Privacy Policy

Effective Date: 05/04/2026

Last Updated: 05/04/2026

1. Introduction

Lunar Hub FZ LLC (“we”, “our”, or “us”) operates the lunarhub.co website and the postiz.lunarhub.co application. This Privacy Policy explains how we handle personal data when individuals access these sites, use our services, or communicate with us. The United Arab Emirates has enacted the Personal Data Protection Law (PDPL), which applies to data controllers and processors within the UAE and entities outside the UAE that process personal data relating to UAE residents . The law requires organizations to obtain explicit consent, ensure data accuracy, and protect personal data from unauthorized access or breaches . Where applicable, we also align with international standards such as the EU General Data Protection Regulation (GDPR). Our goal is to provide clear information about the data we collect, how we use it, and the choices available to you.

2. Scope of This Policy

This Privacy Policy applies to all individuals and organizations who interact with Lunar Hub’s digital properties, services, and communications. It covers visitors to our websites, clients engaging with our digital agency services, registered users and administrators of the Postiz platform, and anyone who interacts with our marketing communications. This includes interactions via desktop, mobile, or other devices. The policy applies regardless of whether the processing takes place within the UAE or elsewhere; the PDPL’s scope covers entities inside and outside the UAE if they process personal data relating to UAE residents .

3. Information We Collect

Personal Data You Provide

We collect personal data when you voluntarily submit it through forms, sign‑ups, support requests, or when you contract for our services. This may include your name, email address, phone number, company name, billing details, login credentials, and any information you provide in correspondence with us. When you use Postiz to manage social media content, we collect the information necessary to create an account and store scheduled posts and settings.

Data Collected Automatically

Our websites and the Postiz platform collect certain information automatically through cookies and similar technologies. This includes IP addresses, device and browser characteristics, pages visited, and session information. Such data helps us understand how visitors use our websites and services, improve performance, and maintain security. We do not build rich profiles or track individuals beyond what is necessary to provide our services and improve our offerings.

4. How We Use Your Data

We process personal data for several purposes consistent with our business activities and legal obligations. This includes providing and managing our services; operating the Postiz platform; processing payments and invoices; communicating with you about account updates, service changes, promotions, and support issues; improving website performance and user experience; complying with our legal obligations; and protecting our websites, services, and users against fraud and security threats. We rely on lawful bases such as consent, contractual necessity, and legitimate interests when processing personal data.

5. Cookies and Tracking Technologies

Cookies and similar tracking technologies help our websites function and enable analytics and marketing features. Under the PDPL, any website that tracks visitors using cookies must obtain user consent before placing those cookies . Our websites use essential cookies necessary for operation and non‑essential cookies for analytics and marketing. We display a cookie banner to inform visitors about non‑essential cookies and provide an option to accept or decline. You can also manage cookies through your browser settings. Refusing non‑essential cookies may affect some features, but basic functionality remains available.

6. Data Sharing and Third Parties

We share personal data only with service providers and partners who need it to perform tasks on our behalf. These partners may include hosting and cloud providers, payment processors, analytics providers, marketing platforms, and customer relationship management tools. We do not sell personal data to third parties. If we transfer personal data outside the UAE, we do so in accordance with the PDPL’s requirements. The PDPL limits international transfers of personal data and requires that the UAE Data Office approve certain territories that offer adequate protection . When we engage third‑party processors outside the UAE, we implement appropriate safeguards, such as contractual clauses, to ensure equivalent protection for your data.

7. Data Storage and Security

We maintain technical and organizational measures to protect personal data against unauthorized access, accidental loss, or destruction. The PDPL requires controllers and processors to implement sufficient security measures to preserve confidentiality and privacy . Our security program includes encryption, access controls, secure development practices, and regular security assessments. We limit access to personal data to authorized personnel and monitor our systems for potential vulnerabilities. Although we strive to safeguard data, no system can be guaranteed as completely secure, so we encourage users to protect their own credentials and contact us if they suspect any security issues.

