Privacy Policy

Effective: 2025

Tomb of Light LLC (“Tomb of Light,” “we,” “us”) respects your privacy and is committed to protecting the personal information entrusted to us.

1) Information We Collect

• Account & Contact: name, email, and preferences you provide.
• Family Materials (optional): photos, stories, documents, and metadata you choose to upload.
• Consent Records: confirmations for every living individual included in a project; parent/guardian consent for minors.
• Technical: device/browser information, IP address, pages viewed, diagnostic logs.
• Support: messages and attachments you submit to our team.

2) How We Use Your Information

• Provide, personalize, and improve the Services.
• Verify and document consent for living individuals; handle parental consent for minors.
• Operate your private legacy vault and project workflow.
• Communicate about your account, security, updates, and service notices.
• Comply with legal obligations and resolve disputes.

3) Lawful Basis & Consent

• We rely on your consent and/or contractual necessity to process project materials.
• Consent is required for inclusion of all living individuals; parents/guardians must consent for minors.
• Sensitive information defaults to private and is not public by default.

4) Blockchain & NFTs

• We do not place personal data on public blockchains.
• NFTs we issue function as certificates or access keys, not investment products.
• If consent is later withdrawn, we can delete or restrict off-chain materials while keeping any NFT non-identifying.

5) Security

• Encryption in transit and at rest.
• Role-based access controls and activity logging.
• Access limited to authorized users according to role.

6) Your Rights & Choices

• Access, correction, deletion, restriction, and portability (where applicable).
• Withdraw consent for inclusion at any time.
• Exercise rights here: Data Rights Request.

7) International Transfers

We are based in the United States and may process data there and in other locations. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) for cross-border transfers.

8) Cookies & Signals

• We use essential cookies to operate the site.
• Optional analytics are off by default and used only with your consent.
• We honor Global Privacy Control (GPC) signals where supported.
• Manage settings on Your Privacy Choices.

9) Retention

We retain information only as long as necessary to provide services and satisfy legal obligations. Families can request deletion at any time.

10) Children

We include minors only with verified parent/guardian consent. If you believe a child was included without proper consent, contact us immediately.

11) Breach Response

If a security incident affects personal data, we will notify impacted individuals and regulators as required by applicable laws.

12) Contact

Privacy questions: privacy@tomboflight.com
Mailing address: Tomb of Light LLC, Virginia Beach, VA