Privacy Policy

Last update: 12 August, 2025

As you use and interact with Luna Launches, Inc. ("Luna") website and service, we process information from and about you to provide access to our tool, enhance your experience, and offer support. This involves collecting, using, transmitting, storing, sharing, and erasing your information.

This Privacy Policy describes how Luna processes your information and explains the choices available to you regarding your information.

Information we collect

Luna processes information that we receive directly from you, automatically collected when you use Luna or visit our website, and collected from third parties. This Privacy Policy does not apply to the processing of your information by third parties through any integrations available via our services. For information on their privacy practices, please visit their respective websites.

Information we receive directly from you

Account information

This includes information that is needed for Luna to create an account for you and manage your ability to log in and out of Luna:

Identifiers, such as first and last name and email address
Your password for Luna (hashed)
Information related to a third-party authentication identity provider, such as Google Authenticator

Information from your use of Luna

Information you provide in the launch details page including description, milestones, resources, updates, risks, decisions and comments
Information uploaded to Luna, such as resources
Information about your OKRs provided in the Goals section
Information about your plans, launches, and OKRs created in our "Turn ideas into plans" feature, including structured items (e.g., stories, epics) that can be pushed to Jira
Jira integration data including sprints, fix versions, and issues that you select for AI analysis, with summaries stored in the Insights Hub
Meeting notes and communications data (such as Slack conversations) that you upload for analysis of launches progress and blockers
Information you provide in the templates section
Profile photo and other information you choose to include to describe yourself, only collected if you do choose to provide it
Professional or employment information, such as your title or role at your company
Any other information you choose to provide while using Luna that identifies or can be reasonably associated with you

Information from other interactions

When you interact with our sales or support teams, we may process:

Your requests, questions, and responses to us via forms or email
Information to verify your identity

Information collected automatically

We may also collect the following:

Metadata and inference information related to your use of Luna, our website, and third-party integrations to better understand the way you work in Luna. We may log the actions you take as you use Luna, such as features you use, content you interact with, and integrations you connect
Internet network activity, cookies, and similar tracking technologies, including data our servers automatically record, such as your web request, IP address, browser type and settings, referring/exit pages and URLs, number of clicks, date and time stamp information, language preferences, and other such information. For more information about our use of tracking technologies, please contact us
Information about how you interact with our website www.withluna.ai such as where you click, how long you visit a page, your scrolling, mouse hovers, and other data to help us better understand your experience and provide you with the best user experience
Financial Information. We currently do not collect or store any credit cards or bank information, as we are using a third-party payment processor, Stripe. However, we will update this Privacy Policy if we start using and storing such information. We will notify you if we start collecting such information from you

Information from third-party sources

Sometimes Luna receives your information from third-parties (other individuals, marketing services, third-party integrations), which may include:

Information processed from third-party integrations you set up with Luna. For example a third-party integration may give us access to information stored in that third party that Luna will process to facilitate the integration
Name, email, and business contact information
Information about you provided to us from other individuals or users of Luna
Information from payment processors. Luna receives payment-related information from Stripe, our payment processor. This includes subscription plan details, the number of seats (makers), payment history, and transaction records necessary to manage your subscription

How we use your information

Luna uses your information to operate our service, communicate with you, for security and fraud prevention, and to comply with the law. We may process your information to:‍

Service operations

Maintain, provide, and improve our service.
Better understand user interests and needs, and customize Luna for you.
Analyze and research how you interact with our website and application.

AI features

Luna offers optional AI features including automated status updates and planning assistance. When you choose to use these features:

These features are always optional - you control when to use them.
Your relevant launch and Jira data is processed by third-party AI service providers (Anthropic and OpenAI) through their commercial API services.
Only data necessary for the specific feature is shared with AI providers.
Per AI providers' Data Processing Addendums:
- Both providers commit to: (i) not "sell" or "share" your data as defined by applicable privacy laws, (ii) not use your data for training, (iii) process data only for providing their services to Luna, (iv) not combine your data with data from other sources, and (v) retain your data for no longer than 30 days.
- Both providers implement security measures including encryption (AES-256 at rest, TLS 1.2+ in transit), access controls, audit logging, and data segregation.
You acknowledge these are third-party services governed by their respective privacy terms and data processing agreements.

