Privacy Notice

01Data Controller

Luun (hereinafter, "Luun", "we") is the party responsible for processing the personal data you provide through the luun.live website and the scanning app. For any matter related to this notice, write to us at [email protected].

02Data We Collect

We collect only the data strictly necessary to operate the service:

• From organizers: name, email address, and billing details when topping up credits.
• From attendees: name and email address provided when registering for an event.
• Usage data: ticket issuance and validation logs (date, time, and scan status).

03Purposes of Processing

We use your data to create and manage your account, issue and deliver QR tickets, validate access, process payments through our providers, provide support, and, only if you authorize it, send you communications about the service. We do not sell your personal data to third parties.

04Transfers

We share data only with the providers that make the service possible — payment processing (Stripe), cloud infrastructure, and transactional email delivery — under confidentiality agreements and only to the extent necessary. Each event's organizer has access to the record of their own attendees.

05ARCO Rights

You may exercise your ARCO rights — Access, Rectification, Cancellation, and Opposition — and revoke your consent at any time by sending a request to [email protected]. We will respond within a maximum of 20 business days.

06Cookies

We use strictly functional cookies to keep your session and preferences. You can disable them from your browser; some dashboard features may stop working correctly. Cookies that an organizer may enable on their event page are separate and require your permission: see Measurement on Event Pages.

07Measurement on Event Pages

Public event pages may include measurement tools configured by the event organizer, not by Luun. When one is present, the page tells you and loads nothing until you allow it: if you decline, no information is sent to third parties. Your choice is stored per organizer and you can withdraw it at any time from the “Measurement preferences” link at the foot of that page.

The mechanism is Google Tag Manager, from which the organizer may enable their own analytics or advertising services — from Google, Meta or other providers — that set their own cookies and may process your data outside Mexico. For those tools the event organizer is the data controller and their purposes are governed by the organizer’s own privacy notice; Luun only provides the mechanism and the control to accept or reject them. Withdrawing your permission stops any further loading, but does not delete cookies already set: those are cleared from your browser. The rest of the Luun site does not use third-party measurement tools.

08Changes to This Notice

Any changes to this notice will be published on this page along with its update date. We recommend reviewing it periodically.