Privacy Policy

1. Controller

Luna Studios AI Holdings Ltd.
71–75 Shelton Street, Covent Garden
London WC2H 9JQ, United Kingdom
Email: [email protected]

2. Hosting & delivery (Cloudflare)

This website is delivered via Cloudflare Pages (Cloudflare, Inc., USA). When you visit, technically necessary data (IP address, timestamp, requested resource) is processed to serve the site and protect it from attacks. Cloudflare also processes data in the USA on the basis of the EU Standard Contractual Clauses.

3. Luna – voice and text assistant

On this website you can voluntarily talk or write to our AI assistant "Luna". The following applies:

Luna on our customers' websites (data processing on behalf): Where a business uses Luna on its own website, that business is the data controller for its visitors' conversations — we process the data on its behalf as a processor under Art. 28 GDPR. This is governed by our Data Processing Agreement (DPA), which is automatically part of every Luna contract and also lists the sub-processors involved (including ElevenLabs and Cloudflare) together with EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework.

4. Payment processing (Stripe)

Purchases are processed via Stripe (Stripe, Inc. and its affiliates). Your payment data (e.g. card details) is collected and processed directly by Stripe — it never reaches our servers. We receive order data from Stripe (name, email, purchased plan, amount) to fulfill the contract. Stripe's privacy policy applies.

5. Onboarding form

If you fill out our onboarding form after purchase, we process the provided company and contact details as well as uploaded files exclusively to set up your Luna.

6. Email delivery (Resend)

We send transactional emails (e.g. purchase confirmation, onboarding link) via Resend, Inc. (USA). We do not send marketing emails without your consent.

7. Statistics without cookies

We count page views and clicks anonymously (e.g. "pricing viewed") to improve the website. No cookies are set, no IP addresses are stored, and no profiles are created — the numbers cannot be linked to any person.

8. Meta pixel

We use the Meta pixel (Meta Platforms, Inc.) on this website to measure and improve the effectiveness of our advertising. Cookies may be set and usage data (including IP address and visited pages) may be transferred to Meta, including to the USA. When you make a purchase, we additionally send a purchase event to Meta server-side, with your email address in encrypted (hashed) form. Details can be found in Meta's privacy policy. You can object to tracking, e.g. through browser settings, ad blockers, or the ad preferences in your Meta account.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict the processing of, or port your personal data, and to object to its processing (including under the GDPR and applicable US state privacy laws such as the CCPA). We do not sell your personal data. To exercise your rights, write to us anytime at [email protected].

10. Last updated

July 2026. We update this policy when our services change.

← Back to the homepage · Imprint · Terms · DPA