Privacy Policy

This Privacy Policy describes how Lunno ("Company," "we," "us," or "our") collects, uses, stores, shares, and protects your personal information when you use the Lunno platform, website, and related services (collectively, the "Service"). By using the Service, you consent to the practices described in this Privacy Policy.

This Privacy Policy is incorporated into and subject to our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service.

1. Information We Collect

1.1 Information You Provide Directly

We collect information that you voluntarily provide when you register for an Account, subscribe to a plan, or use the Service, including:

Account registration information: name, email address, company name, job title, and password.
Billing and payment information: credit card or other payment method details, billing address, and transaction history. Payment processing is handled by our third-party payment processor; we do not store full credit card numbers on our servers.
Profile and business information: industry, company size, marketing goals, and preferences you configure within the Service.
Content and campaign data: advertisements, social media posts, images, copy, campaign parameters, scheduling preferences, and any other Content you create, upload, or manage through the Service.
Communications: messages you send to us through support channels, feedback forms, surveys, or email correspondence.

1.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain technical and usage information, including:

Device and browser information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
Usage data: pages visited, features used, actions taken within the Service, time spent on pages, click patterns, and navigation paths.
Log data: access times, error logs, referring URLs, and server request details.
Cookies and similar technologies: we use cookies, web beacons, pixels, and similar tracking technologies to collect usage data, remember your preferences, and improve the Service. See Section 6 for more information.

1.3 Information from Third-Party Integrations

When you connect third-party accounts to the Service (such as social media platforms, advertising networks, or analytics tools), we may collect:

Account identifiers and access tokens for connected platforms.
Campaign performance data, including impressions, clicks, conversions, spend, and engagement metrics from connected advertising and social media accounts.
Public profile information from connected social media accounts.
Audience and demographic data made available through third-party platform APIs, subject to those platforms' terms and policies.

1.4 Competitor and Market Data

The Service's competitor monitoring features collect publicly available information about market activity, including competitor advertising campaigns, social media posts, promotions, and pricing. This data is gathered from public sources and third-party data providers. We do not collect private or non-public information about competitors or their customers.

1.5 AI-Related Data

When you use the AI-assisted content generation features of the Service, we collect the prompts, inputs, and parameters you provide, as well as the AI-generated outputs. This data is used to deliver the requested content and to improve the quality and relevance of our AI models, subject to the limitations described in Section 3.

2. How We Use Your Information

We use the information we collect for the following purposes:

To provide, operate, and maintain the Service, including campaign management, content generation, scheduling, publishing, and analytics features.
To process transactions and manage your Subscription, including billing, invoicing, and payment processing.
To personalize your experience, including providing tailored recommendations, campaign suggestions, and seasonal planning insights.
To deliver competitor monitoring and market intelligence features.
To improve and develop the Service, including training and refining our AI models, analyzing usage patterns, and conducting internal research. When AI training data is derived from user Content, it is aggregated and de-identified so that it cannot be attributed to any individual user or Account.
To communicate with you, including sending service-related notices, updates, security alerts, and support messages. We may also send promotional communications if you have opted in; you may opt out at any time.
To ensure the security and integrity of the Service, including detecting and preventing fraud, abuse, and unauthorized access.
To comply with legal obligations and respond to lawful requests from public authorities.

3. AI Data Practices

Lunno uses artificial intelligence to power its content generation and recommendation features. We are committed to transparency regarding how your data interacts with our AI systems.

Training Data. We may use aggregated and de-identified usage data and Content to improve our AI models. Individual user Content is never used in its raw form to train models accessible to other users. You may opt out of having your data used for AI model improvement by contacting us or adjusting your Account settings, where available.

Third-Party AI Providers. We may use third-party AI service providers to power certain features of the Service. When we do so, data shared with these providers is subject to our data processing agreements and is used solely to deliver the requested functionality. We require all third-party AI providers to maintain appropriate security and confidentiality measures.

AI Outputs. AI-Generated Content may incorporate patterns learned from training data. We do not guarantee that AI outputs are unique or that they will not resemble content generated for other users.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers. We share information with third-party vendors who assist us in operating the Service, including payment processors, cloud hosting providers, analytics services, email delivery services, and AI service providers. These providers are contractually obligated to use your information only for the purposes of providing services to us and to maintain appropriate security measures.

Third-Party Platform Integrations. When you connect third-party accounts, certain data is transmitted to and from those platforms in order to provide the requested features (e.g., publishing posts, retrieving analytics). This data sharing is governed by the privacy policies and terms of the respective third-party platforms.

