1. ABOUT
Lunacy is a vector graphic application developed by Icons8 LLC, a Delaware Company registered at 4023 Kennett Pike #5997, Wilmington, DE, 19807, United States, referred to as "Company," “We,” “Us,” “Our,” or “Data Processor.”
This Privacy Statement and Acceptable Use Policy details and governs how we collect and utilize your data in Lunacy. Please read it carefully.
Our data protection approach follows principles of respecting your privacy, non-interference with your content, and coherence with the provisions of GDPR and relevant data protection laws set worldwide. We aim to deliver excellent design software on transparent terms. Our business model relies on selling paid subscriptions of supporting features such as access to graphic assets, fonts, AI tools, and cloud storage to Lunacy users. We don’t gather behavioral data to market our products sold in Lunacy or for any other purpose that may arise; you can opt-out of all supporting features and products anytime in the ‘Help’ section.
2. SCOPE
This Privacy Statement applies only to personal information collected and processed within Lunacy and not to personal data collected and processed on/in other resources or products Icons8 owns or operates (icons8.com, blog.icons8.com, plugins, etc.).
Refer to our Icons8 Privacy Policy for managing personal information on/in other Icons8 resources and products.
3. PERSONAL INFORMATION LUNACY COLLECTS
This Privacy Statement governs any Lunacy data identifying a natural person, alone or combined with other information.
Information You Provide to Us
Account Information: Creating an Icons8 account requires providing personal details like your name, email address, and photo/avatar. This account is essential for identifying you, determining your plan, and accessing cloud documents. This Statement and our Icons8 Privacy Policy govern your Icons8 account data. However, it's possible to use Lunacy without creating an account, limiting usage to local documents only.
Payment Information: When we sell Lunacy subscriptions, we use third-party applications, such as the Apple App Store and Microsoft Store, and services, such as Stripe, to process your payments. They may collect your name, email, mailing address, payment card details, and billing information. Icons8 doesn't retain this payment information but may store associated details (e.g., payment confirmation, the last four digits of your card, and your country). Lunacy itself doesn't collect or retain any payment information.
Service use information: We collect information you provide to Lunacy to provide services, including personal information such as your interactions with other users and any content you create or upload when using Lunacy.
Customer service information: If you report an issue through Lunacy or interact with our support team, we collect the information you provide for resolution.
Information Collected Automatically (Technical information)
Automatic Data Collection: We collect certain information automatically when you use the Services. This information may include:
Internet protocol (IP) address
Operating system
Device info.
Cookies and similar technologies: In Lunacy, we do not use cookies or other third-party technologies that track users’ activity and behavior.
Information From Other Sources
If you use Lunacy on behalf of an Icons8 customer company (e.g., your employer), that company may provide us with your information so we can provision your account.
4. LEGAL BASIS FOR PROCESSING YOUR INFORMATION
In handling personal information, we rely on the following legal bases:
Contractual Obligation: We use your data to fulfill our agreement. For example, setting up your account requires your details.
Legal Obligation: At times, handling your data is necessary to comply with legal obligations imposed by GDPR and relevant data protection laws set worldwide.
Legitimate Interest: Your information supports our business objectives, such as enhancing our products/services based on your feedback and reporting, preventing financial loss and fraud, and reporting potential criminal activities.
Consent: With your explicit agreement, we may process your data for a specific purpose based on your consent.
5. THE WAY AND PURPOSES WE USE YOUR INFORMATION
Performance of Services: Your submitted data enables us to provide you with the Service and access to all Lunacy features efficiently.
Providing Technical or Other Support: Data may be used to troubleshoot problems related to Lunacy usage, offering the necessary support.
Service Announcements: We will use the provided data, such as emails, to inform you about updates, modifications, policy changes, or agreements that could impact your use of Lunacy.
Promotional Offers and Design-related Communication: We will email promotional materials or design-related information from our blog. However, we provide an option to opt out of receiving such emails upon registration and after registering the Icons8 account.
6. DISCLOSING YOUR INFORMATION TO THIRD PARTIES
We may share any collected personal information with the following categories of third parties for the purposes described below:
Other Users of Lunacy: Collaborating or interacting with others via Lunacy may involve sharing certain information with your collaborators. For example, you can create content containing information about you and grant permission to others to see, share, edit, copy, and download that content based on settings you or your administrator (if applicable) select. Also, some of the collaboration features of Lunacy display some or all of your profile information to other users when you share or interact with specific content. For example, when you comment, we display your profile picture and name next to your comments so that other users with access to the comment know who made it.
