Effective Date: March 11, 2023
Luna, trading name of GetWelp Limited.
3rd Floor 86-90 Paul Street,
What personal data do we collect and how do we use it?
We collect and use your personal data from third-party providers (e.g. Google or Microsoft) with your authorisation. We use your calendar events data to show you an aggregated view of your events and to calculate your availability for scheduling meetings with your invitees. Luna uses your contact data (e.g. name and email) to help you choose who you want to meet with and to notify them about the meetings. You can revoke our access to your data at any time by deleting your account in the settings page.
We only store information required for offering our services. Luna does NOT sell your data, individually or in aggregated form.
Your data is stored in our secured servers. Some of your data might be sent to vetted third parties to assist with providing you with the Luna services. Separately, we retain the right to share data with government agencies to satisfy applicable law, regulation, legal process or enforceable governmental request. Access to your data allows Luna to learn your preferences which helps your automated assistant provide you with the best product experience.
Data Use for integrations
We offer various integrations with third-party services and platforms to enhance your user experience and provide you with additional features and functionalities. These integrations may require us to access, collect, store, process, and share your personal data with the respective third-party providers. We only use your data for the purposes of enabling and maintaining the integrations that you choose to activate. We do not sell or rent your data to any third parties. You can manage your integration preferences and revoke any permissions at any time in your account settings.
Luna’s use of information received, and Luna’s transfer of information to any other app, from Google APIs will adhere to Google’s Limited Use Requirements.
What types of cookies do we use?
Essential website cookies. These are required to operate the website in the intended way. Essential cookies are required to provide you with services while browsing our site.
Performance and functionality. Non-essential to the operation of our site, but help optimise your experience while browsing. If these are turned off, certain features and aspects of the website may not operate correctly.
Analytics and customisation cookies. These cookies help us determine how our visitors are using our website. This can help us ascertain ways to improve our website, and future marketing campaigns.
Session cookies. Designed to be temporary, these cookies delete themselves once you log out.
Persistent cookies. These exist within your computer for an extended amount of time, providing service upon every visit to our website. These can be turned off and manually deleted through your browser settings.
How long do we keep your personal data?
The data is deleted once the user deleted their Luna account. We only store your personal data for as long as we need it to provide you with our service. This is in accordance with the principle of storage limitation under the GDPR, which requires us to keep personal data only for the duration of its specified purpose. You can delete your account any time by clicking on “Delete Account” in the Settings Page of the Luna app. Once you delete your account, we will remove all your personal data from our systems and databases. We do not retain any personal data that is no longer necessary for our service.
Why do we process your personal data?
We process your personal data for the purpose of providing you with our service of finding the best time to meet with others. We use your data to calculate your availability based on your calendar events and preferences, and to simplify scheduling meetings by sending invitations and reminders to you and your invitees. We do not use your data for any other purpose than delivering our service to you.
What is our legal basis for processing your personal data?
We process your personal data in accordance with the applicable data protection laws and regulations. Depending on the context and purpose of the processing, we rely on one or more of the following legal bases:
Your consent: We may ask for your explicit consent to process your personal data for specific purposes, such as sending you marketing communications or using cookies on our website. You can withdraw your consent at any time by contacting us or following the instructions in our communications.
Our legitimate interests: We may process your personal data when it is necessary for our legitimate interests, such as providing and improving our products and services, protecting our rights and interests, conducting market research and analysis, preventing fraud and abuse, and maintaining our relationship with you.
Performance of a contract: We may process your personal data when it is necessary to perform a contract that you have entered into with us or to take steps at your request before entering into a contract, such as fulfilling your orders, delivering our services, or providing customer support.
Compliance with legal obligations: We may process your personal data when it is necessary to comply with our legal obligations under applicable laws and regulations, such as responding to requests from authorities, disclosing information for tax purposes, or protecting the health and safety of our employees and customers.
How do we secure information?
We take the security of your information seriously and use various reasonable technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction. We store your data in a secure database and encrypt the most sensitive information such as third-party integrations authentication. We only store the data necessary for providing our services. We also limit the access of your personal information to our employees, and agents who need to know that information in order to process it for us.
Who do we share your information with?
We may share your information with third-party integrations that you choose to connect with our service. For example, if you authorise us to share your information with a calendar provider, we may share your name, email address, and contacts with that platform. You can revoke your consent and access to these third-party integrations at any time by removing the integration, or within the third-party platform, or by deleting your account. We do not sell or rent your information to any other parties. We process our data in the United States and store it in Canada at rest. When we transfer your data from the European Union to the United States, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure that your data is protected in accordance with the GDPR.
Automated decision making
We use proprietary algorithms to help you find the best time to meet with your contacts. Our algorithms analyse your availability and preferences to suggest optimal meeting times.
We may schedule a meeting on your behalf, but only if you have explicitly requested us to do so. You will always receive a confirmation email once any meeting is scheduled by us.
We do not use automated decision-making for any other purposes than finding and scheduling meetings. We respect your privacy and do not share your personal data with any third parties without your consent.
General Data Protection Regulation (GDPR)
Data subject rights
You have certain rights regarding your personal data that we collect and process. These rights include:
Withdraw their consent at any time
Users have the right to withdraw consent where they have previously given their consent to the processing of their personal data.
Access their data
Since they cannot interfere in the processing, but they can view and delete the processed data.
Verify and seek rectification
Users have the right to verify the accuracy of their data and ask for it to be deleted.
Have their personal data deleted or otherwise removed
Users have the right, under certain circumstances, to obtain the erasure of their data from the owner.
How to exercise these rights
Any requests to exercise User rights can be directed to the Owner via email at email@example.com. These requests can be exercised free of charge and will be addressed as soon as possible.