Privacy Policy

The drafts are written by AI from the answers you give here. Check every name, date and fact before you use them.

Last updated: 2026-10-10.

This policy covers the AI Obituary and Eulogy Drafts website. The controller of your personal data is Northgate Enterprises LLC, a Virginia limited liability company ("we", "us"). Contact: legal@northgate-enterprises.com.

What the service does with your data

You fill in a questionnaire about a person who has died. We pay Stripe to take your payment, send your answers to an AI provider to write the drafts, and show the drafts on a private order page. The drafts are written by AI, and every page and every draft says so. We have no accounts, no cookies, no analytics and no marketing email.

What we collect, why, and for how long

• Questionnaire answers. The name of the person who died, their dates of birth and death, your relationship to them, family members you name, life facts, what they were like, memories, the tone you chose and which drafts you want. We use them only to write your drafts. We delete them 30 days after your drafts are delivered. If an order is never delivered (for example you do not pay), we delete the answers 30 days after you submitted them.
• Drafts. The texts the AI writes for your order. We show them on your order page and delete them at the same time as the answers.
• Revision requests. The written requests for changes that you send from your order page. We use them only to rewrite your drafts. We store the ones that were used for a revision and delete them with the answers.
• Your email address. Stripe collects it at checkout and sends it to us when your payment is confirmed. We use it to send you the delivery email with your order link or, if no drafts could be delivered and your payment was refunded, one email telling you so. We use it for no other mail. We delete it with the answers, 30 days after delivery.
• Order record. After the answers, drafts and email are deleted, a minimal record remains: a random order id, the order status, timestamps, the Stripe checkout session id, the Stripe refund id if you were refunded, a count of AI calls and tokens used, and a count of fact-check findings. It holds no answers, no drafts and no email address.
• Your IP address. The service keeps it only to limit how many requests and orders one address can make. It is not written to the order record. The service counts in memory and, when it runs with a database, also saves each count there, apart from the order records: the address, when its time window began and how many requests or orders it has made. That way a restart does not reset the limit. Each counter drops an address within two of its time windows (a day for orders) when the service next counts a request or order, and deletes the saved count with it, so an address is held for at most two days of the service's use.
• Operating logs. Our logs name an event and the order id (for example that a refund was made). They do not contain your answers, your drafts or your email address.
• Payment details. Stripe takes your card details and billing address on its own page. We never receive or store your full card number. About your card, Stripe shows us the brand, the last four digits, the expiry date and the country. Stripe's payment confirmation also includes your name and billing address; the service reads only your email address from it and does not store the rest.

We do not ask for the cause of death or for health, religion or other sensitive details. If you write them in a free-text box, they are treated like any other answer: they are sent to the AI provider and may appear in your drafts.

Who else handles your data

• Stripe, Inc. takes your payment, collects your email address and billing address, and makes refunds. It receives your order id, the price and what you enter on its page. Stripe also acts as an independent controller of payment data under its own privacy policy: https://stripe.com/privacy
• Amazon Web Services (Amazon Bedrock), the AI provider. It receives the questionnaire answers listed above, except which drafts you want, and any revision requests, so that it can write the drafts. It does not receive your email address or order id. Its own terms and privacy notice govern what it does with that text: https://aws.amazon.com/privacy/
• Amazon SES (AWS), the email service of Amazon Web Services, sends the delivery email and the refund notice. It receives your email address and the message, which for the delivery email includes the order link.
• Our hosting provider runs the service and so handles all the data above, plus ordinary network traffic such as IP addresses. Ask legal@northgate-enterprises.com for the name of the provider in use.

We do not sell your data, share it for advertising, or use it for anything other than the purposes above. We contact you only with the delivery email, the refund notice described above and replies to messages you send us first. If you write to us, we use your message and email address to reply, and keep them only as long as needed to deal with it.

Order link

Your order page is at a link with a random, unguessable id. There is no account, so anyone who has the link can read your drafts and use the refund button until the data is deleted. Keep the link private and copy your drafts before they are deleted. Once your drafts are delivered, the order page shows the deletion date.

Deleting your data early, and your rights

The service deletes your answers, drafts and email address by itself 30 days after delivery. You do not have to ask. To ask us to delete them sooner, or to ask what we hold about you, email legal@northgate-enterprises.com with your order link. We handle these requests on a best-effort basis. No one is on call to answer email, and we do not promise a response time. Depending on where you live, you may also have the right to access, correct or delete your data, and to complain to a data protection authority. We handle requests the same way wherever you live. Stripe and the AI provider hold their own copies under their own policies, and you can ask them directly.

Security

The service accepts a payment confirmation only if it carries a valid Stripe signature, and it refuses to start unless its public address is HTTPS. No system is perfectly secure, so we collect only what an order needs.

Children

The service is for adults. We do not knowingly collect data from children.

Changes

If we change this policy we change the date at the top. A change that makes us collect more, or keep data longer, is made in the same release as the change in how the service works.