Security and compliance

Secure our systems and products against fraud or unauthorized activity.
Identify, troubleshoot, and fix bugs and errors.
Comply with global laws and regulations.
Investigate violations of our Terms of Service.
Comply with a valid legal subpoena, request, or other lawful process that we determine is necessary to respond to.
Manage your subscription, including tracking the features available to you based on your selected plan.

Communication

We use information about your use of Luna, account information (such as your email address and name), and information related to third-party integrations to:

Communicate with you:
- About Luna by phone, text, email, or chat
- To share important notices and updates, product changes, and other necessary notices such as security and fraud alerts
- To advertise or market Luna services to you. You have the ability to unsubscribe from promotional communications at any time
- We may communicate with you regarding your subscription status, including reminders about trial expiration, payment confirmations, and any issues related to billing.
Facilitate reporting and analyze performance of the Luna platform or features available in Luna.\Provide webinars or public presentations.
Provide webinars or public presentations.
Demonstrate Luna or provide you access to a demo Luna instance.

Support and feedback

Respond to your requests for information.
Help identify and troubleshoot any issues with your account and answer your questions.
Resolve support requests.
Provide you with reports about usage.
Survey your opinions through surveys, research studies, and questionnaires.

Combined information

Unless otherwise prohibited by law, we may combine the information that we collect through your use of our service with information that we receive from other sources, both online and offline, and use that combined information as set out above.

How we share your information

We share the information we collect about you to provide and operate our service under the following conditions:

Service providers and subprocessors.
- We share your information with select third parties who assist us in operating Luna. These service providers process data only on our behalf and under our instructions. Our subprocessors include:
  - Cloud infrastructure and data storage providers for hosting our service
  - Payment processors for billing and subscription management
  - Communication tools for customer support and email notifications
  - Analytics providers to understand service usage and performance
  - AI service providers when you use optional AI features
  - Security and performance optimization services
- A complete list of subprocessors is available in our Data Processing Addendum.
Consistent with your settings within our products and services. Please note that information you add to Luna may be visible to other users in your workspace or organization based on your permissions and settings.
Business transfers. If the ownership of all or substantially all of our business changes, or all or some of our assets are sold as part of a bankruptcy or other proceeding, we may transfer your information to the new owner so that the services can continue to operate. In such case, your information would remain subject to the promises and commitments contained in this Privacy Policy until the acquiring party updates it. If such transfer is subject to additional mandatory restrictions under applicable laws or agreements, Luna will comply with those restrictions.
Compliance with legal obligations. We may disclose your information to comply with valid legal subpoenas, requests, or other lawful processes. We will notify affected customers of such requests unless: (a) we are prohibited from doing so by law or court order; or (b) exceptional circumstances exist, such as emergencies involving risk of harm to individuals or minors.

We only use and share your information as described in this Privacy Policy. We do not share your information with third parties for their own direct marketing purposes, and we do not sell your information.

Protection, storage, transfer & retention of your information

Security

Luna takes the security of your information seriously. We implement and maintain robust technical and organizational measures designed to protect your data from unauthorized access, alteration, destruction, or loss. While a comprehensive list of our security measures is available in our Data Processing Addendum, our core practices include:

Encryption. All customer data is encrypted in transit using strong TLS protocols and is encrypted at rest in our database.
Access control. We enforce strict, role-based access controls and the principle of least privilege for all internal systems.
Resilience and recovery. Our systems are built on secure cloud infrastructure (GCP) and feature continuous monitoring and automated daily backups to ensure availability and allow for timely recovery.
Secure development. We follow a formal code review and testing process to identify and remediate vulnerabilities before they reach production.
AI safeguards. When AI features are used, data is processed through API-only connections with our AI providers, with appropriate security measures including encryption in transit and access controls.

No method of transmission or storage is 100% secure. However, we are committed to continuously improving our safeguards to protect your information.

