Privacy Policy

1. Scope and who we are

This Privacy Policy applies to Surreality AI (“Surreality,” “we,” “us,” or “our”) and the online services that link to it, including surrealityai.com, related forms, the Family Resource Hub, business-service pages, provider and marketplace features, Support Portal, web-design services, and future Surreality applications. It does not govern an independent third party’s website, product, or service.

Feature-specific notices, contracts, consent screens, or partner terms may supplement this policy. If a supplemental notice conflicts with this policy, the more specific notice controls for that feature to the extent permitted by law.

2. Services covered

Surreality’s present and planned activities may include:

• family resources for preparation, grief support, remembrance, and ongoing legacy;
• AI-assisted questions, content organization, memory and legacy experiences, and digital-essence concepts;
• provider discovery using a location or ZIP code, provider claims, business listings, advertising, partnerships, and a memorial marketplace;
• website analysis, design, content, development, hosting-related coordination, and project support for deathcare, senior living, and related organizations;
• support, troubleshooting, documentation, research, surveys, and product-development activities;
• affiliate or referral relationships with providers, merchants, and other businesses; and
• the planned SurrealiCoin ecosystem and related blockchain-enabled functionality, which may be introduced separately and remain subject to feature-specific notices.

Some pages and features are labeled “in development.” Their availability, data practices, and functionality may change before launch. We will provide additional notice when materially different processing begins.

3. Information we may collect

Information you provide

• Contact and account information: name, email address, organization, username, authentication details, communication preferences, and support history.
• Requests and communications: form fields, messages, survey responses, project requirements, feedback, troubleshooting details, and correspondence.
• Family, remembrance, and legacy content: stories, names, relationships, dates, preferences, photographs, audio, video, documents, memorial content, and instructions you choose to provide.
• Grief, wellbeing, and end-of-life information: sensitive context you voluntarily provide when using family resources or requesting help. Standard website and support forms are not intended for medical records.
• Business and provider information: business identity, contact person, website, service area, professional details, credentials, listing information, proof of authorization, advertising or partnership interests, and public business data.
• Website-project information: brand assets, content, technical access details supplied through approved secure channels, analytics, project scope, budget range, deadlines, contracts, and approvals.
• Transaction information: orders, invoices, subscription or referral records, payment status, and limited billing details. Payment-card data should be handled by a payment processor rather than entered into general forms.
• AI inputs and outputs: prompts, uploaded materials, responses, feedback, and safety signals when an AI-enabled feature is used.
• Blockchain-related information: public wallet address, transaction identifier, network activity, and related instructions if a blockchain feature is made available. Never send a private key or recovery phrase.

Information collected automatically

• IP address, approximate location derived from IP, browser, device, operating system, language, referring page, requested URL, timestamps, diagnostic logs, and security events;
• cookie or similar identifiers, session state, consent choices, page interactions, and performance data; and
• ZIP code or location entered for provider searches and the search results or referrals selected.

Public and third-party sources

We may collect public business or provider information from websites, directories, professional sources, public records, referral partners, customers, and service providers. Before publishing or relying on a listing, Surreality may request verification or allow an authorized representative to claim or correct it.

4. Sources of information

We obtain information directly from you; automatically from devices and browsers; from an organization, family member, memorial administrator, provider, or client that authorizes the interaction; from public sources; and from vendors or partners that support hosting, communications, analytics, security, payments, referrals, or project delivery.

If you provide information about another person, you represent that you have authority, consent, or another lawful basis to do so. Avoid uploading confidential material about others unless the applicable feature and permissions support it.

5. How we use information

• provide, personalize, secure, maintain, and improve the services;
• respond to inquiries, support cases, privacy requests, project intake, and customer-care concerns;
• create, verify, correct, rank, or display business and provider listings;
• perform ZIP-code or location-based searches and route referrals;
• deliver website analysis, proposals, designs, builds, and project communications;
• process transactions, subscriptions, listings, commissions, refunds, and accounting records;
• operate AI-enabled features, generate requested output, evaluate quality and safety, prevent abuse, and support human review;
• detect fraud, spam, unauthorized access, security incidents, and violations of terms;
• measure site performance and understand how features are used;
• send service messages and, with consent or another lawful basis, relevant marketing communications;
• comply with law, enforce agreements, protect rights and safety, and establish or defend legal claims; and
• create aggregated or de-identified information that does not reasonably identify an individual.

