Privacy Policy

LunOS is operated by LN Services Inc., the data controller for any personal information you upload or that we collect while you use the Service. You can reach us at [email protected].

Three buckets:

• Account data: name, email, hashed password, role, language/timezone preferences.
• Workspace data: the locations, keywords, campaigns, logos, domains, and CRM connections you add to the app.
• Usage telemetry: minimal server logs (IP, user-agent, timestamps, endpoint hit) for debugging and rate limiting.

We do not run advertising trackers. We do not sell personal data. We do not train third-party AI models on your data.

• Provide the Service and sync with the integrations you've connected;
• Keep you signed in securely;
• Send transactional emails (alerts, invoices, account notices);
• Debug errors and measure platform health;
• Comply with legal obligations.

We'll ask before using your data for anything outside this list.

LunOS asks for access to Google data only when you choose to sign in with Google or to connect a Google account to a location. This section explains exactly what we access, why, and what we never do with it.

What we access

• Sign in with Google: your name, email address and profile picture (the openid, email and profile scopes).
• Google Business Profile: the accounts and business locations the connected Google account manages, their business information (name, address, phone, website, categories, hours, description, service areas), their reviews and their performance metrics such as calls, website clicks and direction requests (the business.manage scope).
• Google Search Console: read-only search performance (clicks, impressions, queries and pages) for the website you connect (the webmasters.readonly scope).
• Google Analytics 4: read-only property list, sessions and conversions for the website you connect (the analytics.readonly scope).
• Account identity: the email address of the Google account you connect, so you can see which account a location uses (the userinfo.email scope).

How we use it

• To show the business’s profile, reviews, search and analytics data in the location’s dashboards and in the reports the agency sends to that business;
• To fill in the business’s details in LunOS (for example, when a location is set up) so they do not have to be typed again;
• To update a Business Profile’s business information, only when a user of the account asks LunOS to make that change.

What we never do

• We do not sell Google user data or share it with anyone, except the hosting and infrastructure processors listed below that we need to run the Service, or when the law requires it.
• We do not use Google user data for advertising, and we do not use it to train or improve generalized AI or machine-learning models.
• No LunOS employee reads Google user data unless you ask us to for support, we need to for security reasons, or the law requires it.

Storage, retention and deletion

Google access tokens are encrypted at rest and only sent over HTTPS. Data we read from Google is kept while the connection is active so dashboards and reports keep working. You can disconnect a Google account at any time from the location’s integrations in LunOS, or revoke LunOS’s access at https://myaccount.google.com/permissions. When you disconnect, we delete the tokens and stop reading from Google; to have the data we already stored deleted, email [email protected] and we will delete it within 30 days.

LunOS’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements: developers.google.com/terms/api-services-user-data-policy.

LunOS connects to Facebook and Instagram only when someone chooses to: an agency administrator connecting the agency’s Meta business portfolio, or a business connecting its own Facebook account from its location’s settings in LunOS. We use that connection for two things: to publish the posts created or scheduled in LunOS for a business to that business’s own Facebook Page and Instagram account, and to let the business see and edit its own Page’s public profile from LunOS. This section explains exactly what we access, why, and how to have it deleted.

What we access

• The connection: the name and ID of the Facebook account that connected, its access token and the permissions it granted.
• Pages and Instagram accounts: the names and IDs of the Facebook Pages and linked Instagram professional accounts that the connected account or its business portfolio manages, so each one can be linked to the right business location.
• Page profile: the public details of the linked Page (description, website, phone, email, hours, profile picture and cover photo). We read them when someone opens the Page editor in LunOS and do not store them.
• Published posts: the IDs Facebook and Instagram return for the posts LunOS publishes, so LunOS can show what was published and remove a Facebook post when asked to.

How we use it

• To publish the posts written, scheduled or set up as a campaign in LunOS for a business to the Page and Instagram account linked to that business;
• To delete from a Facebook Page a post that LunOS itself published, when someone removes it in LunOS;
• To change the public details of the linked Page when someone edits them in LunOS and saves;
• To check that the connection still works and warn the agency or the business when it has to be reconnected.

