Legal

Privacy Policy

Last updated: 2026-08-27 — Effective date: 2026-08-27

Luner Advertising (“LUNER”, “we”, “us” or “our”) operates the LUNER campaign creation and engagement platform, including its website, account portal, campaign builder, hosted campaign experiences, interactive activities, analytics and related services (together, the “Service”).

Luner Advertising

6353 Visarand Street, Khomasdal, Windhoek, Namibia

P.O. Box 3175, Windhoek, Namibia

Website: lunerapp.com

Privacy and support: [email protected]

This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you use the Service. This is a public launch policy intended to meet a strong, internationally responsible privacy standard.

1. Scope and roles

1.1 LUNER platform users

When you create or use a LUNER account, manage a workspace, contact support, subscribe to a plan or interact with LUNER directly, LUNER generally acts as the organisation responsible for that information.

1.2 Campaign participants

When a Campaign Owner creates a campaign using LUNER, that Campaign Owner decides why participant information is collected, what fields are used, and what notices and consent wording participants see. For participant information collected through a Campaign Owner's campaign, the Campaign Owner is normally the responsible organisation. LUNER generally processes that information to host, operate, secure, measure and support the campaign on the Campaign Owner's instructions.

2. Information we collect

2.1 Account and workspace information

We may collect: name, email address, phone number and login details; organisation, job title, billing contact and workspace information; account preferences, plan and entitlement information; support requests and feedback; and authentication, access and security records.

2.2 Billing information

When you purchase or request a paid plan, we may collect or receive assisted order details, billing contact information, invoice details, plan, amount, currency, billing period, payment status and limited payment-provider identifiers. We do not intend to store full payment-card numbers when payment is handled by a provider.

2.3 Campaign and customer content

We collect and store information that a customer places in a workspace — campaign names, briefs, copy, questions, logos, images, uploaded assets, presentation choices, reward and offer configuration, and prompts submitted to AI-assisted features.

2.4 Participant information

Depending on a Campaign Owner's configuration, a campaign may collect no identity information, optional contact information, name, email, mobile number, company, message, employee ID, invite code, verification information, reward-claim contact details, survey responses, game activity, scores, attempts, claims or other campaign answers.

2.5 Technical and usage information

We may collect or generate: IP address or approximate location; browser, device, operating system and language; pages, campaigns and features viewed; timestamps and interaction events; and security, rate-limit, fraud and abuse signals.

3. How we use information

  1. Create and maintain accounts and workspaces.
  2. Build, host, publish and deliver campaigns.
  3. Process campaign responses, results, rewards and configured claims.
  4. Provide analytics, exports, support and service communications.
  5. Authenticate users and manage subscriptions and entitlements.
  6. Prevent fraud, abuse, unauthorised access, cheating and harmful activity.
  7. Diagnose errors, monitor reliability and improve the Service.
  8. Send product, security, billing and administrative communications.
  9. Send marketing communications where permitted and where the recipient has consented.
  10. Comply with legal obligations and respond to lawful requests.
  11. Protect the rights, property, safety and integrity of LUNER, customers, participants and others.

4. AI-assisted features

By default: LUNER processes prompts and customer content only as needed to provide the requested feature; LUNER does not use customer campaign content, uploaded brand assets, participant responses or confidential customer information to train general-purpose AI models without explicit permission; AI output may be inaccurate, incomplete, biased, unsuitable or not legally cleared; and the customer must review AI-generated content before publication.

5. Marketing communications

Marketing consent is separate from agreeing to campaign rules, accepting a required privacy notice, receiving essential account or security communications, and participating in a campaign. We will not treat campaign participation as automatic consent to receive unrelated marketing from LUNER.

6. Cookies and similar technologies

LUNER may use cookies, local storage, pixels, logs and similar technologies for login, session continuity, preferences, security, performance measurement and analytics. Strictly necessary technologies may be required for the Service to work. Where consent is required for optional analytics or advertising technologies, LUNER will provide an appropriate choice mechanism.

7. When we share information

We may share information with: infrastructure, hosting, storage, database and security providers; authentication, email, customer-support and communications providers; payment processors and billing providers when enabled; analytics, monitoring and error-reporting providers; AI or content-processing providers used to provide an enabled feature; contractors and professional advisers; a Campaign Owner, where the information belongs to that owner's campaign; law-enforcement, regulators or courts when legally required; and a successor or buyer in connection with a merger or sale of the business.

We do not sell or rent participant personal information or customer campaign data as a commercial data-broker product.

8. International processing

LUNER and its service providers may process information in Namibia or other countries where our infrastructure and providers operate. Where a law requires safeguards for an international transfer, LUNER will seek to use an appropriate transfer mechanism or contractual protection.

9. Retention

InformationDefault retention
Account and workspace dataWhile active, plus up to 90 days after closure
Campaign content and analyticsUp to 24 months after campaign closure
Participant personal informationDefault 12 months after campaign closure
Security, fraud and integrity signalsShorter, risk-based periods
Billing and tax recordsAt least the period required by applicable tax and accounting rules
BackupsDeleted through ordinary backup rotation, generally within 90 days

10. Security

LUNER uses reasonable administrative, technical and organisational safeguards designed to protect information from unauthorised access, alteration, loss, misuse or disclosure. No internet service can guarantee absolute security.

11. Rights and choices

Depending on applicable law, a person may have rights to: request access to personal information; correct inaccurate or incomplete information; request deletion or restriction; object to certain processing; withdraw consent where processing is based on consent; request portability; and complain to an appropriate regulator or seek a legal remedy.

Requests should be sent to [email protected].

12. Children

LUNER customer accounts are intended for people aged 18 or older. A Campaign Owner may choose to run a campaign accessible to younger participants, but that Campaign Owner must decide whether the campaign is suitable, provide required notices and obtain any required parent, guardian or other consent.

13. Third-party links and campaign destinations

Campaigns may link to websites, payment pages, social networks, forms or other services operated by third parties. LUNER is not responsible for the privacy practices of those services.

14. Changes to this policy

We may update this policy when the Service, law or provider arrangements change. We will update the date above and provide additional notice for material changes where reasonably required.

15. Contact

Luner Advertising

6353 Visarand Street, Khomasdal, Windhoek, Namibia

Email: [email protected]

16. Important campaign-owner requirement

This platform policy does not replace a Campaign Owner's participant-facing privacy notice. Before publishing a campaign, the Campaign Owner should provide a clear notice explaining who it is, what information it collects, why it collects it, who receives it, how long it keeps it, and how participants can exercise their rights.