Privacy Policy

1. Introduction

This Privacy Policy describes how Enlune ("we," "us," or "our") collects, uses, and shares your information when you use our website and services.

We are committed to protecting your privacy and ensuring your personal data is handled responsibly and in compliance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and other international privacy laws.

2. Business Information

The service is operated by:

Simon Adam – PFA (sole proprietor)
Cluj-Napoca, Str. Fagului 46A, Romania
Email: contact@enlune.com

3. Information We Collect

• Personal Information
  • Email address
  • Full name
• User Content
  • Notes that you create and save in Enlune
  • AI chat messages, which may include content from your notes
• Usage & Technical Data
  • Device type, IP address, browser type, operating system, the data your browser sends to Enlune.
  • Log data and usage information (collected via Vercel Analytics)
• Cookies
  • We only use essential session cookies for authentication and account security.
  • We do not use cookies for advertising, analytics, or cross-site tracking.

4. How We Collect Information

• Account Data: Collected when you sign up through Google login.
• Notes & Messages: Collected when you save notes or interact with the AI chat.
• Analytics Data: Automatically collected via Vercel Analytics.
• Cookies: Set when you log in to maintain authentication.

5. Why We Collect Information & Legal Bases

We collect and process your information for the following purposes and under the following lawful bases (as required by GDPR):

• Provide authentication, account access, and service functionality – Performance of a contract.
• Store and manage your notes and AI chat interactions – Performance of a contract.
• Process AI messages with third-party AI providers to deliver the service – Performance of a contract.
• Monitor performance and improve the service through analytics – Our legitimate interests.
• Communicate with you about important updates or service changes – Legitimate interests or legal obligation.
• Send promotional emails (where permitted by law) – Your consent.

6. How We Share Information

We only share data when necessary to provide the service:

• Third-Party AI Provider: Notes and chat messages are sent to OpenAI, which acts as a data processor on our behalf, to generate AI responses. OpenAI does not store or log your data beyond what is necessary to deliver the requested output.
• Hosting & Analytics: Data is stored in our database (MongoDB) and processed by our hosting and analytics provider (Vercel), both of which act as data processors on our behalf.
• Legal Requirements: We may disclose information if required by law or to protect rights, safety, or prevent fraud.

We do not sell or share your personal data with third parties for advertising or marketing purposes.

7. International Data Transfers

Your notes and AI messages may be processed by service providers located outside the European Economic Area (EEA).

Where data is transferred internationally, we rely on Standard Contractual Clauses (SCCs) and other legally recognized safeguards to ensure your personal information is protected.

8. Data Retention

We retain your information for as long as necessary to provide the service and fulfill the purposes described in this Policy.

When you delete your account or request deletion of your data, we will remove your personal information within a reasonable time. Account data will be fully deleted within 1 year of account closure, unless we are required to retain it for legal obligations.

9. Children's Privacy

Enlune is not directed at children. We do not knowingly collect data from individuals under the minimum legal age required in their country to use online services.

If we become aware that we have collected data from a child without appropriate consent, we will delete it.

10. Sensitive Data

We do not request or require you to provide sensitive personal data (such as health information, financial information, or special category data). However, because Enlune allows you to enter freeform notes and chat messages, we cannot prevent you from submitting such information. If you do so, it will be processed under the same terms as other user content, but we encourage you to avoid entering sensitive data.

11. Your Rights

Depending on your location, you may have certain rights regarding your personal data, including the right to:

• Access, correct, or delete your information
• Request a copy of your data in a portable format
• Restrict or object to certain processing
• Withdraw consent where processing is based on consent

Under the CCPA/CPRA (for California residents), you also have the right to:

• Request to know what categories of personal information we collect and use
• Request deletion of your personal information
• Opt out of the "sale" or "sharing" of personal information (we do not sell or share personal information as defined by CCPA/CPRA)
• Exercise your rights without discrimination

To exercise your rights, contact us at contact@enlune.com.

You also have the right to lodge a complaint with a supervisory authority. In Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP), or you may contact your local data protection authority within the EU.

12. Data Security

We use reasonable technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, or loss.

However, no online system is completely secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When changes are made, we will update the "Last Updated" date above and, where appropriate, notify you by email or through the service.

14. Contact

If you have any questions about this Privacy Policy, please contact us at:

Email: contact@enlune.com