How we protect your tribute
This page is maintained by SendATribute to answer common security and privacy questions about how we handle your contacts, content, and account data.
This page describes our current practices and is not an independent certification.
Authentication & account access
Accounts are protected with email verification and password sign-in. Sessions use short-lived tokens with automatic refresh, and access to your tribute and contributor data is scoped to your authenticated account using row-level security on our database.
Data in transit and at rest
All traffic to SendATribute is served over HTTPS. Customer data and uploaded media are stored on managed cloud infrastructure with encryption at rest provided by our hosting and storage providers.
What data we collect
We collect the information you provide to coordinate a tribute: your account email, recipient and occasion details, contributor names and emails, uploaded messages, photos, and video clips, and payment metadata returned by our payment processor. We do not store full card numbers.
Contacts and contributor lists
Contributor email addresses you provide are used solely to invite, remind, and deliver the tribute for that specific occasion. They are not used for marketing and are not shared with third parties.
Retention and deletion
Tribute content and contributor lists are retained while your tribute is active and for a limited period after delivery so the recipient can revisit it. You can request deletion of your account and associated tribute data at any time by emailing us.
Subprocessors
We rely on vetted infrastructure providers for hosting, database, storage, email delivery, and payments. These providers process data on our behalf under their own security and compliance programs.
Privacy requests & security contact
For data access, correction, or deletion requests, or to report a suspected security issue, email Create@sendatribute.com. We respond within one working day, Monday–Friday.
Shared responsibility: SendATribute secures the platform and your account data; you remain responsible for the accuracy of contacts you upload and for keeping your account credentials confidential.