Privacy Policy

Last updated: January 15, 2025

Your privacy is our priority. Learn how we protect your information and maintain the highest standards of data security.

1. Introduction

Belomar LLC ("Company", "we", "us", or "our"), doing business as Luna AI, provider of Luna AI (the "Service"), is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI-powered virtual answering service for dental and medical practices. Our Service includes advanced features such as HIPAA-compliant voice processing, automated appointment booking, practice management system integrations, and intelligent lead capture. We've designed this policy to help you understand our practices and to inform you about your privacy rights and choices. Our Service can be accessed at https://lunaai.com. By accessing or using our Service, you agree to this Privacy Policy and our Terms of Service. If you do not agree with any part of these terms, please do not use our Service.

2. Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for You to access our Service or parts of our Service.
  • Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to Belomar LLC, doing business as Luna AI, located in Florida, United States.
  • Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
  • Country refers to: Florida, United States
  • Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
  • Personal Data is any information that relates to an identified or identifiable individual. This may be subject to various state privacy laws including but not limited to CCPA/CPRA for California residents.
  • Protected Health Information (PHI) means individually identifiable health information that is transmitted or maintained in any form or medium by a Covered Entity or Business Associate, subject to HIPAA regulations.
  • Service refers to Luna AI's AI-powered virtual answering service, including voice processing, appointment booking, practice management integrations, and lead capture features.
  • Service Provider means any natural or legal person who processes data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service.
  • State Privacy Laws refers to various state-specific privacy regulations that may apply to the processing of Your personal information, including but not limited to the Florida Information Protection Act, California Consumer Privacy Act (CCPA), and other applicable state privacy laws.
  • Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
  • Voice Data refers to audio recordings, transcripts, and related metadata from calls handled by our AI answering service.
  • Website refers to Luna AI, accessible from https://lunaai.com
  • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

3. Information We Collect

Personal Information

When you use our Service, we collect information that can identify you ("Personal Information"), which may include:

  • Contact Information: We collect basic details such as your name, email address, phone number, and business address when you register for our Service or request information about our offerings.
  • Practice Information: We gather information about your dental or medical practice, including operational hours, staff details, scheduling preferences, practice management systems in use, and integration configurations for systems like OpenDental, Dentrix, Eaglesoft, and CareStack.
  • Voice Data and Communications: Our Service records and processes:
    • Audio recordings of calls handled by our AI answering service
    • Call transcripts and conversation logs
    • Call metadata (time, duration, participants)
    • Patient communication preferences and history
  • Payment Information: For billing purposes, we collect payment details through our secure payment processors. We do not store complete credit card information on our servers.

Healthcare-Related Information

As a service provider to dental and medical practices, we may process Protected Health Information (PHI) as defined by HIPAA. This includes:

  • Patient appointment information
  • Basic patient contact details
  • Communication records
  • Other health-related information shared during calls

We handle all PHI in accordance with HIPAA requirements and maintain appropriate Business Associate Agreements (BAAs) with our practice clients.

Technical Information

Our Service automatically collects certain technical information about how you access and use our Service, including:

  • Device Information: The type of device, operating system, and browser you use
  • Usage Details: How you interact with our Service, including features used and time spent
  • Log Data: IP addresses, access times, error logs, and performance data
  • Location Information: General location based on IP address or timezone settings

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and collect usage data. These technologies help us:

  • Remember your preferences and settings
  • Maintain your session security
  • Understand how you use our Service
  • Improve our features and performance

You can control cookie settings through your browser preferences. However, disabling certain cookies may limit your ability to use some features of our Service.

4. How We Use Your Information

Primary Uses

We use the information we collect to:

  1. Provide and Operate our Service
    • Process incoming calls through our AI answering service
    • Manage appointments and schedules
    • Facilitate practice-patient communications
    • Maintain and improve our AI systems
  2. Improve and Personalize the User Experience
    • Customize the Service to your preferences
    • Analyze usage patterns to enhance features
    • Train our AI models using anonymized data
    • Develop new capabilities and services
  3. Communicate with You
    • Send service updates and notifications
    • Provide technical support
    • Respond to your inquiries
    • Share important account information
  4. Maintain Security and Compliance
    • Protect against unauthorized access
    • Ensure HIPAA compliance
    • Meet regulatory requirements
    • Prevent and detect fraud

5. Information Sharing and Disclosure

Service Providers

We work with trusted third-party service providers who assist us in operating our Service, conducting our business, or serving our users. These partners may have access to your information only to perform these tasks on our behalf and are contractually obligated to protect your information. Our service providers include:

  • Cloud infrastructure providers
  • Voice and telephony services
  • Practice management system integrations
  • Payment processors
  • Analytics services

Healthcare Information Sharing

As a Business Associate under HIPAA, we handle Protected Health Information (PHI) with the utmost care. We only share PHI:

  • As authorized by your Business Associate Agreement
  • When required by law
  • With your explicit permission
  • For providing our contracted services

We maintain signed Business Associate Agreements (BAAs) with all relevant service providers who may have access to PHI.

Legal Requirements

We may disclose your information if required to do so by law or if we believe such action is necessary to:

  • Comply with legal obligations
  • Protect our rights, property, or safety
  • Protect the personal safety of users or the public
  • Defend against legal claims

Business Transfers

If our company is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website of any change in ownership or uses of your information.

6. Data Security and Protection

Security Measures

We implement comprehensive security measures to protect your information, including:

  • End-to-end encryption for data transmission
  • Secure cloud infrastructure with access controls
  • Regular security audits and assessments
  • Employee training on security and privacy
  • Incident response procedures
  • Continuous monitoring systems

Data Storage and Retention

We retain your information only as long as necessary to:

  • Provide our services
  • Comply with legal obligations
  • Resolve disputes
  • Enforce our agreements

For healthcare-related information, we follow HIPAA retention requirements and your Business Associate Agreement terms.

7. Your Privacy Rights

General Rights

All users have the right to:

  • Access their personal information
  • Correct inaccurate data
  • Request deletion of their information
  • Opt-out of certain data sharing
  • Receive their data in a portable format

State-Specific Privacy Rights

For Florida Residents

As our company is based in Florida, we comply with all applicable Florida privacy and data protection laws, including the Florida Information Protection Act.

For California Residents

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have additional rights, including:

  • The right to know what personal information is collected
  • The right to delete personal information
  • The right to opt-out of the sale of personal information
  • The right to non-discrimination for exercising these rights

To exercise your California privacy rights, please contact us at privacy@lunaai.com.

Healthcare Privacy Rights

As a Business Associate under HIPAA, we respect and protect your rights regarding healthcare information, including:

  • The right to access PHI
  • The right to request amendments
  • The right to receive an accounting of disclosures
  • The right to request restrictions
  • The right to confidential communications

8. Third-Party Services and Integrations

Practice Management Systems

Our Service may integrate with various dental and medical practice management systems to provide seamless appointment scheduling and management. These integrations are implemented with appropriate security measures and in compliance with HIPAA requirements.

Links to Other Websites

Our Service may contain links to other websites not operated by us. We are not responsible for the privacy practices of these third-party websites. We encourage you to review their privacy policies before providing any personal information.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Sending an email notification to the primary contact on your account
  • Providing notice through our Service

The updated Privacy Policy will be effective immediately upon posting unless otherwise stated.

10. Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Belomar LLC (DBA Luna AI)
Florida, United States

Website: https://lunaai.com