Privacy policy

Who we are

Reposa is made and run by Handler Labs LLC, a small independent company in the United States. Where this page says “we”, it means that company. Reposa is a website. There is nothing to install, and there is no account to create.

If you have a question about your own information, write to privacy@getreposa.com. A person reads it.

What we collect

Four kinds of thing, and nothing else. We never ask for anything about you, the person filling in the form. There is no field for your name, your address or your phone number.

What you type into the builder

The name of the person who died, their dates of birth and death, the order of service, the names of family members, pallbearers and speakers, the readings and hymns, the obituary text, and the details of the service: the funeral home, the church, the cemetery, the date and the time. Whatever you enter is what we hold. Every field can be left blank.

Photographs you upload

The portrait for the cover. Photographs you add to the slideshow are not uploaded: they stay on your device and go straight into the file you download. See Photographs below for exactly how the portrait is stored.

An email address, and purchase details if you buy

If you ask the builder to email you a link to your project, the address you give. If you buy, the email address you give at checkout, the amount, which package and add-ons you chose, and Stripe’s reference for the payment. Either address is how we can send your links back to you if you lose them, and we use it for nothing else.

Ordinary technical information

Standard server records: an IP address, a browser type, a timestamp, and which page was requested. We use these to keep the site running and to stop one person from hammering it, and we do not build any profile from them.

What we do not do

• We do not sell, rent or trade your information.
• We do not run advertising trackers, retargeting pixels or ad networks. There is no analytics script on this site.
• We do not add you to a mailing list, because there is no mailing list. The only email we ever send is about your own project.
• We do not use your photographs, your obituary or the name of the person you loved in any marketing. Every sample program on this site is invented.
• We do not pass anything to funeral homes, cemeteries, insurers, monument companies or anyone else who might want to contact you. Recently bereaved families are targeted by people like that, and we will not be the reason it happens.

Photographs

Photographs are the most personal thing you give us, so they get the most careful handling.

• They are stored in a private bucket. It has no public address at all. There is no URL anyone can guess, share or find in a search engine.
• When your browser needs to show a photograph back to you, the site issues a short-lived signed URL that works for about an hour and then stops working. The browser never holds a permanent link.
• When we build your PDFs, our own server reads the image file directly and places it in the document. The photograph is not passed through anyone else on the way.
• Photographs are deleted with the project they belong to, on the schedule in How long we keep things.

Payment

Payment is handled entirely by Stripe. Your card number, expiry and security code go from your browser to Stripe and never touch our servers, so we could not store them if we wanted to.

What comes back to us is the email address you entered, the amount, what you bought, and Stripe’s reference for the payment. Stripe publishes its own privacy policy on its website, and it is worth a look if you want the detail of how card data is handled.

Writing help

Drafting the obituary and the eulogy is optional, and nothing is sent anywhere until you press the button. When you do, the answers you have already entered are sent to the AI provider that generates the draft, and the draft comes back to you. It works only from what you gave it; it is instructed not to invent facts, and it will leave a gap rather than guess.

If you never use that feature, nothing about your project is ever sent to an AI provider.

Companies we rely on

Running a website means using other people’s infrastructure. These are the only companies that touch your information, and each one gets only the part it needs to do its job.

• Vercel hosts the site and runs the code that builds your documents.
• Supabase is the database that holds your project, and the private storage that holds your photographs.
• Stripe takes the payment.
• Resend delivers the two emails we send: your download links, and the link back to your project.
• Anthropic generates the optional writing draft, and only if you ask for one.

We use these companies to run the product. None of them are given your information so they can market to you, and we do not receive anything back from them about you.

Cookies

One cookie. It is called reposa_keys, it is httpOnly, meaning no script running on the page can read it, and it holds the access keys for the projects you have started in this browser.

That cookie is what lets you close the laptop at midnight and find your program still there in the morning without signing in to anything. It carries no identifier for you, no browsing history and nothing about other sites.

There are no advertising cookies, no third-party tracking cookies and no cross-site profiling, which is also why this site does not make you dismiss a consent banner before you can use it. If you clear your cookies you lose the shortcut, not the work. Find my project will email the links to the address you gave us or used at purchase.

How long we keep things

• Drafts that were never bought are deleted about thirty days after you last worked on them, along with their photographs.
• Projects that were bought are kept for twelve months, so you can correct a spelling, add a name and download the files again as often as you need, and for a thirty-day grace period after that. Then they are deleted. If a purchase is fully refunded, the project goes back to the draft schedule above, counted from the day of the refund.
• The record of the purchase itself, meaning the date, the amount and the email address, is kept for as long as accounting and tax rules require, separately from the project content.

You do not have to wait for any of that. Ask us and we will delete it today.

Who can open your project

There are no accounts and no passwords, because a family three days after a death should not have to make one. Instead, every project has a long, unguessable key. Your browser holds it in the cookie described above, and we can email it to the address you gave us or used at purchase.

The practical consequence is worth knowing: anyone holding that link can open and edit the project. If you forward it to a relative so they can check the spelling of a name, they have the same access you do. That is usually what a family wants, but it is your decision to make knowingly.

Deleting your information, or getting a copy

Email privacy@getreposa.com and tell us the name on the program. If you bought, write from the address you used at checkout so we can match it.

• Deletion. You can delete the project yourself, from the end of the editor; it asks you to confirm once, because it cannot be undone. If you have lost your link, email us and we will ask you to confirm once before removing the project, the photographs and the draft text.
• A copy. You can download everything we hold for a project, the answers and the photographs together, from the end of the editor. If you have lost your link, email us and we will send the same copy in a readable form.
• A correction. Almost everything is editable by you inside the builder, but if something is stuck, tell us and we will fix it.

Some states give their residents specific rights over their personal information. Rather than checking where you live, we handle every request the same way for everyone.

Children

Reposa is meant for adults arranging a service. It is not directed to children, and we do not knowingly collect information from a child using the site. If you believe a child has entered information here, write to privacy@getreposa.com and we will remove it.

Sometimes the memorial itself is for a child. Those details are given to us by the family, and they are held exactly like any other project: privately, and deleted whenever the family asks.

Security

Everything travels over an encrypted connection. Photographs are in private storage with no public access. The database is readable only by our own server code, never directly by a browser, and every read and write is checked against the project’s key first.

No system is perfect, and anyone who tells you otherwise is selling something. If something ever goes wrong that affects your information, we will tell you plainly and quickly rather than quietly.

Changes to this policy

If we change how any of this works, we will change this page and the date at the top of it. If a change is significant, we will say so here in plain words rather than burying it.

Contact

Privacy questions: privacy@getreposa.com. Anything else: help@getreposa.com, or the contact page. Reposa is operated by Handler Labs LLC.

See also our terms and our refund policy.