Privacy Policy

We collect what we need to run the Studio and nothing more. We do not sell your data, we do not run advertising trackers, and we do not use your private uploads or generations to train AI models.

Who is responsible

Lunar Limited, Addax Office Tower 3507, Al Reem Island, Abu Dhabi, United Arab Emirates, is the controller of the personal data described here. For anything about your data, write to [email protected].

What we collect

• Account details — your email address, password (stored hashed by our authentication provider), and, if you choose, a display name, handle, bio and profile picture.
• What you make — your prompts, the settings you pick, the images, video and audio you upload, and the videos and images you generate.
• Billing — your plan, credit balance and a ledger of credit movements. Card payments are handled by Stripe; we receive a customer reference and payment status, never your full card number.
• Service records — technical logs needed to run and secure the Studio (for example IP address, request times and errors), kept briefly.
• Messages — what you send us when you write to support.

We do not collect data for advertising, and the Studio has no third-party analytics or advertising trackers.

How we use it, and why that is allowed

• To provide the Studio (performing our contract with you): sign-in, running generations, storing your library, billing, and emails you need — receipts, sign-in links, and notices about your account.
• To keep it safe (our legitimate interest): preventing fraud and abuse, enforcing the Acceptable Use Policy, securing accounts.
• Optional emails (your choice): an email when a take finishes while you are away. Turn it off any time in your account settings, or with the link in any such email.
• To meet legal obligations: tax and accounting records, responding to lawful requests.

Public content

Your profile becomes public only once you publish something. Anything you publish to the community — the video or image, its prompt and settings, and your public profile (handle, display name, bio, picture) — can be seen by anyone and may be found by search engines. You can hide a published item at any time; it stops being shown right away, though copies others have already saved or indexed may take time to disappear.

Who we share it with

Only service providers who help us run the Studio, under contracts that protect your data:

• Supabase — database, authentication and file storage.
• Cloudinary — storage and delivery of finished media.
• Stripe — payments and subscriptions.
• Resend — sending email.
• AI model providers — the companies whose models generate your videos and images receive the prompt and inputs for that generation, and return the result. They are not permitted to use them for their own purposes beyond providing the service.
• Hosting providers for our servers.

We share data with authorities only when the law requires it, and we never sell it.

International transfers

Our providers may process data outside the United Arab Emirates, including in the United States, the European Union and Asia. Where that happens we rely on appropriate safeguards, such as standard contractual clauses and the providers' security commitments.

How long we keep it

• Your account, library and uploads: while your account is open. When you delete something it is removed from the Studio at once and from backups within 30 days.
• Billing and ledger records: as long as tax and accounting law requires, typically up to 7 years.
• Security logs: up to 90 days.
• When you close your account we delete your personal data within 30 days, except records we must keep by law.

Your rights

Depending on where you live — including under the UAE's data protection law and, for people in Europe or the UK, the GDPR — you can ask us to:

• tell you what data we hold and give you a copy,
• correct it,
• delete it,
• restrict or object to how we use it,
• send it to you in a portable format.

Write to [email protected]. We answer within 30 days and may need to confirm it is you. If you are not satisfied, you can complain to your data protection authority.

Security

Data is encrypted in transit, access is limited to the people who need it, media links expire, and every administrative action is logged. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Children

The Studio is not for anyone under 18, and we do not knowingly collect their data. If you believe a child has an account, tell us and we will close it.

Cookies

We use only the cookies needed to keep you signed in and secure. See the Cookie Policy.

Changes

If we change this policy in a way that matters, we will tell you by email or in the Studio before it takes effect.