Privacy Policy

This policy explains how Lune Data Solutions Ltd (“Lunedata”, “we”, “us”) handles personal data in connection with Luneflow, the WhatsApp-powered AI assistant platform we own and operate (luneflow.co). It is aligned with, and should be read together with, the Luneflow service privacy policy at luneflow.co/privacy.

1. Who is responsible for your data

Lune Data Solutions Ltd, Company No. 16869228, registered in England and Wales, is the data controller for the Luneflow platform. Luneflow is a product of Lunedata: all data processed by the Luneflow application on the WhatsApp Business Platform is handled by Lunedata under this policy and the Luneflow service policy.

2. How Lunedata handles data for Luneflow users

Lunedata processes the following data on behalf of and about Luneflow users:

• Business customers (the businesses subscribing to Luneflow): account contact details, WhatsApp Business Account metadata (display name, phone number, message templates, Flows and settings), billing records, and the business content used to configure their assistant.
• End customers (people who message a Luneflow business on WhatsApp): message content, WhatsApp phone number and display name as provided by Meta’s WhatsApp Business Platform, booking details they submit, and — only where they explicitly opt in — a marketing-consent flag with a consent timestamp.

We use this data solely to provide the Luneflow service: routing and answering WhatsApp messages on behalf of subscribing businesses, operating booking and feedback journeys, sending approved template messages (only with the required opt-in for marketing messages), and running the management tools businesses use. We do not sell personal data.

3. Where data lives and who sees it

Message and booking data is stored in our hosted database infrastructure within the UK/EEA region. Data flows through Meta’s WhatsApp Business Platform (subject to Meta’s terms) and, for AI-assisted replies, through our AI processing provider under contractual safeguards. Access within Lunedata is limited to what operating the service requires.

4. Retention and your rights

We keep personal data only as long as needed to provide the service and meet legal obligations. Under UK GDPR you may request access, correction, deletion or portability of your personal data, and you may withdraw marketing consent at any time (replying STOP to a marketing message does this automatically). Requests: privacy@luneflow.co. Data deletion requests for WhatsApp end customers are also honoured via the process at luneflow.co/data-deletion.

5. Contact

Privacy questions: privacy@luneflow.co · General: hello@luneflow.co. You also have the right to complain to the ICO (ico.org.uk).