Privacy Policy

1. Data controller

The controller responsible for processing your personal data is:

2. Personal data we collect

3. Our use of personal data

We use your data for the following purposes:

• Provide and maintain our Services, including generating responses through our AI assistants
• Improve our Services and develop new features
• Process your payments and manage your subscriptions
• Send you information about our Services (with your consent)
• Prevent fraud and ensure the security of our Services
• Comply with our legal obligations

Important: Your conversations with AI assistants may be used to improve our AI models. You can disable this usage in your account settings.

4. Sharing of personal data

We may share your data in the following cases:

• Service providers: hosting (Vercel, Supabase), payments (Stripe), analytics (Google Analytics), AI services (OpenAI, ElevenLabs)
• Expert creators: experts may access conversations you have with their AI assistants to improve their service
• Legal obligations: if required by law or to protect our rights
• Business transactions: in the event of a merger, acquisition, or sale of assets

5. Data retention

We retain your personal data only for as long as necessary for the purposes for which it was collected:

• Account data is retained as long as your account is active
• Conversations are retained according to your preferences (you can delete them at any time)
• Billing data is retained according to legal obligations (10 years)
• Security data is retained for up to 12 months

6. Your rights

In accordance with the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct your inaccurate data
• Right to erasure: request the deletion of your data
• Right to data portability: receive your data in a structured format
• Right to object: object to the processing of your data
• Right to restriction: request the restriction of processing
• Right to withdraw consent: at any time for processing based on consent

To exercise your rights, contact us at [email protected]. You can also file a complaint with the CNIL.

7. Data security

We implement appropriate technical and organizational measures to protect your personal data:

• Data encryption in transit (HTTPS/TLS) and at rest
• Secure authentication with Supabase Auth
• Hosting on secure infrastructure (Vercel, Supabase)
• Restricted data access by our personnel
• Monitoring and detection of suspicious activities

However, no transmission over the Internet is completely secure. We encourage you to protect the confidentiality of your login credentials.

8. Changes to this policy

We may modify this privacy policy from time to time. We will notify you of any significant changes by email or through a notification on our Services. The effective date will be updated at the top of this page.

9. Contact us

For any questions regarding this privacy policy or the processing of your data:

• Email: [email protected]
• Phone: +33 6 31 68 19 49
• Address: LUNOA AI SOLUTIONS SAS, 12 Rue du Paillet, 69570 Dardilly, France