Privacy Policy

1. Introduction

Aurora Technologies LLC ("Company," "we," "us," or "our") operates LunarList (lunarlist.ai), an online directory for AI tools and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

By using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described herein, please do not use our Service.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when you:

• Create an account: Name, email address, password, and profile information
• Submit an AI Tool: Tool name, description, website URL, logos, screenshots, contact email, pricing information, and social media links
• Make a purchase: Payment information (processed by Stripe; we do not store full card details)
• Contact us: Any information you include in your messages
• Post reviews or comments: Content of your reviews and associated ratings

2.2 Information Collected Automatically

When you access our Service, we automatically collect:

• Device Information: Browser type, operating system, device type, and unique device identifiers
• Usage Data: Pages visited, time spent on pages, click patterns, and navigation paths
• Log Data: IP address (anonymized/hashed for analytics), access times, and referring URLs
• Cookies and Similar Technologies: See Section 6 for details

2.3 Information from Third Parties

We may receive information from:

• OAuth Providers: When you sign in with Google or GitHub, we receive your name, email, and profile picture
• Payment Processors: Stripe provides us with transaction status and basic billing information

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related information (receipts, confirmations)
• Create and manage your account
• Review and publish AI Tool listings
• Send administrative communications (service updates, security alerts, policy changes)
• Send marketing communications (only if you have opted in)
• Respond to your comments, questions, and support requests
• Monitor and analyze usage trends and preferences
• Detect, prevent, and address technical issues, fraud, and abuse
• Comply with legal obligations
• Enforce our Terms of Service

3.1 Legal Bases for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data based on:

• Contract Performance: To provide services you've requested
• Legitimate Interests: To improve our services, prevent fraud, and ensure security
• Consent: For marketing communications and optional features
• Legal Obligation: To comply with applicable laws

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party vendors who perform services on our behalf, including:

• Neon: Database hosting, authentication, and media storage
• Stripe: Payment processing
• Vercel: Website hosting
• Resend: Transactional and marketing emails (if you opted in)
• Analytics providers: Usage analytics and performance monitoring

4.2 Public Information

Information you submit for public listing (tool names, descriptions, logos, screenshots) is displayed publicly on our Service. Reviews and comments are visible to other users along with your display name.

4.3 Legal Requirements

We may disclose information if required to do so by law or in response to valid requests by public authorities.

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account data: Retained while your account is active and for a reasonable period after deletion
• Listing data: Retained for the lifetime of the listing unless removed
• Transaction records: Retained for 7 years for tax and legal compliance
• Analytics data: Aggregated data may be retained indefinitely
• Consent records: Retained for the duration of consent plus 3 years

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and authentication status
• Remember your preferences and settings
• Analyze how our Service is used
• Measure the effectiveness of our marketing campaigns

Types of Cookies We Use

You can control cookies through your browser settings. Disabling certain cookies may limit your ability to use some features of our Service.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 All Users

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Marketing Opt-out: Unsubscribe from marketing emails at any time

7.2 EEA/UK Residents (GDPR)

• Data Portability: Receive your data in a structured, machine-readable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Lodge Complaint: File a complaint with your local data protection authority

7.3 California Residents (CCPA/CPRA)

• Know: Right to know what personal information we collect and how it's used
• Delete: Right to request deletion of personal information
• Opt-out: Right to opt-out of the "sale" of personal information (we do not sell personal information)
• Non-discrimination: Right not to be discriminated against for exercising privacy rights

To exercise any of these rights, please contact us at [email protected]. We will respond to requests within the timeframes required by applicable law.

8. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication mechanisms
• Regular security assessments and monitoring
• Access controls and employee training
• Secure hosting infrastructure with reputable providers

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8.1 Data Breach Notification

In the event of a security breach that affects your personal information, we will take the following steps:

• Investigate and contain the breach as quickly as possible
• Assess the scope and impact of the breach on affected individuals
• Notify affected users and relevant regulatory authorities as required by applicable law
• Provide information about the breach and steps you can take to protect yourself
• Take remedial measures to prevent similar incidents in the future

Notification Timeline:We will notify affected individuals without unreasonable delay, and in compliance with applicable state and federal laws. For users in states with specific notification timelines (such as California's 30-day requirement), we will comply with those requirements. Generally, we aim to provide notification within 30-60 days of discovering a breach, unless law enforcement requests a delay for investigative purposes.

What Notifications Include: Breach notifications will include: (1) a description of the incident; (2) the types of information involved; (3) steps we are taking in response; (4) steps you can take to protect yourself; and (5) contact information for questions.

For Pennsylvania residents, we comply with the Pennsylvania Breach of Personal Information Notification Act (73 P.S. § 2301 et seq.). For California residents, we comply with California Civil Code § 1798.82.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards such as:

• Standard contractual clauses approved by relevant authorities
• Data processing agreements with our service providers
• Compliance with applicable data transfer frameworks

10. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 18, please contact us.

11. Third-Party Links

Our Service contains links to third-party websites and AI Tools. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices of third parties.

12. Do Not Track Signals

Some browsers have a "Do Not Track" feature that signals to websites that you do not want your online activity tracked. Our Service does not currently respond to Do Not Track signals, as there is no consistent industry standard for compliance.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may also send you an email notification. Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

For GDPR-related inquiries, you may also contact our Data Protection representative at [email protected].