Privacy

4everbe · version 2, draft of 10 September 2026 · to be read by a New Zealand lawyer before launch

This page says what 4everbe holds about you, why, where it lives, who sees it, and what you can do about it. It is written for the family who keep a memorial, the helpers they invite, the visitors who leave a memory, and the people who visit a memorial to read it. It applies under New Zealand's Privacy Act 2020, the UK GDPR, and the EU GDPR.

Who we are: [4everbe Limited], New Zealand, [NZBN], [address]. Our privacy officer is Joey Misa, support@4everbe.com. Our representative in the European Union is [name and address]; in the United Kingdom, [name and address].

1. What we hold, and why

Logins. Your first and last name, your email, a password we store only as a hash, when you signed in and from where, and which memorials you may open and in what role. We need these to run the desk and to know who has a login. Lawful basis: the contract with you.

Payments. Your payment is taken by [Stripe / Paddle]. We hold the receipt: the amount, the tax, the country, the date, the last four digits of the card, and the code we issued. Card numbers never touch our systems. Lawful basis: the contract, and the law that makes us keep tax records.

The memorial. The name, the dates and the places of the person the memorial is for, the cover words, the photos, videos, letters and voices the family adds, and the settings the family chooses. Lawful basis: the contract with the family.

Memories from visitors. The name a visitor gives, how they knew the person, the letter, voice, video or photos they send, and their email if they ask to be told when the family has looked. A visitor's network address is kept separately for thirty days, only to stop abuse, and is never shown to a family. Lawful basis: the visitor's agreement, and our legitimate interest in keeping the door safe.

The log. Every change to a memorial, with the name and the time, for a year, so the family can see who did what. Lawful basis: the contract.

Support. What you write to us, by email or from the desk, and what we answer, kept in our support inbox for two years, so that if you write again we know what was said last time. Lawful basis: the contract and our legitimate interest in answering you.

Safety. Every photo and every video frame is hashed and compared with the lists of known child-abuse material before it is stored. A match is quarantined, preserved and reported to the Department of Internal Affairs and, where the law requires, to other authorities. Lawful basis: the law, and the safety of children. This is the one processing we will not turn off for anyone.

Visits. We count visits to the website with analytics that set no cookie and hold no identity. The only cookie 4everbe sets is the one that keeps you signed in.

2. What we never do

We do not sell personal information. We do not run advertising. We do not profile, enrich or track. We do not train any system on a family's memorial. The fee is the business model: you are the customer, not the product.

3. The people in a memorial

A memorial is about a person who has died, or about a person keeping it for their own life. The living people named in it, a daughter, a friend, a student, may ask us to change or remove what is said about them; we take that to the family and, if it is not settled, we make the memory private. A memorial for a person who has died is controlled by their family or the person they named; we treat what it holds with the same care as anyone's information.

A memorial is private unless the family lists it. Its address is random, never a name, and we ask search engines to stay out of memorials that are not listed.

4. Who sees what

The family's admins see everything on their memorial, including what visitors have sent and not yet approved. Helpers see the desk, the albums and the memories. Visitors and the public see only what the family has made public.

Someone at 4everbe opens a family's desk only to help, only read-only, and the family's log shows the visit.

We share information with the companies that run the service for us, each under a written agreement that binds them to use it only for us: Supabase (database and logins, Sydney), Cloudflare (photos and recordings, Sydney), Backblaze (a second copy of the backups, Amsterdam), Resend (email), Missive (support), [Stripe / Paddle] (payments), and Plausible (cookieless visit counts). We share with authorities when the law requires it, as in section 1 under Safety, and with a court when ordered.

5. Where it lives, and how it travels

4everbe is a New Zealand company. The European Commission recognises New Zealand as giving adequate protection, so information may travel from the EU to us without further measures. Our database and media are held in Sydney, Australia, under the standard contractual clauses the EU and the UK require; a second copy of the backups is held in Amsterdam, in the EU. Sealed greetings are encrypted with keys held apart from the database.

6. How long we keep it

A memorial, for as long as 4everbe operates or until the family deletes it. A memorial the family has closed, ninety days in case of a mistake, then gone. Backups, thirty daily, twelve weekly and twenty-four monthly copies, so a deleted memorial leaves the backups within two years. The log, a year. Support conversations, two years. Receipts, seven years, as tax law requires. A visitor's network address, thirty days. A test memorial we make ourselves, thirty days.

7. How we keep it safe

Everything travels encrypted and is stored encrypted. Staff sign in with two-factor authentication, and the owner of 4everbe with a hardware key. Every action by staff is written to a log that nobody, including the owner, can edit. Backups are verified by restoring them. We tell you without delay if your information is ever exposed, and we tell the Privacy Commissioner and other authorities as the law requires.

8. Your rights

You may ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, and take it with you. The family's download is in the desk and needs no request. For anything else, write to support@4everbe.com or use Write to us on the desk. We answer within twenty working days, sooner where the GDPR requires a month. If you are not satisfied, you may complain to the Office of the Privacy Commissioner in New Zealand, the Information Commissioner's Office in the UK, or the data protection authority where you live in the EU, through our representative.

Deleting a login does not delete a memorial that others keep. Deleting a memorial is the owner's decision, and section 6 says what happens then.

9. Children

Anyone may read a memorial that the family has made public; there is no age for reading. Sending a memory is different, because we collect the sender's name and words: a visitor who sends one is sixteen or older, or a parent or guardian is with them and agrees, and the tick before Post says so. A memorial about a child is kept only with a parent's or guardian's agreement. A person under eighteen cannot pay for a memorial, because the law lets them undo the payment.

10. Changes

We show the version and date of this page, and we tell owners and admins by email before a change that matters. Questions: support@4everbe.com.