Privacy policy

PRIVACY POLICY
──────────────
TreulogyAI
treulogy.com
Operated by: Common Sense Goods Inc.
Last updated: July 2026
Version: 3.0

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

1. WHO WE ARE
─────────────

This Privacy Policy applies to TreulogyAI (treulogy.com), an AI-assisted tribute creation application that helps users write eulogies, obituaries, funeral programs, and social memorial posts.

TreulogyAI is a brand of Common Sense Goods Inc., a corporation incorporated in Alberta, Canada.

Contact:
legal@treulogy.com
Suite 129, 440-10816 Macleod Trail
Calgary, Alberta T2J 5N8, Canada

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

2. THE SHORT VERSION
────────────────────

We collect only what we need to create your tribute. We do not sell your personal information. The memories and stories you share about your loved one are used only to generate your tribute content — nothing else. Cause of death information, where shared, is never used for any promotional purpose. We use privacy-first analytics that do not track you or set cookies. You have rights over your data and we will honour them. If you have questions, email us.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

3. WHAT INFORMATION WE COLLECT AND WHY
──────────────────────────────────────

3.1 — Account and purchase information:

Information | How collected Why
Email address | Shopify checkout and Bubble account To create your account, deliver your purchase, and send service communications
First name | Registration (optional) To personalize your experience
Purchase information | Shopify checkout To process payment and grant access
Payment data | Handled directly by Stripe We never see or store your card details
Magic link authentication token | Generated automatically on purchase To provide secure, passwordless account access
Aggregate website usage data | Fathom Analytics (cookieless) To understand how our website is used

3.2 — Tribute setup information:

When creating a Tribute, you provide basic context that helps personalize the generated content:

Information | How collected Why
Preferred name or nickname of the subject | In-app entry To personalize content
Pronouns | In-app entry To generate grammatically appropriate content
Your relationship to the subject | In-app entry To set appropriate tone and voice
Whether the subject was married | In-app entry Conditional logic only — not stored as a searchable field
Whether the subject had children | In-app entry Conditional logic only — not stored as a searchable field
Tribute type (Memorial, Living, or Collection) | In-app selection To configure the appropriate question set
Optional photo | In-app upload Displayed within your Tribute only — not sent to AI for processing
Family lead name and email (B2B only) | Entered by funeral home To create and authenticate family account

Important: The setup information listed above is stored in our application environment and is not included in the content sent to our AI writing tool for generation purposes. Only your narrative responses to the guided questions are processed by AI.

3.3 — Guided question responses:

The core of the TreulogyAI experience is a series of optional guided questions that invite you to share memories, stories, and details about your loved one. These responses collectively form your Tribute and are used to generate all memorial content outputs.

The questions cover six broad areas:
- Their personality, presence, and interests
- Their relationships — family, friends, marriage, children, pets
- The things they loved — hobbies, food, music, activities
- Their everyday life — work, home, faith, daily routines
- Their life's big moments — travel, celebrations, milestones
- Their history — childhood, teenage years, adult life, and eulogy-specific details

All questions are optional except those explicitly marked as required (currently: the name of the eulogy speaker and their relationship to the deceased, required only for eulogy generation).

Sensitive fields within guided questions:

Birthplace and birthdate: These fields include suggestions to use placeholders (such as "Hometown" or "Birthdate") if you prefer to keep this information private. Approximate information is always acceptable.

Cause of death: This field is entirely optional. Where provided, it is used only to inform the tone and language of the generated tribute content. It is never included in any anonymized sample content, marketing materials, or promotional use — regardless of any other content preferences on your account. This information is handled with the highest level of sensitivity and confidentiality.

Third-party names: The guided questions invite you to share names of family members, friends, mentors, and others. First names or initials are sufficient — full names are not required. This information is used only to generate your tribute content.

Children and grandchildren: You may list children and grandchildren by first name only, or simply describe them (e.g., "Three grandchildren") without naming them.

3.4 — How your content is used:

The memories and stories you share are used solely to generate your tribute content. We do not use this content for marketing, profiling, advertising, or analytical purposes.

We may occasionally use fully anonymized tribute excerpts for promotional purposes, with all identifying information — including names, locations, relationships, and cause of death — removed before use. You may opt out of this at any time by contacting legal@treulogy.com with the subject line "Promotional opt-out." See our Terms of Service for full details.

Who accesses your content: Your responses are processed by our AI writing tool to generate your tribute content. Access to your responses by our team is limited to essential operational purposes only — such as responding to deletion requests, resolving technical issues, or complying with legal obligations — and is subject to strict confidentiality obligations. No member of our team reads your responses for content, marketing, or editorial purposes.

What is not sent to AI: The tribute setup information (preferred name, pronouns, relationship, photo) and any structured demographic fields are stored in our application and are not included in the content payload sent to OpenAI for generation.

3.5 — Business customers (funeral homes and professional users):

TreulogyAI offers B2B licensing to funeral homes and other professional users. Where a funeral home creates a Tribute and shares access with a bereaved family:

- The lead family member is the Tribute owner — they retain permanent access to their Tribute regardless of the funeral home's subscription status
- The funeral home collects the family lead's name and email address to initiate the Tribute and send the access link
- Everything family members contribute happens within our application environment — the funeral home's payment processor (Shopify) has no access to any family or tribute data
- The funeral home is responsible for informing families that AI technology is used to generate tribute content and for obtaining any consents required under applicable law
- End users accessing TreulogyAI through a funeral home may exercise their privacy rights directly with us at legal@treulogy.com
- Business customers are subject to a separate Data Processing Agreement

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

4. LEGAL BASIS FOR PROCESSING (GDPR — EU/UK USERS)
──────────────────────────────────────────────────

Note on automated processing: The tribute generation process involves automated processing of the content you provide. This does not constitute solely automated decision-making that produces legal or similarly significant effects — you retain full control over all outputs and are encouraged to review and edit them before use.