6. AI-enabled features and automated processing

Surreality may use artificial intelligence to organize user-provided material, draft or generate content, answer questions, analyze public websites, assist with provider or resource discovery, moderate content, detect abuse, or support product development. AI output may be incomplete, inaccurate, or unsuitable for a particular decision and should be reviewed by a person.

• Do not rely on AI output as medical, mental-health, legal, financial, funeral-director, or emergency advice.
• Do not submit secrets, passwords, private keys, authentication codes, complete payment-card information, or medical records into a general AI or support field.
• We may use contracted AI or infrastructure providers to process an input only as needed to deliver and secure the feature, subject to available contractual and technical controls.
• Feature-level notices may explain whether feedback or de-identified interactions are used to improve a specific system and offer choices where required.
• Surreality does not intend to make decisions producing legal or similarly significant effects about individuals solely through automated processing without appropriate notice, safeguards, and any rights required by law.

Private memorial or family content should not be used for unrelated targeted advertising. If Surreality proposes a materially different use, it will provide notice and seek consent when required.

7. When information may be disclosed

We may disclose information to:

• Service providers and contractors supporting hosting, storage, email, customer support, analytics, security, payments, development, AI processing, professional services, and project delivery, subject to appropriate obligations;
• Providers, merchants, and referral partners when you request an introduction, click a referral link, submit information to a provider, or complete a transaction;
• Business clients or account administrators when you use a service provided for an organization and the organization is authorized to administer it;
• Authorized family members, memorial administrators, collaborators, or recipients according to permissions and instructions associated with a legacy or memorial feature;
• Professional advisers and authorities when reasonably necessary for legal compliance, fraud prevention, safety, rights protection, or legal claims;
• A successor organization in a merger, financing, reorganization, acquisition, bankruptcy, or sale of assets, subject to applicable law; and
• Others at your direction or with your consent.

We do not sell personal information for money. We do not knowingly share personal information for cross-context behavioral advertising. If those practices materially change, we will update this notice and provide legally required choices before the new practice begins.

8. Affiliate links, referrals, advertising, and listings

Surreality may receive compensation when a visitor clicks a referral or affiliate link, contacts a participating provider, purchases a product or service, claims or sponsors a listing, or enters another disclosed commercial relationship. A material connection should be disclosed clearly near the relevant recommendation, listing, or link.

Referral partners may receive information necessary to attribute a referral, such as a referral identifier, selected provider or product, timestamp, and transaction status. Information a visitor submits directly on a partner’s site is governed by that partner’s privacy policy. Compensation does not guarantee a provider’s quality, suitability, availability, or outcome, and users should independently evaluate providers and services.

9. Legacy, grief, wellbeing, and health-related information

Memorial, grief, end-of-life, and family-resource interactions can reveal highly sensitive personal information. Provide only what is necessary and use available sharing controls. Standard contact and support forms are not intended for medical records, treatment information, diagnoses, insurance data, or crisis communications.

Surreality is not automatically a HIPAA covered entity or business associate merely because its services relate to grief, senior living, deathcare, or wellbeing. HIPAA obligations apply only when Surreality enters a qualifying relationship and appropriate written agreement with a covered entity or otherwise meets the legal requirements. A separate notice or agreement will govern any service intentionally designed to handle protected health information.

Surreality Support is not an emergency or crisis service. If someone may be in danger or needs urgent medical or mental-health assistance, contact qualified local emergency or crisis resources.

10. Blockchain and SurrealiCoin

Blockchain networks are designed to create persistent public records. If SurrealiCoin or another blockchain feature becomes available, a wallet address, transaction amount, timestamp, smart-contract interaction, and network identifier may be visible publicly and may not be erasable by Surreality. Do not include personal, memorial, health, or confidential information in a public blockchain transaction.

Surreality will provide additional terms and notices before collecting wallet information or enabling token-related functionality. Surreality will never ask for a private key or recovery phrase through a website form or support email.

11. Cookies, local storage, analytics, and similar technologies

We may use technologies necessary for security, authentication, preferences, forms, load balancing, and site operation. With consent where required, we may use analytics or measurement technologies to understand performance, referrals, and feature use. Browser controls can block some technologies, but essential functions may not work correctly.

Where legally required, a consent tool will present available categories and choices. We will honor legally recognized opt-out preference signals, such as Global Privacy Control, for practices to which those signals apply.

12. Email and communications

We send transactional or relationship messages needed to respond to a form, provide support, administer a project, secure an account, or deliver a requested service. Marketing messages may be sent only when permitted by law and will use accurate sender information and subject lines, identify the sender, and provide an appropriate unsubscribe method.

