GDPR
Privacy Policy
Last updated: April 2026
1. Data Controller
The data controller is Ancestria Inc. corporation registered in Delaware, United States — website: ancestria.org. To exercise your rights, contact: privacy@ancestria.org
2. Data Collected
Identification
First name, last name, email, date of birth, country
Genealogy
Ancestor names, dates, places, family relationships
Media
Photos, documents, audio/video recordings
Navigation
Connection logs, IP address (anonymized)
Payment
Billing data (via Stripe, not stored with us)
Communication
Emails sent via the platform
3. Purposes of Processing
- ✦Provision and improvement of the genealogy service
- ✦Account authentication and security
- ✦Sending notifications related to your family tree
- ✦Processing subscription payments
- ✦Compliance with our legal obligations
4. Retention Periods
Your personal data is retained for the duration of your active account, plus 30 days after deletion (recovery period). Billing data is retained for 10 years in accordance with accounting obligations.
5. Your Rights (GDPR)
👁
Access
View your data
✏️
Rectification
Correct errors
🗑️
Deletion
Right to be forgotten
📦
Portability
Export your data
To exercise these rights, go to Settings > Privacy or contact privacy@ancestria.org.
6. Security
All your data is encrypted in transit (TLS 1.3) and at rest (AES-256). We never sell your data to third parties. No advertising is displayed on the platform.
You have the right to file a complaint with the CNIL: www.cnil.fr