Privacy Policy
We keep what we need to run your account, bill you fairly and keep the service secure, and no more. We don't log the text of your prompts or the model's answers, we don't train on them, and we don't sell your data.
Your prompts and answers
- The text you send and the answers you get are processed in memory on our GPU servers to generate the reply. They are not written to our databases or logs.
- To make repeated prompts faster and cheaper, the start of a recent prompt can stay in server memory for a short time (a "prompt cache"). Each account's cache is kept separate, so no other customer's requests can use it, and it is discarded as new requests replace it.
- We don't use your prompts or answers to train or improve any model, and we don't read them.
- The exception is the law. If we receive a valid legal order, or the law requires us to report illegal content we learn about (for example child sexual abuse material), we will keep and hand over what the law requires, and no more. We don't scan prompts today; if we add an automated safety check, this page will say what it checks and what it keeps before it starts.
What we collect, and why
| What | Why | How long |
|---|---|---|
| Username, email address and a password hash (Argon2; we never see your password) | To run your account and send sign-in codes and account notices | Until you delete your account |
| Your Google account ID and email, if you use Sign in with Google | To sign you in with Google | Until you disconnect Google or delete your account |
| For each API request: time, model, token counts, cost and the name of the key used | To bill you and show your usage | 90 days per request. Your account's running totals (credit and spend) stay under an anonymous account number after you delete your account, so our books add up |
| IP address and browser of your sign-ins and signed-in devices, and a log of security events (sign-ins, password and key changes) | To protect your account and show you its activity | Sessions up to 8 days after last use; the security log 180 days |
| IP addresses and email addresses in rate-limit records | To stop password guessing, spam and abuse | 24 hours |
| Top-up records: amount, status, dates and the invoice ID | To credit your payments and for accounting and tax | As long as accounting and tax law requires, even after you delete your account (without your name or email) |
| Server logs: the web pages requested and the IP address of each visit; for the API, only the network part of the address (for example 203.0.113.x), with no request content or headers. When a request fails (for example while we restart a server), the error log can record the full address and the request's headers, never its content | To keep the service running and investigate problems and attacks | Overwritten automatically as they fill up, normally within a few weeks |
We don't collect payment card details: payments are in Bitcoin. Bitcoin transactions are public on the blockchain by design. We only see what the payment shows us.
Cookies and tracking
We use only the cookies the site needs to work: one that keeps you signed in, one that protects forms against forgery, and short-lived ones while you enter a sign-in code or sign in with Google. Your light or dark theme choice is saved in your own browser. There are no analytics, advertising or third-party trackers on Lunomi, and we don't follow you across other sites, so "Do Not Track" signals don't change anything here.
Who processes data for us
We use these service providers, each only for the job listed and under their own privacy terms:
- Cloud GPU providers: run the GPU servers your requests are processed on, in memory, in the United States.
- Our server host: runs the website, the dashboard and the API gateway, and stores the databases above.
- A network security provider: the website and dashboard (not the API) reach you through its network, which protects them from attacks. It handles those connections, so it processes the pages you visit, your IP address and what you enter in forms, including your password when you sign in. It stores none of it for us.
- An email delivery provider: sends our emails (sign-in codes and account notices), so it receives your email address and the message.
- Payment software we run ourselves: creates your invoices and tells us when they're paid. No payment company sees your account.
- Google: only if you choose Sign in with Google.
Our servers talk to each other over encrypted private connections. For the names of the providers above, email us.
We don't sell your personal information, share it for advertising, or give it to anyone else, except when the law requires it (for example a valid court order), to protect our users or the service from fraud or abuse, or as part of a merger or sale of Lunomi, in which case this policy keeps applying to your data.
Where your data is
Your data is stored and processed in the United States. Our servers, our backups and the GPU servers that process your requests are all in US data centres, and we only rent GPU servers in our providers' US regions. Your API requests go straight to our US servers. Visits to the website and dashboard pass through our network security provider, which may handle them in a data centre near you, outside the United States, on their way to our servers. If you use Lunomi from outside the United States, your data is transferred there.
Security
Everything is sent over encrypted connections (HTTPS). Every sign-in needs your password and a code sent to your email, or your Google account. Passwords are stored only as Argon2 hashes, API keys are shown once and stored hashed by our gateway, and backups are encrypted. No system is perfectly secure; if a breach affects your data, we'll tell you without undue delay.
Your choices and rights
- See your data: your account, usage, payments and security activity are on your dashboard. For a copy of everything we hold about you, email us.
- Correct it: email us to change your email address.
- Delete it: delete your account at any time from the Account page. Your personal data is erased at once, except the top-up records we must keep for accounting (kept without your name or email). Deleted data can remain in our encrypted backups until they are replaced: within a few days for backups on our servers, and up to 30 days for off-site copies.
- California residents: you can ask what personal information we hold about you and how we use it, ask us to delete or correct it, and you won't be treated differently for asking. We don't sell or share personal information as the California Consumer Privacy Act defines those terms.
We answer requests within 30 days. We may ask you to confirm the request from the email address on your account.
Children
Lunomi is for adults (18 and over). We don't knowingly collect data from children; if you believe a child has created an account, email us and we'll delete it.
Changes to this policy
We'll post any change here and update the date at the top. If a change affects how we use data you've already given us, we'll email you before it takes effect.
Contact
Lunomi is based in California, United States. Questions about this page: [email protected].