Privacy Policy

Luma Tarot · Last updated: July 2026

This Privacy Policy explains what information Luma Tarot ("Luma," "we," "us," "our") collects, how we use and protect it, and your choices. It covers both (1) people who watch our streams and order readings, and (2) the handling of data from social accounts (such as TikTok and YouTube) that we connect to in order to publish our own content. By using our service or connecting an account, you agree to this policy. We keep data collection to the minimum needed to run the service, and we do not sell your personal information.

1. Information from viewers and customers

• Live-chat messages: When you type a name and question in a live chat, it is public on that platform (YouTube, TikTok, Twitch, Kick) and read aloud on stream. Please don't share sensitive personal information you don't want to be public.
• Private readings (Ko-fi): When you order a private reading, our payment partner Ko-fi shares your name, the question you write, and your email so we can create and deliver your reading. We use these only to fulfill your order.
• Payments: Payments are processed by third parties (YouTube Super Chat, Ko-fi). We do not receive or store your card, bank, or full payment details.
• Website: This site is static and does not set tracking cookies, run ads, or require an account.

2. Data from connected social accounts (TikTok, YouTube, etc.)

• What we access: Basic account/profile information (such as the account's user ID, username, and avatar) needed to identify the account and enable posting, obtained via scopes such as user.info.basic.
• What we do with it: We use it solely to publish Luma Tarot's own videos to that account (via video.publish / video.upload), including setting the caption and the required AI-generated-content (AIGC) label. We do not post anything other than Luma Tarot's own content.
• Tokens: We store the OAuth access and refresh tokens that keep the connection active. They are stored securely on our server with restricted access and are used only to post on the connected account's behalf.
• What we do NOT do: We do not sell, rent, trade, or share this data with any third party; we do not use it for advertising, profiling, or any purpose beyond publishing our content; and we do not access private messages, followers' personal data, or anything beyond the scopes listed above.
• Platform compliance: Our access to and use of information obtained through the TikTok API adheres to the TikTok Developer Terms of Service and TikTok's policies. Likewise for any other platform API we use. We will not retain, use, or disclose platform data except as permitted by that platform and this policy.
• Revoking access: The account owner can revoke our access at any time from the platform's settings (on TikTok: Settings and privacy → Security & permissions → Manage app permissions). Revoking immediately ends our access, and you may also ask us to delete any stored tokens or data (see §5).

3. How we use information

Solely to provide, deliver, and operate the service — creating and delivering readings, responding to you, and publishing Luma Tarot's own content to its connected accounts. We do not use your information for advertising and we do not sell it.

4. Data security

We use reasonable technical and organizational measures to protect information, including encrypted connections (HTTPS), restricted server access, and storing API tokens in protected locations used only by the posting service. No method of transmission or storage is 100% secure, but we work to safeguard your data.

5. Data retention and deletion

Private-reading details (name, question, email) are kept only as long as needed to deliver your reading and handle follow-up, then removed. Connected-account tokens are kept only while the connection is active and are deleted when access is revoked or on request. Public chat messages persist on the hosting platform under that platform's own policies, not ours. To request deletion of any data we hold about you, contact us (see §7).

6. Your rights

Subject to applicable law (including GDPR and CCPA where they apply), you may request to access, correct, or delete the personal information we hold about you, withdraw consent, or revoke a connected account's access. To exercise these rights, contact us using the details below; we will respond within a reasonable time.

7. Contact

For any privacy question, data-access, or deletion request, contact us at privacy@luma-tarot.com or via our Ko-fi page.

8. Children

The service is intended for adults (18+) and is not directed at children. We do not knowingly collect information from anyone under 18.

9. Changes to this policy

We may update this policy from time to time; the "Last updated" date above will change. Continued use after an update means you accept it.