Privacy Policy

1. Who We Are

Dear Grandchild is operated by Wexford Point, LLC (“Company,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Dear Grandchild platform (“Service”).

Wexford Point, LLC
971 US Highway 202N, Suite N
Branchburg, NJ 08876
privacy@deargrandchild.com

2. Information We Collect

Account Information. When you create an account, we collect your name, email address, and authentication credentials. If you sign in with Google, Apple, or Facebook, we receive basic profile information such as your name, email, and profile image.

Vault Content (“Your Content”). This includes journals, letters, photos, videos, voice memos, recipes, family tree information, and delivery settings you create or upload. This content is collected solely to provide the Service.

Billing Information. Payments are processed by third-party providers. We do not store full payment details. We retain limited billing identifiers such as customer ID and subscription status.

Usage Data. We collect limited analytics about how you interact with the Service (such as pages visited and features used) to improve functionality. We do not track your activity outside of the platform.

3. How We Use Your Information

We use your information to operate and improve the Service, process subscriptions and billing, communicate with you (account, billing, support), maintain security and prevent fraud, and improve functionality and performance.

We do not sell, rent, or share your personal information for third-party marketing.

Legal Basis for Processing. We process your information to perform our contract with you, comply with legal obligations, pursue legitimate business interests (such as improving and securing the Service), and where applicable, based on your consent.

Automated Processing. We do not use Your Content to train artificial intelligence or machine learning models. Limited automated processing (such as transcription of voice memos and videos) may occur to provide core Service functionality.

4. Your Content Is Private

Your Content is encrypted in transit (TLS) and at rest (AES-256). We access Your Content only in connection with operating and providing the Service, including fulfilling product orders, providing support, and complying with legal obligations.

We do not sell, share, or monetize Your Content. We do not use it for advertising or AI training.

You acknowledge that your content may be personal, emotional, or subjective. We do not monitor, verify, or validate the accuracy of Your Content. You are solely responsible for the content you create, upload, or store within the Service.

Delivered Content. Once content is delivered to a recipient through the Service's delivery features, we do not control how that recipient stores, shares, or uses the content. We are not responsible for a recipient's handling of delivered content.

5. Cookies and Tracking

Essential Cookies. We use cookies necessary for authentication, security, and core functionality. These cannot be disabled while using the Service.

Analytics and Advertising Cookies. We use Meta (Facebook/Instagram) Pixel and TikTok Pixel on marketing pages to measure advertising effectiveness. These activate only after you accept cookies through our consent banner. You may decline these cookies at any time. These providers may independently collect and process information under their own privacy policies. We do not control their use of data beyond our integration.

Do Not Track. We do not currently respond to browser “Do Not Track” signals. You may control tracking through our cookie consent banner and your browser settings.

6. Third-Party Service Providers

We use trusted providers for hosting, data storage, authentication, payment processing, email delivery, and customer support. These providers act as data processors and handle your information only on our behalf and under our instructions. Each has their own privacy policies. We select providers with strong security practices and data protection standards.

Some providers may process or store Your Content solely to provide infrastructure services. These providers are contractually obligated to protect your information and may not use it for their own purposes.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where our servers and service providers are located. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to such transfers.

8. Data Security

We implement industry-standard security measures, including encryption (TLS in transit, AES-256 at rest) and restricted system access. However, no system is completely secure. We take commercially reasonable measures to protect your information but cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for securing access to your account. We are not responsible for unauthorized access resulting from your failure to safeguard your login information.

9. Legal Disclosure

We may disclose your information, including Your Content, if required by law or in response to valid legal requests such as subpoenas, court orders, or government demands, or when necessary to protect rights, prevent fraud, or prevent harm.

10. Data Breach Notification

If a data breach affecting your personal information occurs, we will notify you without unreasonable delay via the email address associated with your account, along with a description of the breach and the steps we are taking to address it, in accordance with applicable state and federal notification requirements.

11. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Active accounts: Your Content is retained for as long as your account is active and your subscription is in good standing.

Lapsed subscriptions: Your account will become read-only. We are under no obligation to retain Your Content after your subscription ends, but may do so at our discretion for a limited period.

Deleted accounts: We will delete your personal information and Your Content within a commercially reasonable timeframe. Residual copies may remain in backup systems and archival copies for a limited period as necessary for legal compliance and enforcement of our Terms.

Inactive accounts: If your account remains inactive for an extended period, we may take steps to contact you or, where applicable, follow any instructions you have configured within the Service. We do not guarantee indefinite storage of inactive accounts.

You are responsible for maintaining your own backups of Your Content.

12. Business Transfers

If Wexford Point, LLC is involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information and Your Content may be transferred as part of that transaction. We will notify you via the email address associated with your account before your information becomes subject to a different privacy policy, and you will have the opportunity to export Your Content.

13. Your Rights

You may access, correct, delete, or export your personal information and Your Content at any time through your account settings.

Depending on your location, you may also have the right to request restriction of processing, object to certain uses of your data, or request data portability. To exercise any of these rights, contact us at privacy@deargrandchild.com.

California Residents (CCPA/CPRA): If you are a California resident, you have the right to know what personal information we collect about you and the categories of sources from which it is collected; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information (we do not sell or share your personal information); and the right to non-discrimination for exercising your rights. The categories of personal information we collect are described in Section 2. We collect this information directly from you. We use it for the business purposes described in Section 3. To exercise your rights, contact us at privacy@deargrandchild.com. We will verify your identity before processing your request.

14. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children under 13 in accordance with the Children's Online Privacy Protection Act (COPPA), or from minors under 18. If we learn that we have collected information from a child under 18, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@deargrandchild.com.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and updating the “Last updated” date. Your continued use of the Service after any changes constitutes acceptance of the revised policy.

16. Contact Us

For privacy-related questions or concerns, contact us at privacy@deargrandchild.com.

Wexford Point, LLC
971 US Highway 202N, Suite N
Branchburg, NJ 08876
privacy@deargrandchild.com