Data breach notification

In the event of a data breach, we will notify affected customers without undue delay and provide details about the nature of the breach and mitigation steps taken.

Data location and transfers

‍When you use our service, information about you will be processed at Luna's operating offices and in any other places where the parties involved in the processing are located.

Depending on your location, data transfers may involve transferring your data to a country other than your own.

You are also entitled to learn about the legal basis of data transfers to a country outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by Luna to safeguard your data.

If any such transfer takes place, you can find out more by inquiring with Luna using the information provided in the contact section. For detailed information about the safeguards we implement for international data transfers, please refer to our Data Processing Addendum.

Data retention

We retain your information for as long as you have an active account with us or as otherwise necessary to provide you with our services. When your account is cancelled or expires, we may retain your information for a reasonable period to allow for account reactivation, comply with our legal obligations, resolve disputes, enforce our agreements, or support legitimate business operations.

Additional information

Marketing preferences

If you receive emails from us, we may use analytics tools to track when you open our messages or click links. This helps us understand the effectiveness of our communications.

You can unsubscribe from marketing emails by clicking the unsubscribe link in any promotional email or by contacting us at [email protected].

Please note that even if you opt out of marketing communications, we may still send you transactional emails about your account or service updates.

Legal bases for processing your information

Our legal basis under the General Data Protection Regulation (GDPR), for collecting and using your information described above will depend on the particular type of information and the specific context in which we collect it. However, some examples of legal bases for processing that we rely on:

Where use of your information is necessary to perform our obligations under a contract with you (for example, to comply with the Terms of Service which you accept by using Luna’s services or to fulfill the terms of a contract signed with companies).
Where use of your information is necessary for our legitimate interests or the legitimate interests of others (for example, to provide security, operate our products and services, prevent fraud, analyze use of and improve our products and services, and for similar purposes).
Where use of your information is necessary to comply with a legal obligation.
Where we have your consent to process data in a certain way.

Your privacy rights

‍Regardless of what country you’re located in, we respect your ability to know, access, correct, export, restrict the processing of, and delete your information, and have extended those rights globally. We will not discriminate against you for exercising your privacy rights.

Information about your rights

‍Upon your request, and subject to applicable legal exceptions, we will:

Provide access to and/or a copy of certain information we hold about you.
Prevent the processing of your information for promotional purposes (including any direct marketing processing based on profiling).
Update information which is out of date or incorrect.
Delete certain information which we have about you.
Restrict the way that we process and disclose some of your information.
Transfer your information to a third party provider of services.
Revoke your consent for the processing of your information.

If you request these rights, we will need to verify your identity for security and to prevent fraud.

We may take additional steps to verify that you are authorized to make the request. If you are an end user of Luna’s services and not a direct customer of Luna (for example, your company uses Luna and you’re an employee or authorized representative of that company), you should direct requests relating to your information to the administrator of your company’s Luna account. We will redirect you to your administrator or notify the administrator directly.

How to exercise these rights

‍Any requests to exercise these rights can be directed to us by sending an email to [email protected]. These requests can be exercised free of charge and will be addressed by us as early as possible and always within one month.

California rights

‍In addition to the rights and information listed above, California consumers and their authorized agents can request information about:

The categories of information we collect or disclose about you; the categories of sources of such information; the business or commercial purpose for collecting your information; and the categories of third parties we share or disclose your information. For your convenience and so you don’t have to request it, we’ve included that information in this Privacy Policy.
The financial incentives that we offer to you, if any.

California residents have the right to request the deletion or correction of personal information we hold about them, subject to certain exceptions. Luna does not sell your personal data, as defined under the California Consumer Privacy Act (CCPA). We will not discriminate against you for exercising any of your privacy rights under the CCPA.

Changes to our Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, features, technology, or legal requirements. When we make material changes, we will notify you by email or through a notice in our service before the changes take effect. The "Last update" date at the top of this Privacy Policy indicates when it was last revised.

Contact us and privacy questions

Luna is located at 3 Germay Dr, Wilmington, DE 19804, USA. If you wish to contact us or if you have any questions about or complaints in relation to this notice, please contact us at [email protected].