
Privacy Policy for LunarchAI
Effective Date: 2 April 2026
Welcome to LunarchAI (“we,” “our,” or “us”).
This Privacy Policy explains how LunarchAI, located in NSW, Australia, collects, uses, stores, and protects personal information when you use lunarch.ai, our AI automation services, websites, systems, and related tools.
By using our services, you agree to the practices described in this Privacy Policy.
1. Information We Collect
We may collect the following categories of personal and business information:
Personal Information
Name
Email address
Phone number
Business details
Billing and payment information
Account login details
Customer support communications
AI & Service Data
As an AI automation agency, we may also collect:
prompts
chatbot conversations
uploaded files
workflow inputs
CRM records
lead qualification data
voice transcripts
AI-generated outputs
automation logs
model performance feedback
human QA review notes
Technical Data
We may automatically collect:
IP address
browser/device data
operating system
log files
session data
performance diagnostics
API usage logs
Cookies and Tracking
We may use cookies, session tools, and analytics technologies where implemented to improve performance and user experience.
2. How We Use Your Data
We use personal information for the following purposes:
delivering AI automation services
powering chatbots and workflow automations
customer support
payment processing
service optimisation
internal prompt engineering
AI benchmarking
fine-tuning automations
quality assurance
fraud prevention
legal compliance
marketing and remarketing
performance analytics
lead scoring and automated segmentation
Where legally required, we rely on consent, contractual necessity, legitimate interests, and legal obligations as lawful bases.
3. AI-Specific Data Handling
Because LunarchAI provides AI automation and decision systems, your information may be used to:
operate AI agents and automations
improve prompts and workflow logic
fine-tune internal systems
improve client-specific automations
benchmark model outputs
conduct human review for quality assurance
enhance future system performance
Where client or lead consent is provided, prompts, uploaded content, and conversations may be used to improve internal AI workflows and service quality.
If an account is deleted, associated personal data may be deleted unless retention is required by law.
4. Automated Decision-Making
LunarchAI uses automated systems and AI tools that may make or substantially support decisions about leads, customers, and workflows, including:
lead scoring
lead qualification
sales routing
appointment prioritisation
follow-up sequencing
customer segmentation
automated response generation
conversion likelihood analysis
These systems may use:
conversation history
CRM data
behavioural engagement data
contact details
prior interactions
service usage signals
Where required by law, users may request:
information about how automated decisions are made
human review
correction of inaccurate data
deletion of data used in the decision
This section is designed to align with evolving Australian Privacy Act transparency expectations for automated decisions.
5. Third-Party Services
We use trusted third-party providers to deliver our services, including:
OpenAI for language model processing
Anthropic Claude models and AI services
Stripe for payment processing
PayPal for payment processing
GoHighLevel for CRM, hosting, funnels, and workflow automations
These providers may process data on our behalf under their own privacy and security obligations.
6. AI Training & Third-Party Model Use
Customer prompts, conversations, and uploaded data may be processed through third-party AI systems.
Such data may only be used for:
service delivery
workflow execution
model enhancement
internal optimisation
training or fine-tuning
This only occurs where the lead or customer has consented, or where the user continues use under this Privacy Policy and applicable service agreements.
Users may request deletion of their account and associated personal data.
7. Data Retention
We retain personal information:
for as long as required to provide services
as required under Australian tax, accounting, and business laws
until account deletion
as needed for dispute resolution and fraud prevention
After this period, data is securely deleted or anonymised where possible.
8. Data Security
We implement commercially reasonable safeguards, including:
SSL encryption
secure cloud hosting
access restrictions
role-based permissions
secure payment processors
password protection
audit logs
periodic system reviews
secure API credential storage
Important note: your current line “AI takes care of it” is not strong enough legally. A privacy policy should state actual controls, so I translated it into proper legal wording.
9. International Data Processing
Although you stated there are no international transfers, some third-party services (such as OpenAI, Stripe, or PayPal) may process data using overseas infrastructure.
By using our services, users consent to this processing where necessary for service delivery.
This is very important because in reality those providers almost certainly use overseas servers.
10. Your Privacy Rights
Users may request to:
access their data
correct inaccurate data
delete their information
receive a copy of their data
withdraw consent
opt out of marketing
object to profiling
request human review of AI-assisted decisions
We respond within a reasonable timeframe and in accordance with applicable law.
11. Children’s Privacy
Our services are not intended for individuals under 18 years old.
We do not knowingly collect data from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect:
legal changes
AI system changes
new vendors
updated automation capabilities
security improvements
Updated versions will be published on lunarch.ai.
13. Contact Us
For privacy-related requests, data deletion, or complaints, contact:
LunarchAI
49 Aldgate Street
NSW, Australia
Email: [email protected]
Website: lunarch.ai
Lawyer’s Recommendation (Important)
Your current answers create 2 legal risks you should fix before publishing:
1) “No international transfers”
This is almost certainly not accurate because:
OpenAI
Stripe
PayPal
GoHighLevel
all commonly use overseas processing.
2) Cookies = “maybe”
You need to decide whether:
analytics
Meta pixel
Google Ads
retargeting
GoHighLevel tracking
funnel attribution
are being used.
This affects cookie consent banners, especially for GDPR users.