Privacy Policy

This Privacy Policy explains how USDOTApp LLC dba Lunara ("Lunara", "we", "us", "our") collects, uses, discloses, and safeguards information when you visit our websites lunaralaunch.com and mylunarasystem.com (the “Sites”), use our products or services, subscribe to our programs, or interact with us by SMS/MMS/voice, email, phone, or social media (collectively, the “Services”).

B2B Scope. We provide Services exclusively to businesses (B2B) and do not sell to individual consumers for personal, family, or household purposes. We may process the work contact details of individual employees/representatives of our business clients to provide the Services.

Contact. 1440 N Locust Grove, Suite 32A, Meridian, ID 83642 • [email protected] • 208‑330‑4204 (Mon–Fri, 9:00am–4:00pm MT).

1) Scope

This Policy applies to personal information ("PI") relating to identified or identifiable individuals who interact with Lunara in a business capacity in the United States. We do not target or knowingly serve individuals under 13 years of age. If you provide data on behalf of a business client, you are responsible for obtaining appropriate notices and consents.

2) Information We Collect

A. Information You Provide Directly

• Work contact details (name, email, phone, business name, title).
• Account/support information (tickets, notes, files you upload).
• Marketing preferences and opt‑in/opt‑out choices (email/SMS/voice consent).
• Orders/transactions (products/services purchased, invoices). Full card data is processed by Stripe; we do not store full card numbers.
• Content for campaigns (copy, images, offers, testimonials, logos, credentials to platforms we manage: domains/DNS, email, GBP, social, ad platforms).

B. Information Collected Automatically

• Device identifiers, IP address, browser type/version, pages viewed, time on site, referring URLs, and coarse location.
• Cookies, local storage, pixels, and similar technologies (see §7).

C. Information from Third Parties

• Payment processors (Stripe) — payment confirmations.
• CRM/marketing platforms (GoHighLevel) — engagement metrics, consent logs, delivery status.
• Public sources — brand assets used in your campaigns.

3) How We Use Information

• Provide, operate, and improve the Services (managed marketing, AI tools/chatbots, funnels, email campaigns, social media design, GBP management, SEO setup).
• Configure and manage messaging programs (SMS/MMS and voice) including opt‑in/opt‑out and compliance logging.
• Authenticate users; secure accounts; prevent fraud/abuse; enforce our Terms.
• Process payments and fulfill orders; manage subscriptions and hosting‑only options.
• Provide support and respond to inquiries.
• Send transactional messages and, with consent, marketing communications.
• Analyze usage and develop new features.
• Maintain legal compliance, defend legal claims, and protect our rights and users.

3A) LunaBrain™ (GPT) Program — Privacy & Use

What LunaBrain™ is. LunaBrain™ is our enterprise GPT‑style assistant configured for each business tier to help strategize and scale operations and marketing. Like any AI system, it can make mistakes and should be used with human review.

Training & Model Providers. We use reputable AI providers (e.g., OpenAI or similar) through business arrangements. We configure our providers so that content processed in the LunaBrain™ business workspace is not used to train provider foundation models. Providers may retain limited logs for abuse prevention and operations per their policies.

Data We Process for LunaBrain™. Prompts, files you upload, generated outputs, usage logs (timestamps, user/account IDs), and feedback. We process this data to provide the assistant, improve your private LunaBrain™ configuration, enforce safety, and support.

Your Controls. Do not upload sensitive or regulated data unless covered by a signed data processing addendum. You may request export or deletion of LunaBrain™ artifacts we control, subject to legal/operational limits.

Human‑in‑the‑Loop. AI outputs may be inaccurate, incomplete, or outdated. You agree to verify critical outputs before use.

4) Legal Bases

We process PI pursuant to your consent (e.g., marketing opt‑ins), to perform a contract (your Order or subscription), to comply with law (e.g., keeping consent logs), and for our legitimate interests in providing secure, effective Services.

5) How We Share Information

We do not sell or rent PI. We share PI only as needed to provide the Services and as described below:

• Service Providers/Processors: payment processing (Stripe), CRM/marketing (GoHighLevel), hosting, analytics, communications, and customer support vendors. These parties process PI under our instructions.
• Telecom & Messaging: carriers, The Campaign Registry (TCR), messaging providers, and number hosting providers for A2P 10DLC registration and delivery.
• Business Transfers: in connection with mergers, acquisitions, financing, or sale of assets, subject to confidentiality.
• Legal/Compliance: to comply with law, enforce agreements, or protect rights, users, and the public.

