Luna AI's Privacy Policy

Last updated: March 5, 2025

At Luna AI, we take your privacy seriously. This policy outlines what data we collect, how we use it, and your rights regarding your information.

1. Information We Collect

We collect and process the following categories of information:

  • Account Information: Discord user ID and related account details when you register
  • AI Interaction Data: Memories, preferences, and conversation history created during your interactions with Luna
  • Personal Details: Information you choose to share with Luna, which may include your name, age, location, nationality, and other attributes
  • Payment Information: When you subscribe or make purchases, we collect payment data through our payment processor (Stripe)
  • Usage Information: Data about how you use our services, including features accessed, interaction patterns, device information, and IP address
  • Technical Data: Information such as browser type, operating system, device identifiers, and network information when you access our services

2. How We Use Your Information

We use the information we collect to:

  • Provide and personalize Luna AI services to deliver a tailored experience
  • Develop memories that allow Luna to remember your preferences and personalize interactions
  • Process subscriptions, manage credits, and handle payments
  • Improve our services through analysis of usage patterns and interactions
  • Detect, prevent, and address technical issues or violations of our terms
  • Communicate with you about service updates, features, or support requests
  • Fulfill our legal obligations, including responding to legal requests
  • Ensure the security and integrity of our services

3. Legal Basis for Processing

We process your personal information based on the following legal grounds:

  • Contract Performance: Processing necessary to provide the services you've requested and to fulfill our contractual obligations
  • Legitimate Interests: Processing necessary for our legitimate business interests or those of third parties, provided these interests are not overridden by your rights
  • Consent: Processing based on your specific consent, which you can withdraw at any time
  • Legal Obligation: Processing necessary to comply with our legal obligations

Where we rely on legitimate interests, these include: improving our services, ensuring security, preventing fraud, and business development.

4. Cookies and Tracking Technologies

Luna AI uses cookies and similar tracking technologies to enhance your experience and collect information about how you use our services:

  • Essential Cookies: Required for the operation of our services, such as session management and security features
  • Analytical Cookies: Help us understand how you interact with our services, allowing us to improve functionality and performance
  • Functional Cookies: Enable personalized features and remember your preferences
  • Third-Party Cookies: Set by third-party services we use, such as analytics providers

You can manage your cookie preferences through your browser settings, but disabling certain cookies may affect the functionality of our services.

5. AI-Specific Data Processing

Luna AI creates and maintains memory embeddings to personalize your experience. These may include:

  • Memories: Information learned during conversations, categorized as hobbies, interests, preferences, general knowledge, or personal information
  • Persistent Memories: Long-term information Luna remembers across conversations
  • Algorithmic Processing: Automated decision-making processes that determine what information Luna remembers and how it responds to you

You can request deletion of specific memories or all memory data associated with your account as outlined in section 13.

6. Third-Party Services

We use the following third-party services to operate Luna AI:

  • Discord: For user authentication and identity verification
  • Stripe: For processing payments and managing subscriptions
  • Google: For AI model access, processing, and analytics to help us understand service usage patterns and user behavior
  • OVH: For hosting services and storing data in secure cloud infrastructure

These services have their own privacy policies governing how they process your data. We recommend reviewing their policies for complete understanding of your data protection.

7. Legal Disclosures and Law Enforcement

We may disclose your personal information in the following circumstances:

  • Legal Requirements: When required by applicable law, regulation, legal process, or enforceable governmental request
  • Law Enforcement: In response to valid requests from law enforcement agencies or other public authorities
  • Protection of Rights: To protect our rights, privacy, safety, or property, as well as those of our users or the public
  • Corporate Transactions: In connection with a merger, acquisition, or sale of all or a portion of our assets

We evaluate each request carefully and only disclose information necessary to satisfy the request or as required by law. We may notify you of such requests unless prohibited by law or when urgent circumstances require otherwise.

8. Data Security

We implement technical and organizational security measures to protect your personal information, including:

  • Encryption of sensitive data and communications
  • Regular security assessments and vulnerability testing
  • Access controls limiting data access to authorized personnel
  • Secure database architecture and monitoring systems
  • Employee training on data protection and security practices
  • Incident response procedures to address potential security breaches

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Data Breach Notification

In the event of a data breach that may compromise your personal information:

  • We will promptly investigate the incident and take necessary remedial measures
  • We will notify affected users without undue delay, consistent with legal requirements and the needs of law enforcement
  • Our notification will include information about the breach and steps you can take to protect yourself
  • We will notify relevant regulatory authorities as required by applicable data protection laws

10. Data Retention

We retain different types of data for varying periods:

  • Account Information: Retained while your account is active
  • AI Memories: Stored until explicitly deleted by you or until account termination
  • Payment Records: Kept for the period required by applicable financial and tax regulations
  • Usage Data: May be retained in anonymized form for analytical purposes
  • Communications: Retained to provide support and maintain business records

You can request deletion of your data as outlined in section 13.

11. Marketing Communications

With your consent, we may send you marketing communications about our services:

  • You can opt out of marketing communications at any time
  • Each marketing email will contain an unsubscribe link
  • Opting out of marketing communications does not affect service-related communications that are essential to providing our services

To manage your communication preferences, contact us at [email protected].

12. Children's Privacy

Luna AI services are only intended for individuals who have reached the age of majority (typically 18 years or older) in their jurisdiction. By using our services, you confirm that you have reached the age of majority in your jurisdiction. If we discover that a user who has not reached the age of majority has created an account, we will immediately terminate that account.

13. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

  • Access: Request details about the personal data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your personal data, including specific AI memories
  • Restriction: Limit how we process certain aspects of your data
  • Portability: Request a copy of your data in a structured, machine-readable format
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw previously given consent for data processing

Regional Privacy Rights

European Economic Area (EEA), UK, and Similar Jurisdictions

If you are located in the EEA, UK, or other jurisdictions with similar laws, you have rights under the General Data Protection Regulation (GDPR) or equivalent laws, including all the rights listed above.

To exercise these rights, please contact us at [email protected]. We will respond to all legitimate requests within the timeframe required by applicable law.

14. International Data Transfers

Luna AI operates globally, which may involve transferring and processing your data in countries outside your own. These countries may have different data protection laws than your country of residence.

We ensure appropriate safeguards are in place to protect your information in compliance with applicable data protection laws, which may include:

  • Standard Contractual Clauses approved by the European Commission
  • Binding Corporate Rules for transfers within a corporate group
  • Derogations for specific situations such as explicit consent
  • Ensuring that countries to which data is transferred have been deemed to provide adequate protection by relevant authorities

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the updated policy on our website, through the service, or via email, along with the effective date. Your continued use of Luna AI services following any changes indicates your acceptance of the updated policy. It is your responsibility to review this Policy periodically.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

[email protected]