Who we are
Luna Mantra is operated by a Limited Liability Partnership registered in India ("we", "us", "our"). Our full legal name, registered address, and other registration details are available on request. For privacy questions or to exercise your rights under this policy, email help@lunamantra.com.
What we collect
We collect the minimum information needed to deliver our products and run the site.
- Email address — when you request a free download, request a magic-link sign-in, subscribe to the Luna Letter, purchase a digital product, or subscribe to the Inner Court.
- Library activity — which products and bundles you have access to, when you claimed them, and (for purchases) the order id from our payment processor.
- Subscription status — for members of the Inner Court, whether your subscription is active, the most recent billing period, and the customer id from our payment processor.
- Session data — when you sign in, we record a session in our database and set a cookie so the site recognises you on that device for a limited time. The cookie's value is a random identifier; it does not contain your email or any personal data.
- Security/audit log — payment notifications from our payment processor and our own sign-in events are recorded in an audit log so we can investigate disputes, fraud, and abuse. The log includes your email and the relevant event details.
- Analytics and marketing data — when you browse the site, third-party tools may set cookies or similar identifiers to help us understand how the site is used and to reach people who may be interested in our work. These may include page views, device and browser information, approximate location derived from your IP address, and interactions with the site.
Why we collect it (legal bases)
We rely on the following legal bases under the EU/UK GDPR and the Digital Personal Data Protection Act, 2023 (India):
- Performance of a contract — to deliver the products you purchase and to provide access to your personal library.
- Legitimate interests — to keep the site secure, prevent fraud, investigate disputes, and improve the service. We balance this against your interests; you can object at any time.
- Consent — for the Luna Letter newsletter and for any other communication you opt into. You can withdraw consent at any time by clicking "unsubscribe" in any newsletter or by emailing us.
- Legal obligation — where we are required to retain records (e.g. for tax or chargeback investigation).
Who else handles your data (subprocessors)
We use the following service providers. Each may hold some of your personal data on our behalf, under their own data-protection terms:
- Cloudflare, Inc.
- Polar Software, Inc. ("Polar") — our Merchant of Record (see Terms of Service).
- Resend.com
- Loops.so
- Google LLC
- Microsoft Corporation
- Meta Platforms, Inc.
International transfers
Some of our subprocessors are based outside India, the EEA, and the UK. Where personal data is transferred internationally, we rely on the subprocessor's own appropriate safeguards (Standard Contractual Clauses, Data Processing Addenda, or equivalent). You can ask us for details by email.
How long we keep it
- Library account (your email + claims) — indefinite while your account exists, so you can return and re-access purchases. You can ask us to delete it at any time.
- Sessions — 24 hours after the last sign-in.
- Sign-in tokens — 60 minutes, then automatically expired.
- Audit log — 24 months. This window covers chargeback timelines and dispute investigation buffers.
- Newsletter list — until you unsubscribe.
- Subscription records — kept by our payment processor for the periods their own retention policy requires (typically years, for tax and chargeback reasons).
Your rights
You can ask us to:
- Access the personal data we hold about you (a copy in a readable format).
- Correct any data that is inaccurate.
- Delete your account and the personal data tied to it. After deletion, we keep only minimal records that we are legally required to retain (e.g. tax records held by our payment processor).
- Object to processing carried out under legitimate interests.
- Withdraw consent for marketing emails (one-click unsubscribe in every newsletter).
- Receive a portable copy of the data you provided.
To exercise any right, email help@lunamantra.com from the address on file. We respond within 30 days.
You also have the right to lodge a complaint with the supervisory authority in your jurisdiction.
Cookies and similar technologies
We use cookies and similar tracking technologies to operate the site, recognise you when you sign in, understand how the site is used, and reach people who may be interested in our work. Some are strictly necessary for the site to function; others are used for analytics and marketing.
Where applicable law requires consent, we ask for it before setting non-essential cookies. You can change your preferences at any time through your browser settings or any consent controls we provide on the site.
We use Microsoft Clarity to understand how the site is used — capturing interactions such as clicks, scrolls, and navigation, and building aggregate heatmaps. We run Clarity in its cookieless mode: it does not set cookies on your device and does not build a persistent profile of you across visits. Sensitive content — including form inputs and the personal details shown on your account and library pages — is masked in your browser before it is sent, so Clarity never receives it.
Children
Our products are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us personal data, email us and we will delete it.
Changes to this policy
We may update this policy when our service or our subprocessors change. The "Last updated" date at the top will reflect the latest revision. Material changes will be flagged on this page; minor wording changes will not.
Contact
Email help@lunamantra.com. We aim to respond within 3 business days; data rights requests are handled within 30 days at the latest.