You may opt out of marketing by using the unsubscribe method in the message or contacting support@surrealityai.com. We may retain a suppression record so the preference is honored. Opting out of marketing does not stop necessary service, security, project, or transaction messages.

13. Retention and deletion

We retain personal information only as long as reasonably necessary for the purpose collected, an active account or project, legal and accounting obligations, dispute resolution, security, fraud prevention, and enforcement. Typical targets, subject to exceptions and feature-specific terms, include:

• contact and closed support records: up to 24 months after resolution;
• website-project working materials: generally up to 36 months after completion, unless a contract or ongoing service requires longer;
• account and service records: while active and for a reasonable period after closure;
• transaction, tax, and accounting records: for the period required by applicable law, commonly up to seven years;
• security and diagnostic logs: generally up to 12 months unless an incident requires longer investigation;
• marketing consent and suppression records: as needed to document consent and honor opt-outs; and
• memorial and legacy content: according to account, administrator, or user instructions and feature-specific terms.

Deletion requests may not remove information from backups immediately, public blockchain records, information another authorized user controls, or records we must retain. De-identified information may be retained when it cannot reasonably be linked back to an individual.

14. Security

Surreality uses reasonable administrative, technical, and organizational measures designed to protect information, such as access controls, transport encryption, vendor review, spam and abuse controls, backups, monitoring, and data minimization. No system can guarantee absolute security.

Use strong unique passwords, protect authentication codes and devices, confirm the surrealityai.com domain before submitting information, and report suspected unauthorized activity to support@surrealityai.com. Do not email passwords, private keys, recovery phrases, or full payment-card information.

15. Your privacy rights and choices

Depending on location and applicable law, you may have rights to:

• know whether personal information is processed and access it;
• correct inaccurate information;
• request deletion, subject to exceptions;
• receive a portable copy of information you provided;
• restrict or object to certain processing;
• withdraw consent for future processing;
• opt out of marketing, sale, sharing, targeted advertising, or certain profiling where applicable;
• limit certain uses of sensitive personal information where applicable;
• appeal a denied privacy request; and
• not receive discriminatory treatment for exercising a privacy right.

Submit a request through the Support Portal with “Privacy or security” selected, or email support@surrealityai.com. Describe the right you wish to exercise and the relevant service or account. We may verify identity and authority before acting. An authorized agent may submit a request where permitted, but we may require proof of authorization and direct verification.

16. California notice at collection

This section supplements the policy for California residents. The categories collected depend on the service used.

Surreality does not sell personal information for money and does not knowingly share it for cross-context behavioral advertising. We do not use sensitive personal information to infer characteristics for unrelated purposes. California residents may request access, categories and specific pieces, correction, deletion, and information about disclosure; opt out of sale or sharing if those practices begin; limit qualifying sensitive-information uses; and exercise rights without discrimination. Requests may be submitted as described in Section 15.

17. International users and legal bases

Surreality is based in the United States, and information may be processed in the United States or other countries where service providers operate. Those locations may have different data-protection laws. Where required, we use appropriate safeguards for international transfers.

For processing governed by the GDPR or UK GDPR, legal bases may include performance of a contract or requested pre-contract steps, legitimate interests in operating and securing the services, compliance with legal obligations, protection of vital interests in limited circumstances, and consent where required. Individuals may have rights to information, access, correction, deletion, restriction, objection, portability, consent withdrawal, and protection from certain solely automated decisions. A complaint may also be made to the applicable supervisory authority.

18. Children’s privacy

The general Surreality website and services are not directed to children under 13, and we do not knowingly collect personal information online from a child under 13 without legally required parental consent. Family or memorial content about a child should be submitted only by an authorized adult and through an appropriate feature. If you believe a child provided personal information improperly, contact us so we can investigate and delete it where required.

Age requirements for a future application, marketplace, wallet, or AI feature may be higher and will be stated in feature-specific terms.

19. Third-party sites, providers, and public information

Links may lead to providers, merchants, social networks, the external Surreality Hub web app, blockchain explorers, payment services, or other independent services. Their privacy and security practices govern information they collect. Review their policies before submitting information.

Business listings may contain public professional information. Providers and authorized representatives may request correction through the claim process or Support Portal. Surreality does not guarantee that an independent provider’s information, services, or privacy practices are complete or suitable.

20. Changes to this policy

We may update this policy as services, technology, partners, or laws change. The “Last updated” date identifies the current version. We will provide additional notice when legally required or when a change materially affects how previously collected personal information is used.