Privacy Policy

1. Data we collect

We collect the following categories of data:

• Account information: your name, email address, and hashed password when you register.
• Conversation data: customer conversation files you upload to Lunar for analysis, including transcripts, chat logs, and associated metadata.
• Usage data: information about how you interact with the platform, including pages visited, features used, and timestamps.
• Billing information: payment details are processed by Stripe and are not stored on our servers. We retain only a reference to your Stripe customer ID.

2. How we use your data

We use your data to:

• Provide conversational analytics, including trend detection, sentiment analysis, and external data correlation.
• Process your conversation data through large language models hosted on AWS Bedrock for insight generation.
• Correlate your conversation patterns with publicly available external data such as weather, news, and economic indicators.
• Manage your account and process subscription payments.
• Improve the platform based on aggregated, anonymised usage patterns.

3. PII redaction

Lunar automatically detects and redacts personally identifiable information (PII) within uploaded conversation data before it is processed or stored. This includes names, phone numbers, email addresses, and other identifiers found within conversation transcripts. Redaction is applied by default and cannot be disabled.

4. Data storage and security

All data is stored within the AWS eu-west-2 (London) region. We use the following AWS services:

• Amazon DynamoDB for account and metadata storage.
• Amazon S3 for uploaded conversation files, with server-side encryption enabled.
• AWS Bedrock for LLM-based analysis, processed within the same region.

All data is encrypted at rest and in transit. Access to production systems is restricted and audited.

5. Cookies

Lunar uses essential session cookies to maintain your authenticated session. We do not use advertising or tracking cookies. No third-party analytics cookies are set.

6. Third parties

We share data with the following third-party processors, solely for the purposes described in this policy:

• Amazon Web Services (AWS): infrastructure, storage, and LLM processing.
• Stripe: payment processing. Stripe's privacy policy applies to payment data.

We do not sell your data to any third party. We do not share your conversation data with other customers.

7. Data retention

Your data is retained for as long as your account is active. Retention periods for conversation data vary by plan:

• Starter plan: conversation data retained for 30 days.
• Pro plan: conversation data retained for 12 months.
• Enterprise plan: custom retention periods as agreed.

When you delete your account, all associated data is permanently removed within 30 days.

8. Your rights under GDPR

As a data subject, you have the following rights under the UK General Data Protection Regulation:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate data.
• Right to erasure: request deletion of your personal data.
• Right to data portability: receive your data in a structured, commonly used format.
• Right to restrict processing: request that we limit how we use your data.
• Right to object: object to processing of your data in certain circumstances.

To exercise any of these rights, contact us at hello@intelsoft.co.uk. We will respond within 30 days.

9. Changes to this policy

We may update this privacy policy from time to time. We will notify you of material changes by email or through a notice on the platform. Continued use of Lunar after changes take effect constitutes acceptance of the updated policy.

10. Contact

If you have questions about this privacy policy or how we handle your data, contact us at:

Intelsoft Ltd
Email: hello@intelsoft.co.uk