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described in this policy, comply with legal and regulatory requirements, resolve disputes, and enforce our agreements. The retention period may vary depending on the type of data, the nature of our relationship with you, and our legal obligations. When personal data is no longer required, we delete or anonymize it in a manner that cannot be reconstructed or linked back to individuals.

9. Your Rights

Under the PDPL and, where applicable, other data protection laws, individuals have several rights regarding their personal data. These rights include:

• Access: You may request access to personal data we hold about you, including information about how we process it .

• Rectification: You may ask us to correct inaccurate or incomplete personal data .

• Erasure: Under certain circumstances, you may request deletion of your personal data, such as when the data is no longer needed or when you withdraw consent .

• Restriction of processing: You may request that we restrict processing of your data in specific situations .

• Data portability: You can request a copy of your personal data in a structured, commonly used format and ask us to transfer it to another service provider .

• Object: You may object to the processing of your personal data on grounds relating to your particular situation, especially when processing is based on legitimate interests .

• Withdraw consent: When processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before the withdrawal .

• Not be subject to automated decisions: You have the right to request human review of decisions made solely by automated means that affect you .

• Lodge a complaint: You may file a complaint with the UAE Data Office if you believe we have violated the PDPL .

To exercise any of these rights, please contact us via the details provided below. We may require verification of your identity before responding to certain requests and will respond within the time frame required by applicable law.

10. International Data Transfers

Personal data may be transferred to and stored on servers located outside your country. The PDPL imposes limitations on transferring personal data outside the UAE and requires approval of certain jurisdictions that offer adequate protection . When we transfer personal data internationally, we ensure that appropriate safeguards are in place, such as standard contractual clauses or other lawful mechanisms, to protect your data and comply with applicable laws. We may also conduct risk assessments to verify that the recipient country’s data protection measures meet the PDPL’s standards.

11. Postiz Platform

When you register for and use the Postiz platform (postiz.lunarhub.co), we collect account information (such as username and email), preferences, and any content you schedule through the platform. We use this information solely to operate and maintain the Postiz service, including scheduling posts, connecting to social media APIs, and managing your content. We do not access or reuse your social media content for any purpose other than delivering the service. If you connect third‑party services (e.g., Meta, LinkedIn, Google), their privacy policies govern the data transferred via their APIs. You remain responsible for ensuring that your use of Postiz complies with the terms of your social media platforms.

12. Marketing Communications

We may send you marketing communications about our products or services if you have given your consent or if you are an existing client. You can opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us directly. We will respect your choice and update your preferences promptly. Opting out of marketing messages does not affect transactional or service‑related communications, such as billing notifications and support messages.

13. Data Breaches

Article 9 of the PDPL requires controllers to report personal data breaches to the UAE Data Office as soon as they become aware of an infringement or breach that compromises privacy or confidentiality . In the event of a data breach, we will investigate promptly, take appropriate measures to contain and remedy the breach, and notify affected individuals and the authorities when required. We maintain incident response procedures and regularly review them to ensure timely detection, reporting, and mitigation of data breaches.

14. Third‑Party Links

Our websites and platform may contain links to third‑party sites or services that are not controlled by Lunar Hub. We provide these links for convenience and are not responsible for the content or privacy practices of those external sites. We encourage you to review the privacy policies of any third‑party websites you visit to understand how they collect and use your information.

15. Changes to This Policy

We may update this Privacy Policy to reflect changes in laws, our services, or how we process personal data. When we make significant changes, we will post a prominent notice on our websites and update the effective date at the top of this policy. If required by law, we will seek your consent for material changes. We encourage you to review this policy periodically to stay informed about how we protect your privacy.

16. Contact Information

If you have any questions, requests, or concerns regarding this Privacy Policy or how we process personal data, please contact us at:

Lunar Hub FZ LLC

Website: https://lunarhub.co

Email: [email protected]

We will respond as soon as possible and in accordance with applicable legal requirements.