Privacy Policy

Last updated: March 30, 2026

This Privacy Policy describes how Lunexa ("we", "us", or "our") collects, uses, stores, and protects your personal information when you use our website, dashboard, APIs, and related services (collectively, the "Service"). We are committed to protecting your privacy and handling your data transparently.

1. Information We Collect

1.1 Information You Provide

  • Account information: Name, email address, and password when you create an account.
  • Billing information: Payment method details processed securely through our payment processor (Stripe). We do not store full credit card numbers on our servers.
  • Organization information: Organization name, team member details, and project configurations.
  • Support communications: Information you provide when contacting us for support or feedback.

1.2 Information Collected Automatically

  • Usage data: Pages visited, features used, search queries performed, and interactions with the dashboard.
  • Device information: Browser type, operating system, device type, and screen resolution.
  • Log data: IP address, access times, referring URLs, and error logs.
  • Cookies and similar technologies: We use cookies and similar tracking technologies to maintain sessions, remember preferences, and analyze usage patterns.

1.3 Your Content

We process the data you upload to the Service (documents, search indexes, configurations) solely to provide the Service. We do not access, analyze, or use your Content for purposes other than operating, maintaining, and improving the Service.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service.
  • Process payments and manage your subscription.
  • Send transactional communications (account verification, billing receipts, security alerts).
  • Respond to your support requests and feedback.
  • Analyze usage patterns to improve the Service.
  • Detect and prevent fraud, abuse, and security incidents.
  • Comply with legal obligations.

3. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service providers: We share information with trusted third-party providers who assist us in operating the Service, including payment processing (Stripe), email delivery (Resend), and cloud infrastructure (Google Cloud Platform).
  • Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
  • With your consent: We may share information with third parties when you explicitly consent to such sharing.

4. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL) and at rest.
  • Secure password hashing using bcrypt.
  • Regular security audits and vulnerability assessments.
  • Access controls and authentication for internal systems.
  • Infrastructure hosted on Google Cloud Platform with enterprise-grade physical security.

While we take reasonable precautions to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution).

Your Content (search indexes, documents, configurations) will be permanently deleted within 30 days of account termination.

6. Cookies

We use the following types of cookies:

  • Essential cookies: Required for the Service to function (session management, authentication). These cannot be disabled.
  • Analytics cookies: Help us understand how the Service is used so we can improve it. You may opt out of these through your browser settings.

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Data portability: Request your data in a structured, machine-readable format.
  • Objection: Object to the processing of your data for certain purposes.
  • Withdraw consent: Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We will respond to requests within 30 days.

8. International Data Transfers

Our Service is hosted in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States. By using the Service, you consent to the transfer of your information to the United States, where data protection laws may differ from those in your country.

9. Children's Privacy

The Service is not intended for use by children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information promptly.

10. Third-Party Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you interact with.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least 30 days before they take effect. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: