FocusPricingAPIFAQContact

Privacy Policy

Last updated: December 1, 2024

1. Introduction

Lunaa ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our YouTube transcript downloader service ("Service").

2. Information We Collect

Account Information: When you register via Clerk (our authentication provider), we receive your name, email address, and profile picture.

Usage Data: We collect information about how you use the Service, including transcript requests, feature usage, and timestamps.

Device Information: We automatically collect device type, browser type, IP address, and general location (country/region) for analytics and security purposes.

Payment Information: Payment details are collected and processed exclusively by Paddle, our Merchant of Record. We do not store your credit card numbers or banking information.

3. How We Use Your Information

  • Provide and maintain the Service
  • Process your transcript requests
  • Manage your account and subscription
  • Send transactional emails (receipts, account updates)
  • Improve and optimize the Service
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

4. Third-Party Services

We use the following third-party services that may collect data:

  • Paddle (paddle.com) — Payment processing and subscription management. Paddle acts as Merchant of Record and has its own Privacy Policy.
  • Clerk (clerk.com) — User authentication and account management.
  • Convex (convex.dev) — Backend database and real-time data sync.
  • YouTube — We access YouTube's public caption data to provide transcripts. We do not access your YouTube account.
  • Google Gemini — AI features (summarization, translation) for Pro users. Transcript content may be processed by Google's AI services.

5. Cookies & Tracking

We use cookies and similar technologies for:

  • Essential cookies: Required for authentication and core functionality
  • Analytics cookies: Help us understand how users interact with the Service
  • Preference cookies: Remember your settings (e.g., dark mode)

You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.

6. Data Retention

We retain your account information for as long as your account is active. Usage logs are retained for up to 12 months. Transcript history is retained until you delete it or close your account. After account deletion, we may retain certain data as required by law or for legitimate business purposes (e.g., fraud prevention) for up to 7 years.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, secure authentication, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data ("right to be forgotten")
  • Portability: Request your data in a portable format
  • Objection: Object to certain processing of your data
  • Withdraw consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. Our service providers (Paddle, Clerk, Convex) may store data in the United States or other jurisdictions. We ensure appropriate safeguards are in place for such transfers.

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

11. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information we collect, the right to delete, and the right to opt-out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at [email protected].

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your data includes: contract performance (providing the Service), legitimate interests (improving the Service, fraud prevention), and consent (marketing communications). You may lodge a complaint with your local data protection authority.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.

14. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights:

Email: [email protected]