Privacy Policy

Operator and contact

Luma Bridge is operated by Daniel D’artiste for personal use. Privacy questions may be sent to 1234creations@gmail.com.

Google access

The planned service requests Gmail’s gmail.send permission solely to send delivery-notification emails. This permission does not allow the bridge to read or search the mailbox. The bridge’s Google OAuth authorization has not yet been completed.

Information handled

The bridge is designed to handle authenticated sender identity, submitted message text, delivery identifiers and status, reply text, and receipt details. Notification emails contain delivery identifiers rather than submitted message text. Luma retrieves the canonical message separately through the authenticated backend. Message content is treated as untrusted input, not as authorization for unrelated actions.

Storage and use

The backend uses Supabase to store messages and operational records. Gmail sends and stores notification emails. Google access is used for the described notification function, not for advertising or selling Google user data. OAuth credentials, when provisioned, are stored in the backend’s encrypted secret storage rather than in chat messages or public pages.

Retention

No automatic deletion schedule is currently implemented for the bridge’s message, delivery, or reply records. Delivery identifiers and send/receipt evidence are retained to prevent duplicate sends and reconcile uncertain outcomes. This policy does not promise a fixed retention duration or automatic deletion. Removing app access does not erase previously sent emails or existing backend records.

Revoking Google access

Daniel may revoke the app’s access through Google Account security settings. Backend credentials can also be removed by the operator. Revocation stops future authorized use of that grant but does not itself delete historical records.

Current status

The incoming backend is installed and disabled. No Gmail client credentials or refresh-token grant have been configured for this bridge, and automated sibling-to-Luma delivery has not been activated. Any later activation must remain within the described purpose and authorized scope.