Business Transfers. In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

Legal Requirements. We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to comply with a legal obligation, protect our rights or property, prevent fraud, or protect the personal safety of users or the public.

With Your Consent. We may share your information with third parties when you have given us explicit consent to do so.

5. Data Retention

We retain your personal information for as long as your Account is active or as needed to provide you with the Service. Campaign data, analytics, and historical performance records are retained for the duration of your Subscription to enable the Service's historical analytics and planning features.

After Account termination or cancellation, we retain your data for up to 90 days to allow you to request data export. After this period, we will delete or de-identify your personal information, except where retention is required by law, necessary to resolve disputes, or needed to enforce our agreements.

Aggregated and de-identified data that cannot be used to identify you may be retained indefinitely for analytics and product improvement purposes.

6. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

Essential Cookies. Required for the basic functionality of the Service, such as authentication, security, and session management. These cannot be disabled.

Functional Cookies. Used to remember your preferences, settings, and customization choices within the Service.

Analytics Cookies. Used to collect information about how you interact with the Service, including pages visited, features used, and performance data. This helps us improve the Service.

Marketing Cookies. Used to deliver relevant advertisements and measure the effectiveness of our marketing campaigns. These may be set by us or by third-party advertising partners.

You can manage your cookie preferences through your browser settings or through any cookie consent mechanism we provide on our website. Note that disabling certain cookies may affect the functionality of the Service.

7. Data Security

We implement industry-standard administrative, technical, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and employee training.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the security of your Account credentials.

8. Your Rights and Choices

Depending on your jurisdiction, you may have some or all of the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you.
Correction: Request that we correct inaccurate or incomplete personal information.
Deletion: Request that we delete your personal information, subject to certain exceptions (e.g., legal retention obligations).
Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
Restriction: Request that we restrict the processing of your personal information in certain circumstances.
Objection: Object to the processing of your personal information for certain purposes, including direct marketing.
Withdrawal of Consent: Where processing is based on consent, you may withdraw your consent at any time.
Opt-Out of AI Training: Request that your Content not be used for AI model improvement purposes.

To exercise any of these rights, please contact us using the information provided in Section 12. We will respond to your request within the timeframe required by applicable law (typically 30 to 45 days). We may need to verify your identity before processing your request.

9. International Data Transfers

Lunno is based in Vancouver, BC. If you access the Service from outside this jurisdiction, your information may be transferred to, stored, and processed in countries where our servers or service providers are located. These countries may have data protection laws that differ from those in your jurisdiction.

Where required by applicable law, we implement appropriate safeguards for international data transfers, such as Standard Contractual Clauses approved by the European Commission, or other transfer mechanisms recognized under applicable data protection regulations.

10. Children's Privacy

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information promptly. If you believe we have inadvertently collected information from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes, we will notify you by email or by posting a prominent notice on the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date of any updated Privacy Policy constitutes your acceptance of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Lunno
Email: privacy@lunno.app
Website: lunno.app

If you are located in the European Economic Area and believe that your data protection rights have not been adequately addressed, you have the right to lodge a complaint with your local supervisory authority.

Supplemental Notice for EEA, UK, and Swiss Residents

If you are a resident of the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional provisions apply to you:

Legal Basis for Processing. We process your personal data on the following legal bases: (a) performance of a contract, when processing is necessary to provide the Service under our Terms of Service; (b) legitimate interests, when processing is necessary for our business operations, security, and service improvement, provided these interests are not overridden by your rights; (c) consent, when you have given explicit consent for specific processing activities such as marketing communications or AI training; and (d) legal obligation, when processing is required to comply with applicable law.

Data Protection Officer. You may contact our Data Protection Officer at data@lunno.app.

Supervisory Authority. You have the right to lodge a complaint with your local data protection supervisory authority.

Supplemental Notice for California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

The right to know what personal information we collect, use, disclose, and sell.
The right to delete personal information we have collected from you, subject to certain exceptions.
The right to opt out of the sale or sharing of personal information. Lunno does not sell personal information. If this practice changes, we will provide a clear opt-out mechanism.
The right to non-discrimination for exercising your privacy rights.
The right to correct inaccurate personal information.
The right to limit the use and disclosure of sensitive personal information.

To exercise your rights under the CCPA/CPRA, please contact us using the information in Section 12 or submit a request through our website. We will verify your identity before processing your request.