Withdrawing consent: Where we rely on consent, you may withdraw it at any time by contacting legal @ treulogy.com or using the unsubscribe link in any marketing email.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

5. LEGAL BASIS FOR PROCESSING (PIPEDA — CANADIAN USERS)
───────────────────────────────────────────────────────

As a Canadian corporation, we are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA). We collect, use, and disclose personal information only with your knowledge and consent, for purposes a reasonable person would consider appropriate, and only to the extent necessary for those purposes.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

6. HOW LONG WE KEEP YOUR INFORMATION
────────────────────────────────────

Tribute deletion: At the 11-month mark, you will receive an email offering storage extension options. If no extension is selected, your Tribute and all associated content will be permanently deleted at 12 months. Deletion is irreversible.

Account deletion: You may request account deletion at any time by contacting legal@treulogy.com. Your account data and tribute content will be removed within 30 days, subject to legal retention obligations for purchase records.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

7. WHO WE SHARE YOUR INFORMATION WITH
─────────────────────────────────────

We do not sell, rent, or trade your personal information. We share it only with the following service providers:

Provider | Purpose Data location
Bubble.io | Application hosting, data storage, account management United States (AWS US-East, Virginia) — SOC 2 compliant
Shopify Inc. | E-commerce platform and checkout for treulogy.com United States
Stripe Inc. | Payment processing United States
Klaviyo Inc. | Transactional and marketing email United States
OpenAI Inc. | AI writing tool — processes guided question responses to generate tribute content United States
Fathom Analytics | Privacy-first website analytics — cookieless, no personal data processed Canada (CDN global)

Important note on our payment platform and tribute data: Our payment processor (Shopify) handles only the purchase transaction for direct consumer accounts. Tribute content — the memories, stories, and responses you share — lives exclusively in our secure application environment (Bubble.io) and is never shared with Shopify. For B2B accounts, Shopify processes only the funeral home's subscription payment and has no access to any family or tribute data.

OpenAI data handling: Guided question responses are sent to OpenAI's API to generate tribute content. OpenAI does not use API inputs and outputs to train its models by default. OpenAI retains API inputs and outputs for up to 30 days for safety monitoring purposes, after which they are deleted. For more information see openai.com/privacy. We use OpenAI's current production language models, which may be updated from time to time to improve output quality.

International data transfers: Our service providers are primarily located in the United States. If you are in the EU, UK, or Canada, your personal information may be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) where applicable and require contractual protections from our service providers.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

8. COOKIES
──────────

Analytics: We use Fathom Analytics, which is cookieless. Fathom does not set any cookies, does not collect personally identifiable information, and does not track you across websites. No analytics consent banner is required.

Functional cookies: Shopify and Bubble set a small number of strictly necessary functional cookies required for the website and application to operate (session management, authentication tokens). These cannot be disabled without affecting functionality and do not require consent.

Advertising and tracking cookies: We do not use any advertising, retargeting, or social media tracking cookies on any TreulogyAI pages or in the application. We do not install tracking pixels from any social media platform.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

9. YOUR RIGHTS
──────────────

9.1 — US users (CCPA/CPRA):

California residents have the right to know, delete, correct, and opt out of sale or sharing of personal information. We do not sell or share personal information for cross-context behavioural advertising. To exercise your rights, contact legal@treulogy.com. We will respond within 45 days.

Other US state privacy laws (Virginia VCDPA, Colorado CPA, Connecticut CTDPA, and others) provide similar rights. We extend the same rights to all US users regardless of state.

9.2 — EU and UK users (GDPR / UK GDPR):

You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data. You also have rights related to automated decision-making. To exercise these rights, contact legal@treulogy.com. We will respond within 30 days.

You have the right to lodge a complaint with your local supervisory authority. In the UK: ico.org.uk. In the EU: contact your national data protection authority.

9.3 — Canadian users (PIPEDA / Alberta PIPA):

You have the right to access your personal information, challenge its accuracy, and withdraw consent to non-essential processing. You may lodge a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca).

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

10. CHILDREN'S PRIVACY
──────────────────────

TreulogyAI is not directed at children under 13 (or under 16 for EU/UK users). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

11. SECURITY
────────────

We take reasonable technical and organizational measures to protect your personal information, including:
- Encrypted data transmission (HTTPS/TLS) across all pages and the application
- Single-use, time-limited authentication tokens for account access
- Access controls limiting who can access personal data
- Use of SOC 2 compliant infrastructure (Bubble.io)
- Regular review of data access and storage practices

In the event of a data breach posing risk to your rights, we will notify you and relevant authorities as required by applicable law.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

12. CHANGES TO THIS POLICY
──────────────────────────

When we make material changes we will update the "Last updated" date, post a notice on the website, and notify you by email if changes materially affect how we process your data. Where changes affect AI processing consent, existing users will be shown an updated acknowledgment on their next login.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

13. CONTACT US
──────────────

TreulogyAI — Privacy inquiries:
legal @ treulogy. com
Common Sense Goods Inc.
Suite 129, 440-10816 Macleod Trail
Calgary, Alberta T2J 5N8, Canada

We aim to respond to all privacy inquiries within 5 business days.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━