Only what's necessary to provide the service:
Journal entries and vault documents are encrypted in your browser before they reach our servers. The encryption keys live with you (and any designated viewers you authorize). We cannot decrypt your private data even if compelled to.
Family trees inherently contain data about living relatives. When you add a living person to your tree, we'll require explicit consent from them before any of their data appears in shared family views, public exports, or AI-generated outputs. You can document this consent through the platform's consent ledger.
One-click export at any time, in standard formats: GEDCOM (tree), MP4 (films), PDF/EPUB (books), encrypted JSON (journals), static HTML (whole site). If you stop paying, your archive goes read-only — never deleted — and you can still export everything.
Honest answer: we'd give 90 days' notice via email + on the site. Every customer would have a full export download link generated. Hub-tier customers (when that ships) are unaffected — their data was always local. We open-source the data schema so exports remain readable on any future genealogy platform.
Email privacy@familytreesai.com. We respond within 5 business days.
Sagentica is a US-based company headquartered in Oregon. US law and Oregon jurisdiction apply. We honor GDPR rights for EU users (access, deletion, portability, objection) — exercise them by emailing the address above.