Privacy Policy

Reunionbase is built so that each family's information stays private to that family. Data is isolated at the database layer, so no other family using Reunionbase can see your members, photos, payments, or family tree. This policy describes how we handle personal information across the Service.

We collect the following categories of information:

• Account information. Your name, email address, and the login method you use (email link or sign-in with Google).
• Family and member information. The family name and site address you choose, your member roster including member names, emails, and roles, and invitations you send.
• Content you create. Photos and videos, family news posts, family tree entries and relationships, event details, RSVPs and votes, lodging and travel details, and apparel designs.
• Payment information. When you subscribe or collect dues, payments are processed by Stripe. We receive and store records such as subscription status, a customer reference, and dues payment history. We do not store full card numbers; Stripe handles card details directly.
• Communications. The emails we send on your behalf or to you, such as invitations, reminders, and receipts, and any messages you send us.
• Technical information. Your IP address, device and browser information, and aggregate usage collected to keep the Service running and to understand how it is used. See our Cookie Notice.
• Notifications. If you turn on web push notifications, we store the subscription your browser provides so we can send them.

We use information to:

• Provide, maintain, and secure the Service.
• Set up your family site, manage members and roles, and deliver the features you use, such as RSVPs, dues, photos, and the family tree.
• Process subscription payments and let your family collect dues.
• Send transactional messages such as invitations, reminders, receipts, and important account notices.
• Understand usage in aggregate so we can improve the product, and detect, prevent, and address fraud, abuse, or technical problems.
• Comply with our legal obligations.

We do not sell your personal information, and we do not use your family's content to advertise to you.

We share information only as needed to run the Service or as required by law:

• Within your family. Content you add is visible to the members of your family site according to their roles.
• Service providers. We use trusted third parties to host the Service, process payments, send email, and provide related functions. They may access data only to perform work for us. See the full list on our Subprocessors page.
• Legal and safety. We may disclose information if required by law or to protect the rights, safety, or property of Reunionbase, our users, or the public.
• Business transfer. If Reunionbase is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this policy.

We keep your information for as long as your account is active and as needed to provide the Service. When you delete your account or your family site, we delete or anonymize the associated content within a reasonable period, generally within 30 days, and remove it from backups on our normal backup cycle. We may keep certain records longer where required for legal, tax, or fraud-prevention reasons, such as payment records.

We protect your information with technical and organizational safeguards. Data is transmitted over encrypted connections, each family's data is isolated at the database layer, access is restricted by role, and payments are handled by a PCI-compliant processor. No method of storage or transmission is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly to any issue.

You can:

• Access and update your account and family information in the app.
• Export or delete content you have added.
• Cancel your subscription and delete your account at any time.
• Turn notifications on or off.

Depending on where you live, you may have additional rights, such as the right to access, correct, delete, or receive a copy of your personal information, and the right to opt out of certain processing. Residents of California and other states with privacy laws may exercise these rights. To make a request, email us at hello@reunionbase.com. We will respond as required by applicable law and will not discriminate against you for exercising your rights.

Accounts are intended for adults 18 and older. Families may include information about relatives of any age, including minors, in their member roster or family tree. The organizer and members are responsible for the information they add about others, including obtaining any consent that is needed. We do not knowingly allow children under 13 to create their own accounts. If you believe a child under 13 has created an account, contact us at hello@reunionbase.com and we will take appropriate action.

Reunionbase is operated from the United States, and information is processed and stored in the United States and in the countries where our service providers operate. If you access the Service from outside the United States, you understand that your information will be processed in the United States.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you. Please review it periodically.

For privacy questions or requests, email hello@reunionbase.com.