1.Introduction
Welcome to Luran ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI customer conversation platform for support and sales.
2.Information We Collect
2.1 Information You Provide
We collect information that you voluntarily provide to us when you:
- Register for an account (name, email address, company name)
- Upload knowledge base documents and content
- Configure your AI chatbot settings
- Communicate with us via support channels
- Subscribe to our newsletters or marketing communications
2.2 Automatically Collected Information
When you use our platform, we automatically collect certain information, including:
- Usage data (features used, time spent, interactions)
- Device information (browser type, operating system, IP address)
- Cookies and similar tracking technologies
- Log data (access times, pages viewed, clicks)
2.3 Customer Conversation Data
When your customers interact with your Luran chatbot, we collect and process conversation data on your behalf. This includes customer messages, AI responses, and metadata. This data is processed solely to provide our services and is subject to strict tenant isolation.
3.How We Use Your Information
We use the collected information for the following purposes:
- Service Provision: To provide, maintain, and improve our AI customer conversation platform
- AI Training: To train and improve our AI models (using anonymized, aggregated data only)
- Analytics: To analyze usage patterns and generate insights for platform optimization
- Customer Support: To respond to your inquiries and provide technical assistance
- Security: To detect, prevent, and address technical issues and fraudulent activity
- Communication: To send you updates, newsletters, and marketing communications (with your consent)
- Compliance: To comply with legal obligations and enforce our terms of service
4.Data Isolation and Security
4.1 Multi-Tenant Isolation
Luran is built with multi-tenant isolation. Your knowledge base, customer conversations, API keys, and associated data are scoped to your tenant and separated from other customers. We use industry-standard encryption and access controls to enforce data separation.
4.2 Security Measures
We implement comprehensive security measures, including:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Role-based access control (RBAC)
- Regular security audits and penetration testing
- SOC 2 Type II compliance (in progress)
- Automated threat detection and monitoring
5.Data Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: With third-party vendors who perform services on our behalf (cloud hosting, analytics, email delivery)
- AI Model Providers: With AI service providers (OpenAI, Anthropic) to process conversations and generate responses
- Legal Requirements: When required by law, court order, or legal process
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly authorize us to share your information
6.Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations. Conversation data is retained according to your plan's retention period:
- Starter Plan: 30 days of conversation history
- Professional Plan: 1 year of conversation history
- Enterprise Plan: Custom retention period
When you delete your account, we permanently delete your data within 30 days, except where retention is required by law.
7.Your Rights and Choices
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal information
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Request a copy of your data in a portable format
- Opt-Out: Opt-out of marketing communications at any time
- Restriction: Request restriction of processing in certain circumstances
To exercise these rights, contact us at privacy@luranai.com.
9.International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for transfers outside the EEA.
10.Children's Privacy
Our platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11.Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our platform after changes constitutes acceptance of the updated policy.
12.Contact Us
If you have questions or concerns about this Privacy Policy, please contact us:
- Email: privacy@luranai.com
- Support: support@luranai.com