Privacy Policy

ByeFam ("we," "our," or "us") is operated by Zachary Bye, a sole proprietor based in British Columbia, Canada. We take your privacy seriously, especially given the deeply personal nature of memorial creation.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights under Canadian privacy law (PIPEDA). By using ByeFam, you consent to the practices described here.

1. Information We Collect

Information you provide directly

• Contact information: Your name and email address when you place an order or contact us.
• Memorial content: Photos of your loved one, tribute text, and any other content you upload to create a memorial. This may include information about a deceased person.
• Payment information: Credit card details are collected and processed by Stripe (our payment processor). We do not store your card number. We retain only a transaction reference and payment status.
• Order details: Product tier, special instructions, and delivery preferences.

Information collected automatically

• Usage data: Pages visited, actions taken, and session metadata collected to improve our service.
• Error data: Crash reports and error logs (collected via Sentry) to maintain service quality.
• IP address and device information: Collected automatically when you access our website.

2. How We Use Your Information

We use your personal information only for the purposes it was collected:

• Creating the memorial video you ordered (including sharing your photos with our AI service providers)
• Processing your payment and managing your order
• Communicating with you about your order status, delivery, and support requests
• Complying with legal obligations
• Improving our services through aggregated, anonymized analytics
• Detecting and preventing fraud or abuse

We do not use your photos, memorial content, or personal information for marketing, advertising, or any purpose beyond fulfilling your order.

3. Third-Party Service Providers

To create your memorial video, we share your content with AI service providers under confidentiality agreements. These providers process your data only to fulfill your order:

• Stripe — Payment processing (United States). Stripe Privacy Policy
• Supabase — Database and file storage (United States). Supabase Privacy Policy
• Cloudflare R2 — Media file storage and delivery (United States / global CDN). Cloudflare Privacy Policy
• D-ID — AI photo animation for memorial video creation (Israel/United States). D-ID Privacy Policy
• ElevenLabs — AI voice synthesis for memorial audio (United States). ElevenLabs Privacy Policy
• Runway — AI video generation (United States). Runway Privacy Policy
• Resend — Transactional email delivery (United States). Resend Privacy Policy
• Sentry — Error monitoring (United States). Sentry Privacy Policy

Note on cross-border transfers: Most of our service providers are based in the United States. By using ByeFam, you consent to your information being transferred to and processed in the United States and other countries, which may have different privacy laws than Canada.

4. Grief Data & Memorial Content

We understand that the content you share with us — photos of a loved one, tribute stories, family memories — is among the most sensitive personal data imaginable. We treat it accordingly:

• Your photos and memorial content are used exclusively to create your video. We do not display, share, or reference them for any other purpose.
• We do not send marketing emails based on bereavement. You may receive transactional emails related to your order only.
• Photo files are stripped of EXIF metadata (including GPS location) before processing to protect your family's location information.
• Uploaded photos and completed videos are deleted from our servers 30 days after your order is delivered. You receive the final video file for permanent keeping.
• We will never sell, license, or share memorial content with advertisers or data brokers.

5. Data Retention

6. Your Rights (PIPEDA)

Under Canada's Personal Information Protection and Electronic Documents Act, you have the right to:

• Access your data: Request a copy of the personal information we hold about you.
• Correct your data: Request correction of inaccurate information.
• Withdraw consent: Withdraw consent to data processing where processing is based on consent (note: this may affect our ability to fulfil your order).
• Request deletion: Ask us to delete your personal information, subject to our legal retention obligations.
• Know about disclosures: Ask whether your information has been disclosed to third parties.

To exercise any of these rights, email us at [email protected] with "Privacy Request" in the subject line. We will respond within 30 days.

If you are unsatisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.

7. Security

We implement technical and organizational measures appropriate to the sensitivity of the data we handle:

• All data transmitted to and from our service is encrypted in transit (TLS).
• Authentication is required to access order data and memorial content.
• Access to production systems is restricted to authorized personnel only.
• Payment data is handled exclusively by Stripe; we do not store card numbers.

No system is completely secure. If you believe your data has been compromised, please notify us immediately at [email protected].

8. AI-Generated Content

ByeFam uses artificial intelligence services to create memorial videos. You should be aware that:

• Your photos are processed by AI systems operated by D-ID, ElevenLabs, and Runway.
• AI-generated content is an artistic interpretation, not a precise reconstruction of your loved one.
• Each AI provider's own privacy policy governs their handling of the data we send them.

9. Children's Privacy

ByeFam is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Memorials may be created for deceased children. Content related to deceased children is handled with the same protections as all memorial content, with particular care.

10. Cookies

We use session cookies necessary to operate the service (authentication, order tracking). We do not use advertising cookies or third-party tracking cookies. You can disable cookies in your browser settings, but this may affect service functionality.

11. Changes to This Policy

We may update this Privacy Policy when our practices change. We will notify you of material changes by email (if you have an account) or by posting a notice on our website. Continued use of ByeFam after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

For privacy questions, data requests, or to report a concern: