Privacy Policy

Last updated: April 11, 2026

1. Who We Are

awoo.studio is operated from the Netherlands. For privacy questions or to exercise your rights under the GDPR, contact us at legal@lunega.dev.

2. What We Collect

• Account information: Email address, username, and profile data provided through Clerk (our authentication provider)
• Uploaded content: Files you upload and URLs you shorten
• Usage data: Access logs, IP addresses, browser/device info, timestamps
• API tokens: Tokens you generate for programmatic access
• Linked accounts: Discord, Twitch, and YouTube account info if you connect them
• Billing information: If you subscribe to a paid plan, payment details are processed by Stripe and/or RevenueCat. We never see or store your full card number.
• Error and performance data: Technical diagnostics (stack traces, request URL, IP, user-agent) sent to our error monitoring provider when something goes wrong.

3. How We Use It

• To operate the service (store files, redirect URLs, serve content)
• To authenticate you and manage your account
• To process payments and manage subscriptions
• To enforce usage limits and acceptable use policies
• To detect, diagnose and fix bugs and abuse
• To comply with legal obligations

We do not sell your personal data.

4. Lawful Basis for Processing (GDPR)

For users in the EEA/UK, we rely on the following legal bases under Article 6 GDPR:

• Performance of a contract — account creation, file storage, URL shortening, billing, and delivering the features of your plan.
• Legitimate interests — security, abuse prevention, fraud detection, error monitoring, and improving the service. We balance these against your rights.
• Legal obligation — responding to lawful requests, tax/accounting records, and removing illegal content.
• Consent — for optional features such as AI content analysis (Scout) and linking third-party accounts. You can withdraw consent at any time.

5. AI Content Analysis (Scout)

Scout is an opt-in feature that uses AI to analyze your uploaded media (for example, to generate descriptions, tags, or moderation signals). When enabled:

• Selected file content is sent to our AI processing provider (OpenAI) solely to produce the analysis result.
• We do not use your content to train third-party models, and our providers are contractually restricted from doing so.
• Results are stored alongside your file metadata and are deleted when the file is deleted.
• You can disable Scout at any time in your account settings. Existing results can be removed on request.

6. Third-Party Services (Sub-processors)

We use the following third-party services that may process your data on our behalf:

• Clerk — authentication and account management
• Stripe — payment processing for web subscriptions
• RevenueCat — subscription management for mobile (App Store / Play Store) purchases
• Sentry — error monitoring and performance tracing
• OpenAI — AI processing for the optional Scout feature
• Discord, Twitch, YouTube — only if you choose to link these accounts

Each service has its own privacy policy. We share only the minimum data needed for them to function. Some of these providers are based in the United States; transfers outside the EEA take place under the EU Standard Contractual Clauses or an equivalent safeguard.

7. Data Storage & Security

Your files are stored on our infrastructure in the EU. We use HTTPS for all connections and restrict access to authorized systems. We take appropriate technical and organisational measures to protect your data in line with GDPR requirements.

8. Data Retention

• Account data: kept for as long as your account is active. Deleted within 30 days after you close your account, except where we are required to keep it longer (e.g. tax records).
• Uploaded files and short URLs: kept until you delete them or your account is closed. Files in trash are purged automatically.
• Access logs: retained for up to 90 days for security and abuse investigation.
• Error monitoring data (Sentry): retained for up to 90 days.
• Billing records: retained for 7 years to comply with Dutch tax law.

9. Your Rights

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data ("right to be forgotten")
• Restrict or object to certain processing
• Data portability — receive your data in a machine-readable format
• Withdraw consent for optional processing (e.g. Scout, linked accounts)

To exercise these rights, contact us at legal@lunega.dev. You also have the right to lodge a complaint with your local data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens.

10. Cookies & Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising or analytics trackers.

11. Children

The service is not directed at children. You must be at least 16 years old to use it. See our Terms of Service for details.

12. Changes

We may update this policy. We will update the "Last updated" date at the top, and material changes will be announced in-app or by email. Continued use of the service means you accept the updated policy.