Last updated: September 2026
At Lunofin, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.
We collect information you provide directly when registering or using our platform, including your name, email address, password hash, and authenticated identity provider tokens (e.g. Google SSO). We also collect technical data such as IP address, browser type, device identifiers, and active session timestamps to maintain session security.
We use the collected information exclusively to: (a) authenticate and manage your user account; (b) calculate and render your portfolio analytics and watchlists; (c) detect, prevent, and mitigate security threats and fraudulent activities; and (d) provide customer support and service updates.
If you reside in the European Economic Area (EEA), you have specific data protection rights under GDPR, including the right to: access the personal data we hold about you; request rectification of inaccurate data; request erasure of your personal data ('right to be forgotten'); object to or restrict processing; and request data portability. To exercise any of these rights, please contact privacy@lunofin.com.
We implement industry-standard cryptographic practices, including salted Argon2id password hashing, RS256 JWT signature verification, TLS encryption in transit, and multi-layered credential isolation to ensure your data remains secure at all times.
We use strictly necessary HTTP-only cookies and local storage to maintain authenticated user sessions and save your visual theme (Dark/Light) and language preferences. We do not sell your personal data or use invasive third-party tracking cookies.
If you have any questions regarding these terms or our privacy practices, please contact our support team at support@lunofin.com.