Privacy Policy

1. Who We Are & Scope of This Policy

Lunivva (“Lunivva”, “we”, “our”, or “us”) provides custom AI-powered automation systems and related technical services for businesses. This Privacy Policy applies to:

• Visitors to our website
• Prospective clients who contact us
• Clients and authorized users of automation systems, dashboards, or portals built or operated by Lunivva

For website visitors and prospective clients, Lunivva acts as a data controller. For automation systems provided to clients, Lunivva generally acts as a data processor or service provider, processing personal data on behalf of the client and in accordance with their instructions.

This policy is intended to comply with applicable data protection laws, including the GDPR (EU/UK), CCPA/CPRA, and other relevant privacy regulations. This Privacy Policy does not apply to third-party services or platforms that clients choose to integrate with Lunivva automations. Clients are responsible for reviewing the privacy policies of those third-party services.

2. Core Privacy Position

Lunivva does not use client data for independent purposes.

We process client data solely to provide, maintain, secure, and support the services, and only in accordance with client instructions or applicable legal requirements. We do not:

• Sell personal data
• Share personal data for advertising or marketing
• Profile individuals for unrelated purposes
• Train AI models on client data
• Repurpose client data beyond service delivery

Clients remain responsible for, and retain control over, the personal data they submit to or process through our services.

3. Categories of Personal Data We Process

3.1 Website Visitors & Prospective Clients

• Contact information (name, email address)
• Business information (company name, role)
• Communication content (messages sent to us)
• Technical data (IP address, browser type, device information)

3.2 Clients & Authorized Users

• Account and contact information
• Authentication credentials or access tokens provided by the client
• System configuration and administrative data

3.3 Automation & Workflow Data

Depending on client configuration, automations may process:

• Operational business data
• Workflow inputs and outputs
• System event logs and execution metadata

Such data is processed only to execute the automation logic defined by the client.

4. Sources of Personal Data

Personal data may be collected:

• Directly from you (forms, emails, contracts, onboarding)
• Automatically through website usage (cookies, logs)
• From third-party services you choose to connect to the automations (e.g., APIs, platforms)

5. Purposes of Processing

We process personal data for the following purposes:

• Providing and operating our services
• Designing, deploying, and maintaining automation systems
• Communicating with clients and prospects
• Ensuring system security, reliability, and abuse prevention
• Complying with legal and regulatory obligations

6. Legal Bases for Processing (GDPR)

Where GDPR applies, we rely on one or more of the following lawful bases:

• Performance of a contract – to provide requested services
• Legitimate interests – to operate, secure, and improve our services
• Legal obligations – to comply with applicable laws
• Consent – where required (for example, certain cookies or communications)

7. Human Access & Data Minimization

• Automations are designed to minimize human access to data
• Lunivva personnel access data only where necessary for:
  • Technical support
  • Maintenance
  • Security investigations
• Access is limited, purpose-bound, and controlled

8. Data Sharing & Recipients

We do not sell personal data. We may share data with service providers and subprocessors acting on our behalf, including:

• Cloud infrastructure providers (e.g., Amazon Web Services)
• Hosting, monitoring, and logging providers
• Communication and support tools
• Security and incident-response services

These providers process data only under our instructions and subject to contractual confidentiality and security obligations.

9. Cloud Infrastructure, Integrations & International Transfers

Lunivva uses third-party cloud infrastructure providers, which may include Amazon Web Services (AWS).

• Data may be processed or stored in jurisdictions outside your own
• Where required, we implement appropriate safeguards (such as standard contractual clauses) for transfers of personal data outside the EEA or UK
• We may change infrastructure providers or architectures as needed to maintain service quality and security

This policy does not cover third-party platforms or tools that clients choose to integrate with Lunivva automations.

10. Cookies & Tracking Technologies

Our website may use:

• Essential cookies (for functionality and security)
• Limited analytics cookies (to understand site usage)

Cookies may collect technical information such as IP address, browser type, and pages visited.

You can manage cookies through your browser settings and any cookie preference tools provided on our website. Where required by law, we obtain consent before placing non-essential cookies.

11. Data Retention

We retain personal data only as long as necessary, based on:

• The duration of the client relationship
• Legal and regulatory requirements
• Security, audit, and dispute-resolution needs

Examples:

• Contact and account data: retained during the relationship and for a limited period afterward
• Automation data: retained according to client instructions or deleted upon termination
• Logs: retained for limited periods for security and compliance purposes

12. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion
• Restrict or object to processing
• Request data portability
• Withdraw consent where applicable

13. How to Exercise Your Rights

To exercise your rights, contact us at legal@lunivva.com.

We may need to verify your identity before responding. We aim to respond within the timelines required by applicable law.

14. Security Measures & Incident Notification

We apply reasonable and industry-standard security measures, including:

• Encrypted connections
• Access controls
• Secure cloud environments
• Monitoring and logging

No system is completely secure. Where required by law, we will notify affected clients, users, or authorities of a personal data breach.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of our services after changes means you accept the updated policy.

16. Business Identity & Contact Details

Lunivva is operated by Lunivva, registered in India Karnataka. Contact: legal@lunivva.com.