📑 LoonaFlow AI – Privacy Policy

1. Information We Collect

• Account data: Name, email, company info, billing details
• Usage data: Interactions with our Service, analytics
• Lead/contact data: Business contacts uploaded or generated by users (LoonaFlow processes these only as a processor)
• Cookies: For authentication, analytics, personalization

2. Lawful Basis for Processing

We process personal data under GDPR on the following bases:

• To provide the Service: Contract
• To provide support & security: Legitimate Interest
• For marketing communications: Consent or Legitimate Interest
• For lead/contact data provided by users: Legitimate Interest of users (controllers)

3. How We Use Your Information

• To deliver and maintain the Service
• To process payments and provide customer support
• To improve features and develop new ones
• To ensure security and prevent abuse
• To send users service-related communications

4. Cookies

We use:

• Essential cookies (login/session management)
• Analytics cookies (usage statistics)
• Functional cookies (preferences, personalization)

You can manage cookies via your browser settings.

5. Data Sharing

We do not sell your data. We may share it only with:

• Trusted service providers (e.g., hosting, Outscraper, email providers)
• Legal authorities, when required
• In case of business transfers (e.g., merger or acquisition)

6. International Transfers

If data is transferred outside the EU (e.g., to the US), we use Standard Contractual Clauses (SCCs) or equivalent safeguards.

7. Data Retention

• Account data: kept while your account is active, or as legally required
• Lead/contact data: retained only while your subscription is active or until deleted by you
• Suppression lists: retained to respect unsubscribe requests

8. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccuracies
• Request deletion ("right to be forgotten") - You may request deletion at any time, and we will erase your data within 30 days.
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

Requests can be made at hello@loonaflow.app

Our standard DPA is available on request at hello@loonaflow.app

If you believe your data protection rights have been violated, you may lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů, www.uoou.cz) or with your local supervisory authority within the EU.

9. Security

We use appropriate security measures, including encryption, access controls, and monitoring. However, no system is 100% secure.

10. Children's Data

The Service is not intended for children under 16. We do not knowingly collect their data.

11. Changes to this Policy

We may update this Privacy Policy. Updates will be posted here with the new date. For significant changes, we will notify you via email or in-app.

12. Contact Information