The Public: Content can be made publicly available by you or others collaborating on it, and in such cases, any information about you included in such content is also publicly available. You can check at any time whether a particular content is public or private by viewing the content’s settings. Additionally, publishing content in your web profile will publicly share your profile picture and username.
Your Organization and Administrator: If you access Lunacy on behalf of an organization or have your account paid for by another party, We may share information with that organization or paying party upon their request, granting them certain rights over your data.
Disclosures to Protect Us or Others. We may access, preserve, and disclose your associated information to law enforcement bodies, regulatory and government agencies, courts, or other third parties in circumstances including compliance with law enforcement or national security requests, protecting rights or safety, enforcing policies and contracts, collecting owed amounts, preventing financial loss, or addressing suspected or actual illegal activities based on reasonable faith beliefs.
7. HOW WE STORE YOUR INFORMATION
Currently, we have Lunacy servers in the following regions:
Location | Provider |
USA (Virginia) | |
Brazil (São Paulo) | |
Germany (Nuremberg) | |
South Africa (Cape Town) | |
India (Mumbai) | |
China (Hong Kong) | |
Japan (Tokyo) | |
Australia (Sydney) |
Upon the first start, Lunacy automatically selects the server with the optimal latency for your usage. You can choose an alternate server by adjusting your preferences in Help > Region.
These servers store specific user details (such as emails, usernames, and profile pictures) within their respective regions. Additionally, they maintain a cache containing the 50 most recent operations in cloud documents. Important: we do not purposefully read or analyze this cached information in any manner. These servers solely act as conduits for cloud operations, refraining from storing user-generated content or user passwords, as authentication is conducted via Icons8 servers.
User-generated content is stored in secure cloud storages in the following regions with adequate data protection levels:
Location | Provider |
USA, Arizona | |
Netherlands, Amsterdam | |
China, Hong Kong | |
Brazil, Sao Paulo | |
Africa, Capetown | |
India, Mumbai | |
Japan, Tokyo | |
Australia, Sydney |
For private cloud documents (i.e., not shared or publicly published), exclusive access to the content is granted solely to the document owner. We strictly adhere to a policy of non-interference with the content stored in cloud repositories; we neither engage in analysis nor share this content with third parties. Lunacy ensures direct content uploads to the designated cloud storage without intermediaries or additional services.
Additionally, to store and deliver assets exported to the cloud (including those involved in linked design), we use CDN77 as a provider. CDN77 only has access to the data shared by users for this purpose. For full information, please refer to a complete List of Lunacy Subprocessors.
If you prefer not to store your data on third-party servers, there is an option to deploy Lunacy Cloud on a dedicated server. In this scenario, all data will be hosted on your infrastructure, ensuring complete control over its storage and security.
8. HOW WE PROTECT YOUR INFORMATION
We maintain robust security measures to safeguard your personal information from accidental loss, unauthorized access, or misuse. We designed these measures to prevent alterations, unauthorized access, and any potential risks to your data.
If there's a situation where a breach might impact your privacy, we'll promptly notify you as required by the law.
9. YOUR RIGHTS
Regarding your data, you have the following rights:
Information: You have the right to know how your data is processed.
Access: Access your data, including confirmation of whether we process and obtain a copy of your information.
Correction: Request correction of any inaccuracies in your data.
Deletion: Request the deletion of your data. Please note that user-deleted documents and relevant information are available for restitution with a six-month grace period.
Restriction or Objection: Request restriction of or object to our processing of your personal information.Data Portability: Request your data in a structured, commonly used, machine-readable format that is transferable to another controller.
To exercise these rights, please contact us using the details provided below. We may require proof of your identity.
Suppose you believe our processing of your data infringes data protection laws. In that case, you have a legal right to initiate a complaint with a supervisory authority responsible for data protection under Article 77 of the GDPR.
10. UPDATES TO THIS PRIVACY STATEMENT
We may periodically update this Privacy Statement. We will post future changes on this page, and if the changes are significant, we'll also notify you via email within reasonable timescales. Please check this page regularly for any updates or alterations to our Privacy Statement. Unless otherwise specified in the notification, all changes will be effective from the publication date.
11. HOW TO CONTACT US
If you have any comments or inquiries regarding the information in this Privacy Statement, wish to update your data, exercise your rights, reach ‘Data Protection Officer,’ or learn more about dedicated cloud, please email us at support@icons8.com