Privacy Policy

This Privacy Policy explains how Paper Fox LLC ("we", "us"), the operator of Lunart (the "Service"), collects, uses and shares personal information, and the choices you have. Questions can be sent to [email protected].

1. Information we collect

Information you give us

Account details: email address, username, password (stored only as a one-way hash) and avatar. If you sign in with a third-party account such as Google, we receive the name, email address and account identifier that you authorise; we never receive that account's password.
Content: the prompts, messages, images, videos and other files you upload, the images and videos you generate, your canvas projects, asset library and showcase submissions.
Support requests: what you send us in tickets or email.

Information created when you pay

Order number, package, amount, currency, payment status and the transaction reference returned by Stripe. Card details are collected and processed by Stripe; we do not receive or store your full card number.

Information collected automatically

IP address, browser type, device time zone, language preference, pages and features used, request times and error logs. We use this to run, secure and fix the Service.
Cookies and local storage: one cookie remembers your language; browser local storage holds your sign-in token and interface preferences. We do not use advertising cookies or third-party tracking scripts.

2. How we use information

To provide the Service: create your account, run your generation requests, store your work and show your credit balance.
To process payments, refunds and chargebacks, and keep the records that tax and accounting law require.
To send service emails: verification codes, password resets, receipts, team invitations and important notices. We do not send marketing email without your consent.
To keep the Service safe: detect fraud and abuse, enforce rate limits, and moderate content. Image prompts are checked automatically before generation by an AI text model; when a prompt is assessed as risky, we keep a record of the prompt, the assessment and the action taken, so we can investigate abuse and handle appeals. Showcase submissions are reviewed by our staff before they are published.
To improve the Service using aggregated statistics, such as how often each model succeeds.
To comply with the law and respond to lawful requests.

We do not sell your personal information and do not share it for cross-context behavioural advertising. We do not use your content to train AI models.

We share information only with the service providers that help us run the Service, and only what each needs:

AI model providers (such as OpenAI, Google, BytePlus and MiniMax, or the API gateways that connect to them): your prompts and reference files are sent to the provider that performs your request, and image prompts are also sent to the text model that performs our automated moderation check. We do not send your name or email address.
Cloudflare: our content delivery and network security provider. Traffic to the Service passes through Cloudflare, which processes your IP address and request details to deliver pages and files and to block attacks.
Backblaze (B2 Cloud Storage): stores the files you upload and the images and videos you generate.
Cloud hosting providers: run our servers and databases.
Stripe: to process payments and refunds.
Email delivery providers: to send service emails.
Other users: only what you choose to publish to the showcase, or what you share inside a team you join (your display name, role and team credit allocation).
Legal reasons: when required by law, subpoena or court order, or to protect the rights and safety of our users or the public.
Business transfers: if Paper Fox LLC is involved in a merger or acquisition, information may be transferred as part of that transaction, subject to this Policy.

4. International transfers

We are based in the United States, and our service providers may process information in the United States and other countries. Where the law of your country requires it, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.

5. Retention

Account information and content are kept while your account exists. You can delete individual projects, assets and conversations at any time.
When you delete your account, we delete or anonymise your personal information after the cooling-off period, except records we must keep by law, such as payment and tax records.
To stop free sign-up credits from being claimed repeatedly, we keep a one-way keyed hash of the email address and sign-in accounts used, which cannot be turned back into the original.
Security and error logs are kept for a limited period, normally no longer than 180 days.
Moderation records (a prompt assessed as risky, the assessment and the action taken) are kept for up to 180 days, then deleted automatically.

6. Security

Passwords are hashed, secrets such as provider keys are encrypted at rest, connections use HTTPS, and sign-in tokens expire and are revoked when you change your password. No system is perfectly secure; if a breach affects your personal information, we will notify you as the law requires.

7. Your rights and choices

Depending on where you live (for example in the European Economic Area, the United Kingdom or California), you may have the right to:

access the personal information we hold about you and get a copy of it;
correct inaccurate information;
delete your information;
object to or restrict certain processing, and withdraw consent where we rely on it;
not be discriminated against for exercising these rights.

You can update most details in account settings and delete your account there. For any other request, email [email protected] from your account email. We will respond within 30 days, or sooner where the law requires. You may also complain to your local data protection authority.

8. Children

The Service is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

9. Changes

We may update this Policy. When we make a material change, we will post the new version in the Service and, where appropriate, ask you to review it. The date below shows when it last changed.

10. Contact

Paper Fox LLC
1209 Mountain Road Pl NE, Ste R
Albuquerque, NM 87110, USA
Email: [email protected]

Last updated: October 29, 2026