Legal
Privacy Policy
Last updated: June 17, 2026
1. Introduction
Lunvo cares about protecting your personal data. This policy explains what we collect when you use heylunvo.com (the “Site”), why, and what rights you have under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
2. Data controller
The controller responsible for processing your data is:
ZEPHYR WATCH (SAS)
Le Totem, 16 boulevard Maréchal Lyautey, 38000 Grenoble, France
RCS Grenoble No. 990 210 007
Email: nicolas@heylunvo.com
3. Data we collect
We only collect what you give us and basic, non-identifying usage data:
- Waitlist email: the email address you submit to join the early-access list (required).
- Optional survey answers: if you choose to fill in the short survey: the features you need, your monthly budget range, whether you currently use Mantle Billing, your approximate MRR, and a free-text comment. This step is entirely optional and your spot is saved either way.
- Signup source: a short tag indicating where your signup came from (e.g. which page), used to understand which content brings developers in.
- Aggregate usage data: pages viewed and similar metrics collected in aggregate by our cookieless analytics (see section 8). This does not identify you individually.
We never ask for sensitive data, and we do not buy or enrich your data from third parties.
4. Why we use your data, legal basis and retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Manage the waitlist and email you when V1 launches | Consent (art. 6(1)(a) GDPR) | Until the public launch and for a reasonable period afterwards, or until you ask us to delete your data, whichever comes first. |
| Understand which features and pricing developers need (optional survey) | Consent (art. 6(1)(a) GDPR) | Same as above; deleted with your waitlist record. |
| Measure and improve the Site (aggregate, cookieless analytics) | Legitimate interest (art. 6(1)(f) GDPR) | Aggregated statistics only; no individual profile is kept. |
| Prevent spam and abuse (anti-bot honeypot, technical logs) | Legitimate interest (art. 6(1)(f) GDPR) | Short-lived technical logs. |
5. Who can access your data
Your data is only shared with the technical service providers (sub-processors) we use to run Lunvo, and only to the extent needed for their service:
| Provider | Location | Role |
|---|---|---|
| Vercel Inc. | United States | Website hosting and cookieless audience analytics. |
| Neon (database), provided via Vercel Postgres | United States | Stores waitlist records (email and optional survey answers). |
| Discord Inc. | United States | Receives an internal notification (including your email) when a new signup happens, so we can follow up. |
We never sell, rent or trade your personal data, and we do not use it for advertising.
6. International data transfers
Some of our providers are located in the United States, so your data may be transferred outside the European Union. These transfers are framed by the European Commission's Standard Contractual Clauses (Decision 2021/914 of 4 June 2021) and appropriate technical and organisational safeguards, to ensure a level of protection consistent with the GDPR.
7. How long we keep your data
We keep your waitlist email and any survey answers until the public launch of Lunvo and for a reasonable period afterwards to keep you informed, or until you ask us to delete them, whichever comes first. You can ask us to remove your data at any time (see section 9).
8. Your rights
Under the GDPR you have the right to: access your data, rectify it, request its erasure, restrict or object to its processing, request data portability, and withdraw your consent at any time (without affecting processing already carried out).
- To exercise these rights, email nicolas@heylunvo.com. We respond within one month (extendable by two months for complex requests, as allowed by art. 12(3) GDPR).
- If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL: www.cnil.fr.
10. Automated decisions and profiling
We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects on you, within the meaning of article 22 of the GDPR.
11. Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration, including HTTPS encryption in transit, access controls and managed, regularly-backed-up infrastructure.
12. Changes to this policy
We may update this Privacy Policy from time to time. The latest version is always the one published on this page, with its update date shown at the top.
13. Contact
For any question about this policy or your personal data:
Email: nicolas@heylunvo.com