Privacy Policy

Last Updated: December 7, 2025

Summary: We collect only what's necessary to provide Luna AI services. We don't sell your data. Your customer conversations are yours, not ours. We use industry-standard security to protect everything.

1. Introduction

Luna AI is operated by Vulcan Interactive LLC ("Company," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Luna AI platform and services (the "Service").

By using Luna AI, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Account Information

When you register for Luna AI, we collect:

Email address
Password (encrypted, we cannot see it)
Business name
Industry type (optional)

2.2 Business Data You Provide

To power your chatbot, you provide:

Knowledge base entries (FAQs, questions and answers)
Widget customization settings (colors, branding, logo)
Lead capture form configurations
Webhook and integration settings

2.3 Conversation Data

When visitors interact with your Luna AI chatbot, we collect:

Chat messages between visitors and your chatbot
Anonymous session identifiers
Timestamp of interactions
Lead information if voluntarily submitted by visitors (name, email, phone)

Important: Conversation data belongs to you, the customer. We process it solely to provide the Service and do not use it for any other purpose.

2.4 Usage and Analytics Data

We automatically collect:

Number of conversations and messages
Response times and accuracy metrics
Feature usage patterns
Browser type and device information
IP address (for security and fraud prevention)

2.5 Payment Information

Payment processing is handled entirely by Stripe. We do not store, process, or have access to your full credit card numbers. We only receive:

Last four digits of your card (for your reference)
Card type and expiration date
Billing address
Transaction history

3. How We Use Your Information

We use collected information to:

Provide the Service: Power your AI chatbot, process queries, generate responses
Improve the Service: Analyze usage patterns to enhance features and performance
Communicate with You: Send service updates, security alerts, and support responses
Process Payments: Handle subscriptions, billing, and invoices
Ensure Security: Detect and prevent fraud, abuse, and security threats
Comply with Law: Meet legal obligations and respond to lawful requests

What We Don't Do: We do not sell, rent, or trade your personal information or your customers' data to third parties. Ever.

4. Third-Party Services

We use the following third-party services to operate Luna AI:

4.1 OpenAI

We use OpenAI's API to power AI responses. When your chatbot responds to visitors, the query is processed through OpenAI. OpenAI's use of this data is governed by their Privacy Policy and API Data Usage Policies. As of our implementation, OpenAI does not use API data to train their models.

4.2 Amazon Web Services (AWS)

Our infrastructure is hosted on AWS, which provides secure, scalable cloud computing. Data is stored in US-based data centers with encryption at rest.

4.3 Stripe

Payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment processor. See Stripe's Privacy Policy.

4.4 PostgreSQL Database

Your data is stored in PostgreSQL databases with encryption, access controls, and regular backups.

5. Data Security

We implement industry-standard security measures:

Encryption in Transit: All data transmitted to and from Luna AI uses 256-bit TLS/SSL encryption
Encryption at Rest: Stored data is encrypted using AES-256 encryption
Access Controls: Strict internal access controls and authentication requirements
API Security: Unique API keys per customer, rate limiting, and domain whitelisting
Password Security: Passwords are hashed using industry-standard algorithms (bcrypt)
Regular Backups: Automated backups to prevent data loss

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but will notify you of any breach affecting your data as required by law.

6. Data Retention

Account Data: Retained while your account is active and for 30 days after deletion request
Conversation Data: Retained for 12 months, then automatically deleted (you may request earlier deletion)
Analytics Data: Aggregated analytics retained for 24 months
Payment Records: Retained for 7 years as required for tax and legal purposes

7. Your Rights and Choices

7.1 Access and Portability

You can access your data anytime through your Luna AI dashboard. You may export your knowledge base and conversation history in standard formats (CSV).

7.2 Correction

You can update your account information and knowledge base entries at any time through the dashboard.

7.3 Deletion

You may request deletion of your account and associated data by contacting us at legal@lunaservice.ai. We will process deletion requests within 30 days, except for data we must retain for legal purposes.

7.4 Opt-Out of Communications

You can opt out of promotional emails by clicking "unsubscribe" in any email. You cannot opt out of essential service communications (security alerts, billing notices).

8. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

Know what personal information we collect and how it's used
Request deletion of your personal information
Opt out of the sale of personal information (we don't sell data, so this doesn't apply)
Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at legal@lunaservice.ai.

9. International Users (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

Right to access, rectify, or erase your personal data
Right to restrict or object to processing
Right to data portability
Right to withdraw consent at any time
Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data is: (a) your consent, (b) performance of a contract, or (c) our legitimate business interests.

10. Children's Privacy

Luna AI is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.

11. Your Customers' Privacy

When visitors interact with your Luna AI chatbot, you are the data controller for that interaction. You are responsible for:

Informing your website visitors that they are interacting with an AI chatbot
Having appropriate privacy disclosures on your own website
Obtaining any necessary consents for lead capture
Handling your customers' data in compliance with applicable laws

We act as a data processor on your behalf and will process visitor data only as necessary to provide the Service.

12. Cookies and Tracking

The Luna AI widget uses minimal cookies and local storage:

Session Storage: Temporary conversation history (cleared when browser closes)
Local Storage: User preferences and widget state

We do not use advertising cookies or third-party tracking pixels in the widget.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the new policy on this page with an updated "Last Updated" date
Sending an email notification for significant changes

Your continued use of Luna AI after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Vulcan Interactive LLC
Email: legal@lunaservice.ai
Subject Line: Privacy Inquiry