Directory privacy.

Optional public-website statistics

Across the LunahUP software, marketing and directory websites, Google Analytics loads only after you choose Allow statistics. The choice is shared across these public sections. We send public page views grouped by product and an external referring website origin without its path or search query. Directory visits use a general directory address and title, without provider names, specialties, location filters or search terms.

We do not send form entries, private pages, account details or document uploads through this tag. Automatic form, search and outbound-link measurements are turned off. Advertising personalization and Google signals are not enabled. Analytics cookies are configured for 90 days. Use Website statistics settings at the bottom of a public page to decline or change your choice; declining disables this tag and removes its analytics cookies.

Before you publish

Your ownership email and editing link are private. A saved draft is visible only through your private editing link. Requesting a link does not subscribe you to marketing emails.

When you publish

Your approved name, photo, professional details, specialties, city and state, fees, availability, and selected business contact information become public. Anyone can view or share them, and search engines may index the profile. Your ownership email is never added as a contact address automatically.

Location suggestions

Use my location asks your browser for permission. If permission is already granted, we can suggest your city automatically once per tab. Coordinates are rounded before a request to LunahUP and used only to find a nearby city from our local ZIP reference. This feature does not save coordinates or send them to an external geocoder. Only the selected city and state appear in your search. You can change the location at any time.

Change your mind

You can update a private draft and choose when to republish, or unpublish to remove the listing here immediately. Search engines, screenshots, and downloaded cards may retain earlier copies. Your draft remains saved so you can return to it.

Editing and storage

Editing links expire after 24 hours. The editing browser keeps the link for that tab session; signing out revokes that link. We store provider drafts and published profiles until removal is requested, hashed editing tokens, and hashed email delivery limits. Editing tokens expire after 24 hours; expired tokens and delivery-limit records older than two days are cleared during new link requests. We do not add advertising trackers or cookies to the directory.

LunahUP AI search

LunahUP AI is optional. Selecting Search with LunahUP AI chooses AI processing: your description and public search vocabulary are sent to Google Gemini to suggest filters. Simply browsing, typing a description, or using the manual search does not send a search to AI. Use general preferences; do not enter patient names, contact details, or medical histories. We do not save your description or place it in the results address. The suggested filters appear for review before you choose to see matching profiles. Published profile information supplies the results; AI does not verify provider details or give medical advice. AI search is enabled only for a configured paid Gemini project. Google’s API terms and retention practices apply. To limit usage, the server temporarily holds keyed hashes of connection addresses for up to an hour; raw addresses are not stored by this feature.

Directory activity

New profile views, appointment-page views, contact clicks and email-form opens are counted separately from historical unfiltered activity. Email form opened means the form became available; it is not an email-read receipt. Sent means the mail service accepted the submission; delivered means the receiving mail server accepted it. Internal browser submissions are marked as tests and excluded. Historical data is not reclassified or guessed. We count profile views, appointment page views, and contact link clicks in daily totals visible only to the profile owner. We do not create visitor IDs or store visitor names, IP addresses, referrer URLs, or medical details for these counts. Views can include repeat visits and automated traffic. A click is not a confirmed appointment or proof that an email was sent.

Email inquiries

When a provider enables Email provider, the form sends your name, email, optional phone, subject and message to their chosen business inbox using Amazon SES. The provider can reply to your supplied email address. Use general scheduling or service questions; do not include medical records, diagnoses or insurance numbers. LunahUP does not retain message contents or sender contact details after processing, and does not send a confirmation email to you. Delivery receipts retain only the request reference, provider, source, time and mail-service acceptance status for activity counts. Mail-service acceptance does not prove inbox delivery, a reply or an appointment. Short-lived keyed hashes of sender email addresses limit abuse and expire after two days. Private receiving addresses and editing emails are never displayed by the form. Email transit and the provider’s inbox have their own security and retention practices. This is not an emergency service.

Connecting with a provider

Your custom LunahUP appointment address opens a provider connection page. The provider chooses an appointment page, website, explicitly public business email, or phone. Website links open their own systems and their privacy practices apply there. Appointment destinations configured as email links open your email app; LunahUP does not send or store those mail-app messages. The email inquiry form forwards the contact details and message you choose to send; appointment booking and clinical intake remain with the provider. Use professional information only when creating a profile.

Questions or corrections

To request deletion of your profile data, correct an unauthorized listing, or ask about privacy, contact info@lunahup.com. Include the profile address and use your ownership email when requesting changes to your own listing.

Provider verification

NPI and license details, a legal name, and staff review records are private. NPI checks use the public CMS registry; an NPI alone does not prove licensure. Staff check official licensing sources and review an unexpired government photo ID in a private submitted video or a live, unrecorded meeting. Submit identity images or videos only through the private verification form, never as a public photo or by email. A short video shows your face and original ID and includes a phrase tied to your current submission. Videos are reviewed by staff, not automatically approved. A live original-ID review remains available without retaining a copy. Identity images and videos are encrypted with a separate key, visible only to authorized reviewers, and removed after a decision or after 14 days. Copies in encrypted backups follow backup retention. We retain review outcomes, source links, dates and access records, not extracted government ID numbers or biometrics. A verified badge applies to the reviewed profile and expires within 90 days or at license expiry, whichever comes first. Each clinician is reviewed separately. Existing listings may await review and have no verified badge. A review is not a guarantee of clinical quality or appointment availability. Contact us to request removal of private verification records.