Privacy policy

The controller is AItomation LLC, [—— address]. For anything about your data, write to [—— data protection email].

Our representative in the European Union (Art. 27 GDPR) is [—— name and address of the EU representative].

Account data: your name, email address, your password in hashed form, and — if you enter one — a phone number with its country dialling code.

Grave data: the name of the deceased, the cemetery, the plot and grave reference, the grave's location on the map once our caretaker has recorded it, and any notes you add yourself.

The authorisation you sign when you add a grave: the name you signed with, your relationship to the deceased, the exact wording you accepted, and the time and IP address it was signed from. We keep it as evidence that the work was ordered by someone entitled to order it.

Visit records: photographs and videos before and after each visit, the caretaker's note on what was done, the time of the visit, and the location of the caretaker's phone at the grave, which we use to check that the visit took place at the right grave.

Payments: your subscriptions and invoices. Card details go straight to Stripe; we never see or store them.

If you create a family share link: the link itself, and whether it is still active. If you join the waiting list for a place we do not cover yet: your email address, your name if you give it, the place and the language you wrote in. If you send us an enquiry through the contact form: the cemetery you chose, your email address, your message, your name and phone number if you give them, the language you wrote in, and a one-way hash of your IP address that we use only to limit repeated submissions.

To perform the service you contracted — performance of a contract is the legal basis. Payment records are processed to meet our statutory bookkeeping obligations.

The signed authorisation, the visit location and the error reports described below are processed on the basis of our legitimate interest: proving what was ordered and done, and keeping the service working.

We use your email address for messages about the service. Marketing messages are sent only with your separate consent, and you can unsubscribe at any time. A waiting-list address is used only to tell you when we start working in that place. An enquiry is used only to answer it.

Stripe processes payments and is itself a controller of card data. Hetzner hosts our servers. Cloudflare stores the photographs and videos (R2, EU jurisdiction). Resend sends our emails. Sentry receives technical error reports, set up not to include names or email addresses. Google Analytics measures traffic, only with your consent (see below).

Our caretakers see what they need to find and look after the grave. Anyone you give a family share link to can see that grave's visit reports without an account; you can switch the link off in the portal at any time, and it stops working at once.

Some of these providers are based outside the European Union, and the field work is done in Serbia. [—— transfers outside the EU and the safeguards relied on.]

We do not sell your data or pass it to third parties for marketing.

We photograph the grave solely to report back to you. We do not publish those photographs or use them promotionally without your explicit, separately given consent.

Account data is kept while the account exists and for [——] after it is deleted.

Visit records for a grave — photographs, videos, reports and visit locations — are kept while a subscription covers that grave and for [——] after the last one ends, and are then deleted. The signed authorisation is kept for [——].

Enquiries sent through the contact form are kept for [——] and then deleted, unless you become a client.

Invoices and accounting records are kept for as long as tax law requires.

You have the right of access to your data, and rights to rectification, erasure, restriction of processing, portability and objection. Send requests to [—— email]; we answer within 30 days.

In the portal you can download, for each grave, every photograph and video with each visit's report and your data in machine-readable form (JSON), at any time and without asking us.

If you live in the European Union you hold the same rights under the GDPR. You may complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection, or to the supervisory authority in your own country.

The cookie that keeps you signed in is necessary for the portal to work and cannot be switched off.

With your explicit consent we measure traffic using Google Analytics (Google Ireland Limited) — which pages are read, where visitors come from and on what device. Until you agree, nothing is loaded from Google's servers and no such cookie is set. Your IP address is truncated before processing.

Your answer is kept locally in your browser, not on our servers. You can withdraw consent at any time with one click — on “Cookies” at the foot of the public website and at the top of the sign-in pages, or in your account menu in the portal — exactly as easily as you gave it.