BotLunar Privacy Policy

Prop Firm Studios runs BotLunar and decides how your account information is used. BotLunar is owned by The Lunar Suite Pvt. Ltd. and Prop Firm Studios. Version 1.0; the effective date is set on publication.

• Address: Mall of Faisalabad, Office No. 27, 2nd Floor, Canal Road, Faisalabad, Pakistan
• Privacy contact: legal@botlunar.com

We hold information in two different roles, and the rules differ for each.

This policy fully covers the first row. Section 4 summarises the second, and our Data Processing Agreement governs it.

This policy applies to botlunar.com, the BotLunar dashboard, the Console, the API and the emails we send. Payments are handled by Paddle, our merchant of record, and Paddle's own privacy notice covers the payment details it collects. Discord's own privacy policy covers your use of Discord itself.

We collect only what we need to run BotLunar, keep it secure and bill for it.

We use your information to provide BotLunar, keep it safe and meet our legal duties. We never sell personal information.

Automated checks. Our trial protection may refuse a free trial automatically when it matches an earlier trial. If you think that's wrong, email support@botlunar.com and a person will review it.

For members of your server, you decide what is collected and why; we process it only on your instructions, under our Data Processing Agreement.

What it includes: members' Discord user IDs, usernames, roles and join dates; activity signals used for audience segments (such as new joiners or active members); opt-in records with their basis, wording and time; email addresses captured with consent; replies in your inbox; and records of who unsubscribed.

Your responsibilities as the customer:

• Have a lawful basis for messaging each member, and give members any privacy notice the law requires.
• Use one of the two opt-in methods BotLunar records: the member confirms themselves, or your server's rules screening contains your marketing wording and you accept responsibility for it.
• Never message anyone who has unsubscribed.

Our commitments:

• We never use members' information for our own marketing, never sell it, and never combine one customer's members with another's.
• Unsubscribing works immediately, including for messages already queued.
• We keep a minimal, scrambled record of an unsubscribe while that server could still message the person, so they are never messaged again. It is deleted if they opt back in.

If you are a member and want to see, correct or delete your information, contact the server's owner. If you contact us instead, we will pass your request to them.

When someone on your team presses "Draft a reply" in the inbox, we send only that conversation to our AI provider, Anthropic, to write a suggested reply.

• Anthropic processes it under its commercial terms, which do not allow it to train AI models on this information.
• A draft is never sent automatically. A person on your team reads, edits and sends it.
• Nothing is sent to Anthropic unless someone on your team asks for a draft.
• We record each draft's cost and count, to apply your plan's limits.

Essential cookies run everywhere; analytics and advertising cookies run only on the public website, never in the dashboard or the Console.

Your choice. The first five are essential and always on; blocking them in your browser stops sign-in working.

• In the EU, EEA, UK and Switzerland, Google Analytics, Google Ads and the Meta Pixel load only after you accept them in our cookie banner.
• Elsewhere they load by default, and you can turn them off at any time with "Cookie settings" in the website footer.
• We treat a Global Privacy Control signal from your browser as a request to turn them off.

We share information only with the service providers that run BotLunar for us, and in the few other cases listed below. Each provider has a data processing agreement with us; the current list is also on our public providers page.

The dashboard shows avatars, server icons and bot banners directly from Discord's servers, so Discord sees your IP address when they load.

We may also share information:

• between The Lunar Suite Pvt. Ltd. and Prop Firm Studios, as BotLunar's owners, to run the business;
• when the law requires it, or to protect the rights, safety or property of our customers, members or ourselves;
• with a buyer or successor if BotLunar is sold or merged, under this policy's protections;
• with anyone else, only with your consent.

BotLunar's database and main services run in Frankfurt, Germany, but some providers and our own team are in other countries.

• Our team works from Pakistan and accesses information there to run and support BotLunar, under the security measures in section 10.
• Some providers, such as Anthropic, Sentry, Paddle, Google and Meta, may process information in the United States or elsewhere.
• Where EU or UK law requires it, transfers rely on the European Commission's Standard Contractual Clauses (with the UK addendum), or on an adequacy decision such as the EU to US Data Privacy Framework for certified providers.

You can ask legal@botlunar.com for a copy of the safeguards that apply.

We keep account information while your account is open, and delete it within 30 days of closure (usually within 7), except for the records below.

We use technical and organisational measures suited to the information we hold, though no system can be completely secure.

• All traffic uses HTTPS.
• Bot tokens and two-factor secrets are encrypted; passwords and recovery codes are stored only in hashed form.
• Two-factor sign-in is required for the Console and for owner tools, and sensitive actions ask for the code again.
• Staff access is limited by role, and every sensitive action is recorded in an audit log. Our staff can view or export a customer's information only when needed for support, security, a legal request or an export the customer asked for, and every such view and export is recorded.
• Each customer's information is kept separate, and automated tests check that separation before every release.
• Rate limits protect sign-in, sign-up and the public API.
• Regular backups are kept and tested.

If a breach puts your personal information at risk, we will tell the relevant authority within 72 hours where the law requires it, and tell you without undue delay.

Wherever you live, you can see, export, correct and delete your information, and stop our news emails.

EU and UK. You can also ask us to restrict how we use your information, and you can complain to your local data protection authority.

California. You can ask what we collect, and ask us to delete or correct it. We don't sell your personal information for money. Our website's Google and Meta advertising cookies may count as "sharing" for cross-context behavioural advertising under California law: you can opt out with "Your privacy choices" in the website footer, or with a Global Privacy Control signal. We won't treat you differently for using these rights.

How we respond. Email legal@botlunar.com from your account's email address. We may ask you to confirm your identity, and we reply within one month (45 days for California requests).

Age. BotLunar accounts are for people aged 18 or over, and we don't knowingly collect information from anyone younger for their own account. Customers must not use BotLunar to send financial promotions to members under 18.

Changes. We give at least 30 days' notice of significant changes, by email and in the dashboard, with a summary of what changed. We record which version applied when.

Language. This policy may be translated. If a translation differs from the English version, the English version applies.