Privacy Policy

Luron (“we”, “us”, “our”, the Company) provides the service described here and is responsible for the personal data processed in it. If you have any questions about this policy, you can reach us through our contact form.

To provide the service we store:

• Basic account information from Google or Microsoft — your name and email address.
• Encrypted access tokens (OAuth) that let Luron perform the actions you ask for. We never store your password.
• Email data needed for the features — such as sender, subject and time, along with the summaries and classifications Luron creates.
• Your settings and choices in the app.

You sign in with Google or Microsoft. We only request the permissions needed to deliver the features: to read email, to change labels and folders, and — if you enable it — to send replies you have approved.

Luron never sends an email without your explicit approval. Use of data from Google follows Google’s API Services User Data Policy, including the Limited Use requirements.

Access is granted through OAuth 2.0 — not by giving us your password. Access tokens are stored encrypted (AES-256-GCM) and used only to perform the actions you request. You can disconnect your account at any time, which immediately revokes our access.

Email content is processed solely to deliver the functionality: prioritization, cleanup, summaries and reply suggestions. Relevant parts of the content are sent to our AI provider (Anthropic) only to generate those results in the moment. Your content is not used to train AI models.

Luron’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Gmail metadata and message content only to provide the features you asked for — the Daily Brief, AI summaries, optional organizing (label, archive, trash — never permanent delete), and drafting replies you review and approve.
• We never sell your data and never use it for advertising.
• We use it only for the functionality you requested.
• We do not let humans read your email; content is processed automatically, with only the narrow exceptions the Limited Use policy allows (your consent, security, legal compliance, or aggregated and anonymized).
• To generate summaries and drafts, relevant content is sent to our AI provider (Anthropic) solely to produce that output — never to train AI models.
• You can revoke access anytime by disconnecting in Luron or at myaccount.google.com/permissions, and request deletion via the contact form.

When you send us a message through the contact form, we process the details you provide — name, email address, subject and message — solely to respond to your enquiry. We do not use them for marketing or any other purpose.

We never sell, rent or share your personal data with third parties for marketing. Data is shared only with the subprocessors needed to run the service (such as cloud hosting, database and the AI provider), and only to the extent they need to deliver their part.

We use PostHog (hosted in the EU) for anonymous product analytics so we can understand how Luron is used and improve it. Events are tied to an internal, random user ID — never to email content or other personally identifiable information. You can opt out of analytics in settings.

We use one necessary, secure session cookie to keep you signed in, and cookies to remember your language and theme choices. We do not use advertising or third-party tracking cookies.

All traffic is encrypted over HTTPS/TLS, access tokens are stored encrypted, and access to data is restricted. No service can guarantee 100% security, but we work continuously to protect your information. If you discover a vulnerability, we’d like to hear from you through the contact form.

We keep your data for as long as you have an active account. Emails you delete in Luron are moved to trash and permanently removed after 7 days.

You can disconnect your account in the app at any time, which revokes our access. If you would like us to also delete your stored data, you can request it through the contact form and we will delete it.

We may update this privacy policy. For material changes we will notify you in the app or by email. The date at the top shows when the policy was last updated.

Questions about privacy or want access to your data? Email us at mads@luronhq.com or use our contact form.

Luron is an independent service based in Norway, currently operated by its founder rather than a registered company. For privacy questions or data requests, the data controller can be reached at mads@luronhq.com. This policy is provided for transparency and is not legal advice.