What we never do

• We do not read, collect or delete posts, comments, messages or any other content that other people create on a Page or Instagram account.
• We do not post to personal profiles, only to the Pages and Instagram professional accounts linked to a business in LunOS.
• We do not sell Facebook or Instagram data or share it with anyone, except the hosting and infrastructure processors listed below that we need to run the Service, or when the law requires it. We do not use it for advertising or to train AI models.

Storage, retention and disconnection

Access tokens are encrypted at rest and only sent over HTTPS. Facebook can be disconnected at any time in LunOS: by an agency administrator from the agency’s settings, or by a business that connected its own account from its location’s settings. You can also remove LunOS from Facebook under Settings and privacy › Settings › Business integrations. When an agency disconnects, we delete its access token and stop publishing; the links between Pages and locations and the record of posts already published stay in the agency’s workspace until the workspace is closed or you ask us to delete them. When a business disconnects its own account, we delete its access tokens and the link to its Page, and cancel the posts still waiting to be published on Facebook or Instagram.

How to delete your Facebook and Instagram data

To have every piece of Facebook and Instagram data LunOS holds about you, your agency or your business deleted (the account name and ID, the access tokens, the linked Pages and Instagram accounts and the record of published posts), email [email protected] from the email address of your LunOS account, or from the one you use on Facebook with the name of the Facebook account or Page. We confirm the request and delete the data within 30 days. Posts already published stay on Facebook and Instagram; you can delete them there at any time.

LunOS asks for access to a Pinterest account only when a business, or its agency on its behalf, chooses to connect that business’s Pinterest account to LunOS, so LunOS can publish Pins for that business. This section explains exactly what we access, why, and what we never do with it.

What we access

• Boards: the names and IDs of the boards in the connected account, so the business can choose where its Pins are published (the boards:read scope, and boards:write, which Pinterest requires to add a Pin to a board). We do not create, rename or delete boards.
• Pins: the Pins LunOS publishes for the business, so we can show their status and remove them when the business asks (the pins:read and pins:write scopes).

How we use it

• To publish Pins (an image, a title, a description and a link to the business’s website) that the business or its agency created or approved in LunOS, on the board and at the time they chose;
• To delete a Pin that LunOS published, when a user of the account asks for it;
• To show in LunOS which Pins were published and when.

What we never do

• We do not sell Pinterest user data or share it with anyone, except the hosting and infrastructure processors listed below that we need to run the Service, or when the law requires it.
• We do not use Pinterest user data for advertising, and we do not use it to train or improve generalized AI or machine-learning models.
• We do not read or collect other people’s Pins, followers or private boards, and we never publish anything the business did not create or approve in LunOS.

Storage, retention and deletion

Pinterest access tokens are encrypted at rest and only sent over HTTPS. You can revoke LunOS’s access at any time in your Pinterest settings (Security and logins, then Apps), and LunOS stops being able to access the account at once. To have us disconnect the account and delete its tokens and the data we stored, email [email protected] and we will do it within 30 days.

To run LunOS we rely on processors who may handle your data on our behalf. Each is bound by a DPA and only gets the data they need:

We use a small number of first-party cookies: one to keep you signed in, one to remember UI preferences, and (optionally) one for billing session state. No third-party advertising cookies. You can clear them any time via your browser.

Account data lives as long as your account is active. After account closure we delete or anonymize workspace data within 30 days unless law requires longer retention (for example, invoices). Backups are purged on a 35-day rolling window.

Passwords are hashed (bcrypt), transport is HTTPS everywhere with TLS 1.2+, and we apply least-privilege access to our production database. If we ever detect unauthorized access to your data, we will notify you within 72 hours as required by GDPR Article 33.

Depending on where you live, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or outdated data;
• Delete your account and associated data;
• Export your data in a machine-readable format;
• Object to or restrict certain processing;
• Withdraw consent at any time (this doesn't affect prior lawful processing).

To exercise any of these, email [email protected]. We aim to respond within 30 days.

Our servers and some processors are based outside the EU/UK. When we transfer data internationally, we rely on Standard Contractual Clauses or adequacy decisions to keep protection at the GDPR level.

LunOS is built for businesses and is not intended for children under 16. We do not knowingly collect data from minors.

When we change this Policy, we update the "last updated" date at the top. Material changes are emailed to account owners and posted in-app at least 14 days before taking effect.

Privacy questions, data-subject requests, breach reports: