Privacy Policy for Luna Screens

1. Who We Are

Luna Screens is operated by Luna IT PTY LTD (ABN: 12 643 738 890), based in Australia. We are committed to protecting your privacy and handling your data in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

2. Information We Collect & Why

We only collect information that is strictly necessary to provide, secure, and improve our digital signage service.

• Account Information: We collect your email address when you create an account. This is used to uniquely identify you, secure your account, send you secure sign-in codes or sign-in links, and communicate essential service updates.
• User Content: We store the assets and content you create or manage within our platform to display on your digital signage. This includes uploaded media files (images and videos), custom signage configurations, and URLs or hyperlinks to external web content you configure your screens to display.
• Technical & Diagnostic Data: To ensure your screens remain stable and to troubleshoot issues, we automatically collect device types, operating system versions, application logs, and system diagnostic performance data.

3. Cookies and Local Storage

To keep you logged into your account across browser sessions, we use a secure access token stored in your browser's localStorage. We do not use this token for third-party tracking or advertising.

4. Third-Party Service Providers & Data Location

We do not sell or rent your data. To operate our service, we share necessary data with trusted third-party infrastructure providers who comply with strict privacy and security standards:

• Google: Used to manage secure, real-time data connections between your management console and your digital signage screens.
• Amazon Web Services (AWS): Used for securely hosting our platform and storing your account data and User Content.
• Stripe: Used to securely process subscription payments. Your credit card details are handled entirely by Stripe and never touch or reside on Luna Screens' servers.

International Data Storage & Disclosure: Luna Screens is an Australian company utilizing secure, distributed global cloud infrastructure. To optimize performance, your data and User Content are generally hosted on servers located in the region closest to you (such as the AWS Germany region for users located in Europe). By using Luna Screens, you acknowledge and agree that your data may be transferred to, stored, and processed across these global regions and in Australia.

5. Data Security

We take data security seriously. All communications between your devices, browsers, and our servers are strictly encrypted in transit using HTTPS (SSL/TLS). We implement industry-standard physical and electronic security measures to protect your account data and User Content from unauthorized access.

6. Accessing and Correcting Your Information

Under Australian privacy law, you have the right to request access to, or correction of, the personal information we hold about you. You can view your account details directly inside the Luna Screens dashboard or request a copy of your data by emailing support.

7. Account and Data Deletion

You own your data. You can delete your User Content at any time through the application dashboard. To completely delete your account, please email us at support@lunascreens.com from the email address associated with your account. Upon receiving your request, we will permanently delete your account, email record, and associated content from our active databases.

8. Additional Information for European Economic Area (EEA) and UK Users (GDPR)

If you are located in the European Union, European Economic Area (EEA), or the United Kingdom, the General Data Protection Regulation (GDPR) grants you specific rights regarding your personal data. Luna IT PTY LTD acts as the "Data Controller" for your information.

• Legal Basis for Processing: We process your Account Information and User Content on the legal basis of Performance of a Contract (to provide the Luna Screens service to you). We process Technical & Diagnostic Data based on our Legitimate Interests (to maintain system security, fix bugs, and optimize app performance).
• Your Rights: In addition to standard access and deletion, you have the right to request a copy of your data in a portable digital format, object to the processing of your data, or request that we restrict how your data is processed.
• International Data Transfers: We endeavor to store your core platform data and media assets within or close to your geographic region (such as AWS Frankfurt for European users). However, to operate our global platform, certain infrastructure operations, authentication routing, and technical support may involve data processing by our providers in the United States or by our core team in Australia. We ensure your data remains protected by utilizing providers that commit to robust data protection frameworks and standard contractual clauses.
• EU Authorities: You have the right to lodge a complaint with your local European Data Protection Supervisory Authority.

9. Complaints and Contact

If you have any questions about this policy or wish to lodge a complaint regarding how your data has been handled, please contact us at support@lunascreens.com.

If we cannot resolve your complaint to your satisfaction, you have the right to contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or your local European Data Protection Authority.