Legal
Privacy Policy
Last updated: 2026-08-27 — Effective date: 2026-08-27
Luner Advertising (“LUNER”, “we”, “us” or “our”) operates the LUNER campaign creation and engagement platform, including its website, account portal, campaign builder, hosted campaign experiences, interactive activities, analytics and related services (together, the “Service”).
Luner Advertising
6353 Visarand Street, Khomasdal, Windhoek, Namibia
P.O. Box 3175, Windhoek, Namibia
Website: lunerapp.com
Privacy and support: [email protected]
This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you use the Service. This is a public launch policy intended to meet a strong, internationally responsible privacy standard.
1. Scope and roles
1.1 LUNER platform users
When you create or use a LUNER account, manage a workspace, contact support, subscribe to a plan or interact with LUNER directly, LUNER generally acts as the organisation responsible for that information.
1.2 Campaign participants
When a Campaign Owner creates a campaign using LUNER, that Campaign Owner decides why participant information is collected, what fields are used, and what notices and consent wording participants see. For participant information collected through a Campaign Owner's campaign, the Campaign Owner is normally the responsible organisation. LUNER generally processes that information to host, operate, secure, measure and support the campaign on the Campaign Owner's instructions.
2. Information we collect
2.1 Account and workspace information
We may collect: name, email address, phone number and login details; organisation, job title, billing contact and workspace information; account preferences, plan and entitlement information; support requests and feedback; and authentication, access and security records.
2.2 Billing information
When you purchase or request a paid plan, we may collect or receive assisted order details, billing contact information, invoice details, plan, amount, currency, billing period, payment status and limited payment-provider identifiers. We do not intend to store full payment-card numbers when payment is handled by a provider.
2.3 Campaign and customer content
We collect and store information that a customer places in a workspace — campaign names, briefs, copy, questions, logos, images, uploaded assets, presentation choices, reward and offer configuration, and prompts submitted to AI-assisted features.
2.4 Participant information
Depending on a Campaign Owner's configuration, a campaign may collect no identity information, optional contact information, name, email, mobile number, company, message, employee ID, invite code, verification information, reward-claim contact details, survey responses, game activity, scores, attempts, claims or other campaign answers.
2.5 Technical and usage information
We may collect or generate: IP address or approximate location; browser, device, operating system and language; pages, campaigns and features viewed; timestamps and interaction events; and security, rate-limit, fraud and abuse signals.
3. How we use information
- Create and maintain accounts and workspaces.
- Build, host, publish and deliver campaigns.
- Process campaign responses, results, rewards and configured claims.
- Provide analytics, exports, support and service communications.
- Authenticate users and manage subscriptions and entitlements.
- Prevent fraud, abuse, unauthorised access, cheating and harmful activity.
- Diagnose errors, monitor reliability and improve the Service.
- Send product, security, billing and administrative communications.
- Send marketing communications where permitted and where the recipient has consented.
- Comply with legal obligations and respond to lawful requests.
- Protect the rights, property, safety and integrity of LUNER, customers, participants and others.
4. AI-assisted features
By default: LUNER processes prompts and customer content only as needed to provide the requested feature; LUNER does not use customer campaign content, uploaded brand assets, participant responses or confidential customer information to train general-purpose AI models without explicit permission; AI output may be inaccurate, incomplete, biased, unsuitable or not legally cleared; and the customer must review AI-generated content before publication.
5. Marketing communications
Marketing consent is separate from agreeing to campaign rules, accepting a required privacy notice, receiving essential account or security communications, and participating in a campaign. We will not treat campaign participation as automatic consent to receive unrelated marketing from LUNER.
6. Cookies and similar technologies
LUNER may use cookies, local storage, pixels, logs and similar technologies for login, session continuity, preferences, security, performance measurement and analytics. Strictly necessary technologies may be required for the Service to work. Where consent is required for optional analytics or advertising technologies, LUNER will provide an appropriate choice mechanism.
7. When we share information
We may share information with: infrastructure, hosting, storage, database and security providers; authentication, email, customer-support and communications providers; payment processors and billing providers when enabled; analytics, monitoring and error-reporting providers; AI or content-processing providers used to provide an enabled feature; contractors and professional advisers; a Campaign Owner, where the information belongs to that owner's campaign; law-enforcement, regulators or courts when legally required; and a successor or buyer in connection with a merger or sale of the business.
We do not sell or rent participant personal information or customer campaign data as a commercial data-broker product.
8. International processing
LUNER and its service providers may process information in Namibia or other countries where our infrastructure and providers operate. Where a law requires safeguards for an international transfer, LUNER will seek to use an appropriate transfer mechanism or contractual protection.
9. Retention
| Information | Default retention |
|---|---|
| Account and workspace data | While active, plus up to 90 days after closure |
| Campaign content and analytics | Up to 24 months after campaign closure |
| Participant personal information | Default 12 months after campaign closure |
| Security, fraud and integrity signals | Shorter, risk-based periods |
| Billing and tax records | At least the period required by applicable tax and accounting rules |
| Backups | Deleted through ordinary backup rotation, generally within 90 days |
10. Security
LUNER uses reasonable administrative, technical and organisational safeguards designed to protect information from unauthorised access, alteration, loss, misuse or disclosure. No internet service can guarantee absolute security.
11. Rights and choices
Depending on applicable law, a person may have rights to: request access to personal information; correct inaccurate or incomplete information; request deletion or restriction; object to certain processing; withdraw consent where processing is based on consent; request portability; and complain to an appropriate regulator or seek a legal remedy.
Requests should be sent to [email protected].
12. Children
LUNER customer accounts are intended for people aged 18 or older. A Campaign Owner may choose to run a campaign accessible to younger participants, but that Campaign Owner must decide whether the campaign is suitable, provide required notices and obtain any required parent, guardian or other consent.
13. Third-party links and campaign destinations
Campaigns may link to websites, payment pages, social networks, forms or other services operated by third parties. LUNER is not responsible for the privacy practices of those services.
14. Changes to this policy
We may update this policy when the Service, law or provider arrangements change. We will update the date above and provide additional notice for material changes where reasonably required.
15. Contact
16. Important campaign-owner requirement
This platform policy does not replace a Campaign Owner's participant-facing privacy notice. Before publishing a campaign, the Campaign Owner should provide a clear notice explaining who it is, what information it collects, why it collects it, who receives it, how long it keeps it, and how participants can exercise their rights.