Draft for legal review. This page describes how Lunar actually works today, but has not yet been reviewed by Mitten Moon Holdings LLC's counsel and may change before Lunar is listed on the Slack Marketplace.

Privacy policy

Effective September 26, 2026.

Lunar is operated by Mitten Moon Holdings LLC, a Missouri limited liability company ("we", "us"). This policy explains what Lunar collects when your business uses it through Slack and its web app, what we do with it, how long we keep it, and how to have it deleted.

What we collect

  • Slack workspace details: the workspace's ID and name, Lunar's bot identity, the ID of the person who installed Lunar and, once, their time zone.
  • What you send to Lunar: direct messages to Lunar, messages that mention @Lunar, slash commands and their text, and โ€” only if your owner turns it on โ€” messages in a channel they designate for capture.
  • Files you share with Lunar: receipts, invoices, contracts, licences, bank and card statements, spreadsheets, photos and voice notes, and what Lunar reads from them.
  • Data from services you connect: read-only data from accounting, banking, sales, marketing, workspace and HR tools you choose to connect, and documents emailed to your Lunar inbox address.
  • Web app sign-in: when you sign in with Slack, your name, email address and profile picture from Slack.
  • Your business profile: industry, location and competitors, if you enter them for market watching.
  • Operational logs: technical records of timings and errors, which do not contain your messages or documents.

We do not read your Slack channels beyond what is listed above, and Lunar has no access to other people's direct messages.

How we use it

  • To provide Lunar: record what happened in your business, compute figures, answer questions, write your brief and alerts, and keep your compliance calendar.
  • To keep it secure and working: preventing abuse, debugging, and supporting you when you ask.

We do not sell your data, use it for advertising, or use it to train AI models.

AI processing

Lunar sends the content of documents and messages to an AI model provider to read and interpret them. The provider processes it only on our behalf, under commercial terms that do not permit it to train models on that data, and we do not use your data to train models either. AI can make mistakes; Lunar shows the sources of every figure so you can check.

Who else handles it

We share data only with the service providers that help run Lunar, and with services you connect yourself. Those providers are:

  • A cloud hosting provider, which runs Lunar and stores its data.
  • An AI model provider, which reads documents and questions.
  • Slack, where Lunar runs.
  • An email receiving provider, for documents you email to Lunar.
  • A transcription provider, for voice notes, only if that feature is enabled.

Each processes data only on our behalf and under confidentiality and security obligations. We may disclose data if the law requires it, and would tell you unless prohibited.

How long we keep it

  • For as long as Lunar is installed in your workspace or your account is open.
  • After Lunar is uninstalled: its Slack tokens are deleted immediately and everything else 30 days later, unless you reinstall first.
  • When the account owner asks for deletion: immediately.
  • Backups held by our hosting provider expire on their own schedule; operational logs are kept for a limited time and contain no content.
  • After a deletion we keep only a record that it happened, with no personal data.

Your choices and rights

You can ask us to access, correct, export or delete personal data we hold about you, and, depending on where you live (for example under the GDPR or the CCPA), you may have further rights, including to object to or restrict processing. Your business's owner can export records from the web app and delete everything with /lunar delete my data; see deleting your data. Anyone can email support@mittenmoonholdings.com; we answer within 30 days. We do not discriminate against anyone for exercising these rights.

Because your business decides what to share with Lunar, we process that data on its behalf; if you are an employee, your employer may also be able to help.

Security

Data is encrypted in transit and sensitive data is encrypted at rest. See the security overview.

Children

Lunar is a business tool and is not directed to children under 16.

Changes

We will post changes here and change the date above; material changes will also be announced in Lunar.

Contact

Mitten Moon Holdings LLC, Missouri, USA โ€” support@mittenmoonholdings.com.