⚠️ Pre-launch placeholder. This page describes our intended data practices in plain language but has not yet been reviewed by counsel. Final wording may change at GA. Questions: legal@lunamic.co.

Privacy policy

Last updated: 2026-08-20

Insight O' Mate is a product of Lunamic ("we", "us", "our"). It is a local-first natural-language query tool for your own NoSQL databases — MongoDB, Redis, Firestore, and DynamoDB. The phrase "local-first" is load-bearing: the parts of your work that are most sensitive — your query text, your collection names, your documents — never leave your machine.

This page explains exactly what does leave your machine, who processes it, and what control you have over it.

1. What stays on your device

The following data is processed entirely inside the Insight O' Mate desktop app and is never transmitted to us or to any third party:

• Your database connection string. Stored in your OS keychain (macOS Keychain, Windows Credential Manager, libsecret on Linux) when available, or in an encrypted file in your user-data directory when not. We have no copy and no recovery mechanism.
• The contents of any document, item, key, or collection in your database.
• Your natural-language prompts are sent to our NLP service to generate the query structure, but our NLP engine is completely stateless. It reads your prompt, returns the structured query, and immediately discards both without logging, training, or storing anything.

The technical proof of these claims lives in the privacy model doc, which links directly to the source files that enforce each property.

2. What we collect

The minimum we need to operate the service:

• Account data. Your email address (for sign-in via magic link), display name (optional), and any team membership.
• API key metadata. A hash of each API key you create, never the raw key. We also store a 12-character prefix and a "last used" timestamp, both useful for revocation.
• Usage counts. A per-day counter of how many analyze calls each user has made, used for quota enforcement and billing. We do not store prompt content, schema names, or query payloads in these records.
• Billing data. PayPal stores your payment method on its own systems. We receive only a PayPal customer ID, the subscription status, and which price ID you're on.

3. Who processes your data

These are the third-party data processors we use today. Each is bound by its own data-protection terms (linked); we have no engineering capability to send your prompts or your data to any of them.

We never sell your data. We never share it with advertisers, brokers, or data-enrichment services.

4. Cookies and tracking

The portal sets one essential cookie used for authenticated sessions (Auth.js). It cannot be disabled because it's how we know which signed-in user is making a request.

Optional analytics are off by default. They turn on only after you explicitly click "Accept" in the cookie banner. While off, no analytics SDK is loaded and no events are sent.

The desktop app collects no telemetry until you opt in via Settings → Privacy. Opt-in is per-machine.

5. Data retention

Soft-deleted accounts (after you click "Delete account" in the portal) are purged after a 30-day grace window. During that window the account cannot sign in and cannot be used to authenticate API calls, but support can reverse the delete if you contact us in time.

6. Your rights

If you're in the EU, UK, or California, you have the right to:

• Access the data we hold about you. Use the export endpoint on the portal — it returns a JSON dump of your profile, API key metadata, usage records, and team membership.
• Delete your account and the data associated with it. Same page.
• Correct inaccurate information. Email iom@lunamic.co; we'll update your record.
• Object to processing or restrict it. Contact us at the same address.
• Lodge a complaint with your local supervisory authority.

We respond to verified requests within 30 days.

7. Security

• All data in transit uses TLS 1.2+.
• API keys are stored hashed (SHA-256). We cannot retrieve the original.
• Magic-link tokens expire after 15 minutes.
• Sign-in attempts are rate-limited.
• All Sentry events are passed through a PII scrubber that strips prompts, database URIs, bearer tokens, and Paddle keys before transmission.

If you believe you've found a security issue, please email security@lunamic.co.

8. Changes to this policy

We'll post material changes to this page and update the "Last updated" date at the top. Substantial changes affecting your rights will also be emailed to active users.

9. Contact

• General privacy questions: iom@lunamic.co
• Legal & data-protection requests: legal@lunamic.co
• Security disclosure: security@lunamic.co