase records | 7 years (required for Canadian and US tax purposes) |
| AI processing consent record | Retained for the life of your account plus 2 years |
| Support communications | 2 years from last contact |
You may request deletion of your personal information at any time, subject to legal retention obligations. See Section 9 for your full rights.
Account deletion: You may request account deletion at any time by contacting legal@treulogy.com. Upon deletion, your account data and eulogy content will be removed within 30 days, subject to our legal retention obligations for purchase records.
7. Who we share your information with
We do not sell, rent, or trade your personal information. We share it only with the following service providers who process it on our behalf:
| Service provider | Purpose | Data location |
|---|---|---|
| Bubble.io | Application hosting, data storage, and account management | United States (AWS US-East, Virginia) |
| Shopify Inc. | E-commerce platform and checkout for treulogy.com | United States |
| Stripe Inc. | Payment processing | United States |
| Klaviyo Inc. | Transactional and marketing email platform | United States |
| Fathom Analytics | Privacy-first website analytics — no personal data processed | Canada (CDN global) |
| AI writing provider | Processes your guided question responses to generate your eulogy |
| OpenAI Inc. | AI writing model that processes your guided question responses to generate your eulogy. OpenAI does not use API inputs to train its models. Inputs and outputs are retained by OpenAI for up to 30 days for safety purposes only, then deleted. | United States |
Eulogy generation is powered by OpenAI's API. The responses you provide are sent to OpenAI solely to generate your eulogy and are not used by OpenAI to train its models. OpenAI retains API inputs and outputs for up to 30 days for safety monitoring purposes. For more information see OpenAI's privacy policy at openai.com/privacy.
International data transfers: Our service providers are primarily located in the United States. If you are located in the EU, UK, or Canada, your personal information will be transferred to and processed in the United States. We rely on the following transfer mechanisms:
- For EU/UK users: Standard Contractual Clauses (SCCs) where applicable, and transfers to providers participating in recognized data transfer frameworks
- For Canadian users: Transfers are made to jurisdictions with comparable privacy protections under contractual safeguards
We do not transfer your data to any other countries.
8. Cookies
8.1 — Our approach to cookies
Strictly necessary cookies (no consent required):
Shopify and Bubble set a small number of functional cookies required for the website and application to operate — including session management and authentication tokens. These cannot be disabled without affecting functionality.
Analytics: We use Fathom Analytics, which is cookieless. Fathom does not set any cookies, does not collect personally identifiable information, and does not track you across websites. No analytics consent is required.
Marketing and advertising cookies: We do not use any advertising, retargeting, or third-party marketing cookies. If this changes, this policy will be updated and appropriate consent mechanisms will be added before any such cookies are set.
8.2 — Managing cookies
You can control strictly necessary cookies through your browser settings, but doing so may affect website and application functionality. Because we do not use analytics or advertising cookies, there is nothing further to opt out of.
9. Your rights
9.1 — US users (including California — CCPA/CPRA)
California residents have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
- Right to know — Request a copy of the personal information we have collected about you in the past 12 months
- Right to delete — Request deletion of your personal information, subject to certain exceptions
- Right to correct — Request correction of inaccurate personal information
- Right to opt out of sale or sharing — We do not sell or share personal information for cross-context behavioural advertising
- Right to limit use of sensitive personal information — We do not use sensitive personal information beyond what is necessary to provide our services
- Right to non-discrimination — We will not discriminate against you for exercising any of these rights
To exercise your rights, contact us at the address in Section 1. We will respond within 45 days. We may need to verify your identity before fulfilling your request.
Note for other US states: Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with consumer privacy laws provide similar rights. We extend the same rights to all US users regardless of state.
9.2 — EU and UK users (GDPR / UK GDPR)
You have the following rights:
- Right of access (Article 15) — Request a copy of your personal data
- Right to rectification (Article 16) — Request correction of inaccurate data
- Right to erasure (Article 17) — Request deletion, subject to conditions
- Right to restrict processing (Article 18) — Request that we limit how we use your data
- Right to data portability (Article 20) — Receive your data in a structured, machine-readable format
- Right to object (Article 21) — Object to processing based on legitimate interests
- Rights related to automated decision-making (Article 22) — See note in Section 4 regarding AI processing
To exercise these rights, contact us at the address in Section 1. We will respond within 30 days (extendable to 3 months for complex requests). There is no charge for reasonable requests.
Right to lodge a complaint: You have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. In the EU, contact your national data protection authority.
Note on EU/UK representative: GDPR Article 27 may require appointment of a local EU/UK representative once you regularly process EU/UK personal data. Consult your attorney about whether your traffic volume triggers this requirement.
9.3 — Canadian users (PIPEDA / Alberta PIPA)
You have the right to:
- Access the personal information we hold about you
- Challenge the accuracy and completeness of your information and have it amended
- Know what personal information we have collected, used, or disclosed
- Withdraw consent to non-essential processing
- Lodge a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca)
10. Children's privacy
TreulogyAI is not directed at children under the age of 13 (or under 16 for EU/UK users). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
11. Security
We take reasonable technical and organizational measures to protect your personal information, including:
- Encrypted data transmission (HTTPS/TLS) across all pages and the application
- Single-use, time-limited authentication tokens for account access
- Access controls limiting who can access personal data
- Use of reputable, security-audited third-party service providers (Bubble.io is SOC 2 compliant)
- Regular review of data access and storage practices
No method of transmission over the internet is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify you and relevant authorities as required by applicable law.
12. Links to other websites
This website may contain links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit.
13. Changes to this policy
When we make material changes to this policy we will:
- Update the "Last updated" date at the top of this page
- Post a notice on the website for a reasonable period
- Notify you by email if the changes materially affect how we process your data
- Where changes affect AI processing consent, existing users will be shown an updated acknowledgment on their next login
Continued use of our service after the effective date of a revised policy constitutes acceptance of the changes.
14. Contact us
TreulogyAI — Privacy inquiries:
legal @ treulogy . com
Common Sense Goods Inc.
Suite 129, 440-10816 Macleod Trail
Calgary, Alberta T2J 5N8
Canada
We aim to respond to all privacy inquiries within 5 business days.