Mobile Information Sharing (A2P Best Practice)

We do not share, sell, rent, or disclose mobile phone numbers, opt‑in consent data, or message metadata to third parties or affiliates for their marketing or promotional purposes. Disclosures to subprocessors (e.g., carriers, messaging providers) are solely to support delivery, routing, and compliance, and are not used by them for marketing.

6) Messaging & Voice Privacy Addendum (A2P/TCPA)

Program & Consent. If you opt in, you may receive recurring SMS/MMS and/or voice (including prerecorded/voice drops) messages. Consent is not a condition of purchase. Opt‑in methods may include web forms with unchecked checkboxes and TCPA language, texting a keyword, scanning a QR with consent text, paper forms, or notice to existing customers. We capture timestamp, source, and consent language where feasible.

Opt‑Out & Help. Reply STOP, END, CANCEL, UNSUBSCRIBE, or QUIT to stop; you will receive a one‑time confirmation message. Reply HELP for support or contact [email protected] / 208‑330‑4204. Msg & data rates may apply.

Frequency & Quiet Hours. Message frequency varies. Marketing texts/voice follow 8:00am–8:00pm recipient local time (unless stricter law applies).

Links. We use branded domains only (lunaralaunch.com, mylunarasystem.com); no public URL shorteners.

Data We Store for Messaging. Phone number, opt‑in/opt‑out status and timestamps, consent source, message logs/metadata (as available), delivery status, and analytics. We retain these records for at least 12 months (recommended 24 months) for compliance and disputes.

7) Cookies & Analytics

We and our service providers use cookies and similar technologies to remember preferences, authenticate sessions, analyze traffic, and measure campaign performance. You can manage cookies through your browser settings; blocking some cookies may impact functionality.

8) Data Retention

We retain PI for as long as necessary to fulfill the purposes described in this Policy, including to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Consent and messaging logs are kept for at least 12 months (recommended 24 months) to support A2P/TCPA compliance and chargeback defense.

9) Security

We implement reasonable administrative, technical, and physical safeguards. Payments are processed by Stripe; we do not store full card numbers. Our CRM/marketing platform (GoHighLevel) provides access controls and encryption appropriate to its role. No method of transmission or storage is 100% secure.

Security Incident Notice. If we determine a security incident likely affects your PI, we will notify you without unreasonable delay and consistent with applicable law.

10) Your Choices & Rights

• Marketing Opt‑Out: unsubscribe links for email; STOP keywords for SMS; IVR/voicemail instructions for voice.
• Access/Correction/Deletion: email [email protected] (or [email protected]). We may need to verify your identity.
• State Rights: Where state privacy laws apply, send requests to [email protected] with subject “Privacy Request,” your state, and request type (access, delete, correct, opt‑out). We respond within 45 days where applicable.
• Do‑Not‑Track: we do not respond to DNT signals.

11) Children’s Privacy

Our Services are for businesses and adults. We do not knowingly collect PI from children under 13. If you believe a child provided PI to us, contact [email protected] and we will delete it.

12) Hosting‑Only Status & Responsibility Transfer

If a client moves to hosting‑only (see Terms), control of day‑to‑day operations and compliance—including messaging content, opt‑ins, and campaign settings—transfers to the client. During hosting‑only, the client is the controller of its CRM data and messaging practices until we are re‑engaged in writing.

13) Third‑Party Services & Links

Our Sites may link to third‑party websites or integrate third‑party tools. Those parties operate independently and their policies govern their handling of PI. Review their privacy policies (e.g., Stripe, GoHighLevel) before submitting information.

14) International Use

We provide Services to U.S. businesses. If you access the Services from outside the U.S., you understand your information may be processed in the United States.

15) Changes to This Policy

We may update this Policy from time to time. Material changes will be posted on our Sites with a new effective date. Your continued use of the Services after the effective date means you accept the updated Policy.

16) Contact Us

Email: [email protected] or [email protected] • Phone: 208‑330‑4204 • Mail: Privacy, USDOTApp LLC dba Lunara, 1440 N Locust Grove, Suite 32A, Meridian, ID 83642

Appendix — Sample SMS Consent Text (copy/paste)

“By entering your number and clicking ‘Agree & Join,’ you consent to receive recurring text messages (marketing and transactional) from Lunara at the number provided. Consent is not a condition of purchase. Reply STOP to opt out, HELP for help. Msg & data rates may apply. See our Privacy Policy.”