The controller is Roni Michaeli, Exempt dealer 209233873, Ziso 17, Herzliya, Israel. Email ronimichaeli.work@gmail.com, phone 054-439-6677.
This policy follows Israel's Privacy Protection Law, 1981, including Amendment 13. It describes what the site actually collects.
To open an account: a display name, an email address, and a password stored by Firebase Authentication, not by us as plain text. Signing in with Google also provides the name, email, and profile photo Google shares.
On a memorial: names, dates, text, photos, videos, and recordings the family uploads, and the email addresses of invited editors.
From a visitor who does not register: the name shown on a letter or a candle, the text, and a date. A visitor's email or phone is not collected.
On the contact form: a name, a phone or email, and a message. The form is emailed and is not stored in the database.
When an account is accepted we store the time, the version of the terms, and whether you asked for updates.
To open a memorial, allow editing, show it to someone with the link, send a password reset, answer a message, and meet our retention and security duties.
Marketing notes are sent only if you mark a separate box. You can ask to stop by email.
Google Firebase: authentication, a Firestore database in region me-west1 (Israel), and files in Cloud Storage. Related authentication processing may happen outside Israel.
Vercel: hosting and cookieless visit measurement. An IP address is used for statistics and is not kept by us as a profile.
HeyGen (USA): only for a memorial whose family turned on the filmed figure, and only after the owner's consent. They receive up to three photos of the face, a recording if a personal voice is chosen, and the audio of each approved text, to make the film. Photos, audio and films are deleted on their side as soon as a film is made, and the film is kept with us. Deleting the memorial also deletes the figure on their side.
Resend: only when the form is active, to deliver the message by email.
PayPlus (Israel): card processing on their secure payment page and the receipt. They receive the name, email, amount and plan name. Card details are entered on their page only, never pass through us and are never kept by us. We keep the order number, amount, plan and approval number.
YouTube and Spotify: loaded only after a click or after embeds are approved. They are separate services with their own policies.
We do not sell information.
For as long as the memorial is active under a yearly plan, plus up to twelve months after the plan ends, unless you ask for deletion sooner. Payment records are kept as the law requires for accounting documents.
An item in the trash is deleted automatically after 30 days.
An email enquiry stays in the business mailbox for as long as it is needed to handle and record it.
You may ask to see information, correct it, or delete it. Inside the account you can export a memorial and delete it. There is a button in the settings to delete the account itself.
Write to ronimichaeli.work@gmail.com or call 054-439-6677.
A private memorial is limited to members. Source files for a figure and a voice are available to editors only. Firebase App Check is turned on when a key is configured, to reduce automated letters and candles.