Privacy Policy

Last updated: January 8, 2026

1. Introduction

LunaPhone.AI LLC ("Company," "we," "us," or "our") operates the LUNA AI receptionist service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using LUNA, you consent to the practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use our Service.

2. Information We Collect

2.1 Account Information

When you register for LUNA, we collect:

• Firm name and contact information
• Email addresses and phone numbers
• Billing information and payment details
• User account credentials

2.2 Call Data

When LUNA handles calls on your behalf, we collect:

• Caller phone numbers
• Call recordings and transcripts
• Information provided by callers (names, contact details, case information)
• Call duration and timestamps
• Appointment and scheduling data

2.3 Usage Data

We automatically collect certain information when you access our Service:

• IP addresses and device information
• Browser type and settings
• Dashboard activity and feature usage
• Log data and analytics

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our Service
• Process calls and deliver messages to your firm
• Schedule appointments and manage your calendar
• Generate call transcripts and summaries
• Provide analytics and reporting through your dashboard
• Process payments and manage your account
• Send service-related communications
• Respond to your inquiries and support requests
• Improve our AI models and service quality
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information only in the following circumstances:

4.1 Service Providers

We work with third-party service providers who assist in operating our Service, including:

• Cloud hosting providers (Microsoft Azure)
• Telephony providers (Twilio)
• AI and language processing providers (OpenAI, Anthropic)
• Payment processors
• Calendar integration services (Google, Microsoft)

These providers are contractually obligated to protect your information and may only use it to provide services to us.

4.2 Legal Requirements

We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Security

We implement robust security measures to protect your information:

• Encryption in transit (TLS) and at rest (AES-256)
• Secure cloud infrastructure with enterprise-grade security
• Access controls and authentication requirements
• Regular security assessments and monitoring
• Employee training on data protection

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide our Service. Call recordings and transcripts are retained according to your account settings, with a default retention period of 90 days. You may request deletion of your data at any time, subject to our legal obligations.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request your data in a portable format
• Opt-out: Opt out of certain data processing activities

To exercise these rights, please contact us at [email protected].

8. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, and the right to request deletion of your information.

9. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. By using our Service, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers.

11. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through our Service. The "Last updated" date at the top indicates when this Policy was last revised.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

LunaPhone.AI LLC
Email: [email protected]
Phone: (312) 584-9696