Privacy policy

This policy explains what Lumi Publisher ("Lumi") accesses when you connect your YouTube channel and other social accounts, how it uses and stores that data, who it is shared with, and how to have it deleted. Last updated 30 October 2026.

Who runs Lumi

Lumi Publisher is run by Thomas Suen in Hong Kong. Contact: owenisas@gmail.com.

Google user data (YouTube)

When you connect a YouTube channel, you sign in with Google and grant Lumi the permission "Manage your YouTube account" (scope https://www.googleapis.com/auth/youtube). With it, Lumi accesses:

• Your channel's ID, title, handle, picture and public totals (subscribers, videos, views), to show which channel is connected and how it is doing.
• Your 50 most recent uploads: title, link, privacy and processing status, and public view, like and comment counts.
• Your playlists' names and IDs, so you can choose a playlist for a video.
• The videos Lumi uploads for you, with the title, description, tags, thumbnail, privacy and schedule you approved.
• An OAuth access token and refresh token that let Lumi act on your channel when you ask it to.

How it is used. Only to provide the features you see and use in Lumi: uploading the videos you approve, setting their details, thumbnails and playlists, and showing you your channel's totals and your uploads' status and counts. Lumi does not read who your subscribers are, other people's comments or your messages.

Who it is shared with. Lumi's assistant runs on OpenAI models. When it works on your channel, for example drafting a title or checking a video's status, the details it needs are sent to OpenAI to produce its reply. Lumi shares Google user data with no one else, and never sells it, uses it for advertising or uses it to train AI or machine-learning models.

How it is stored. On Lumi's server, in files readable only by the server account that runs your workspace.

How long it is kept. Tokens until you disconnect. Channel details are refreshed from YouTube at least every 30 days, and waiting items, per-video settings and log entries older than 30 days are deleted. When you disconnect a channel in Lumi, its YouTube data is deleted straight away. If you remove Lumi in your Google settings instead, Lumi deletes that channel's data within 30 days, once it finds its access gone.

Human access. No person reads your Google user data unless you ask for help with a specific problem, it is needed for security or abuse investigation, or the law requires it.

Limited Use. Lumi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Lumi does not use Google APIs, or data received from them, to create, alter or share non-consensual intimate imagery, including AI-generated imagery.

Revoking access. Disconnecting the channel in Lumi revokes its tokens with Google straight away. You can also remove Lumi at any time in your Google security settings.

Lumi uses YouTube API Services. Google's handling of data is described in the Google Privacy Policy, and using Lumi means agreeing to the YouTube Terms of Service.

Other platforms

For TikTok, Instagram, Facebook Pages, Threads, Pinterest, Bluesky, Mastodon, Telegram and Discord, Lumi accesses only what posting needs:

• the account's name, ID, handle and picture, and for Facebook the Pages you choose;
• a sign-in token, or for Bluesky, Mastodon, Telegram and Discord the app password, token or webhook you create for Lumi;
• the posts Lumi published for you, with their status, link and public counts.

Instagram and Threads fetch media from a web address. While a post is being sent, Lumi makes that one file available at a temporary, unguessable address for the minute it takes, then removes it. Each platform's own privacy policy applies to what is published there.

Content you publish

The videos, pictures, captions and thumbnails you give Lumi are stored on its server until they are published and for as long as you keep them in your workspace, then deleted on request.

Cookies and ads

This website sets no cookies and shows no ads. The Lumi workspace keeps only what it needs to keep you signed in, shows no ads, and lets no third party serve ads or content in it.

Deleting your data

Disconnect an account in Lumi to delete its tokens at once. To have your publishing log and stored media deleted too, email owenisas@gmail.com; it is done within 7 days. Posts already published stay on each platform until you delete them there. See Deleting your data.

Changes

If this policy changes in a way that affects your data, the date above changes and connected users are told before the change applies.