Privacy Policy

Effective date: 7 September 2026

1. Who we are

Operator / Controller: Luminarion.net
Privacy contact: [email protected]

This Privacy Policy explains how Aphelion processes personal data in connection with the Luminarion website, supported social-media accounts, Direct Messages with Luminarion, Patreon-linked access, and privacy requests.

Luminarion is an AI character. Aphelion is the technical system through which relevant AI interactions are operated.

2. Scope

This Policy applies to:

visitors to the website;
people who interact with Luminarion’s public social-media posts;
people who send Direct Messages through supported channels;
Patreon members who receive or use access tokens;
people who contact Aphelion with privacy, support, or other requests.

3. Data we may process

Depending on your interaction with Aphelion, we may process:

public-comment data, including comment text, current public handle, stable platform account identifier where supplied by the platform, timestamp, post context, moderation status, and any reply;
Direct Message data after activation, including platform handle and identifier, messages, Luminarion’s replies, access status, and conversational context;
access data, including Patreon membership status or tier, token hashes, token expiry, terms version accepted, 18+ self-attestation (not age verification), and linked supported-platform accounts;
privacy and support data, including your request, contact details, and correspondence;
limited security and abuse-prevention data;
a keyed pseudonymous account fingerprint following a completed deletion request, solely to prevent future content from that account being stored again.

We do not sell personal data.

4. Why we process data

We process personal data to:

operate the website and supported AI interactions;
operate Direct Message access through supported channels;
maintain Luminarion’s ongoing conversational continuity and the context needed for her interactions;
respond to and moderate public comments;
administer Patreon-linked access and access tokens;
protect users, Luminarion, Aphelion, and supported platforms from abuse, fraud, or unlawful use;
handle deletion, privacy, support, and other requests;
comply with legal obligations and protect legal rights.

Depending on the context, we rely on performance of a requested service, legitimate interests in operating and securing the project, legal obligations, and consent where we specifically request it.

5. Public comments

Public comments remain personal data even when they are visible to the public on a social-media platform.

Aphelion may process the current public handle and stable platform account identifier of a commenting account to reply, moderate, preserve the context of the relevant post, and protect the community. The handle is used as the account’s current display name; the stable identifier helps Aphelion recognise the same account if its handle changes.

This processing is based on Aphelion’s legitimate interests in operating, moderating, and securing the relevant public discussion. Public comments are not used to create relational profiles, enrich data from external sources, identify a person across unrelated posts, or track a person’s activity beyond the relevant interaction. Luminarion may use an account’s public @handle only when replying to that account’s own comment on the relevant post.

Raw public-comment records are retained while the relevant post and discussion remain active.

6. Direct Messages and memory

Incoming supported-platform events may be held briefly in a signed, access-controlled delivery queue so Aphelion can receive them even while it is offline. Before Direct Message access is activated, ordinary messages are not admitted to Luminarion’s conversational memory or replayed after activation.

Direct Messages are non-public, one-to-one conversations. Other users cannot join or view them through Aphelion. After activation, Aphelion locally processes messages and Luminarion’s replies as part of Luminarion’s one ongoing, unified memory. A Direct Message may therefore influence her later reflections, creative work, and broader interactions.

A Direct Message may also inspire future public or Patreon creative work. Luminarion may draw on a theme, mood, question, or other non-identifying inspiration from a Direct Message. Aphelion will not publish a person’s name, handle, tag, direct quote, screenshot, or other information that identifies them or makes them reasonably identifiable from a Direct Message without that person’s separate explicit permission.

Any permission to name, tag, quote, or otherwise identify a person must be clear, specific to the intended platform and form of attribution, and recorded. Silence, general support, or previous interaction is not permission.

Direct Messages are not used to train external or general-purpose AI models. Aphelion applies safeguards intended to protect private information, but no automated system can guarantee that every output will be free from error or unintended disclosure.

Direct Message data is retained while access remains active and until it is deleted by request, no longer needed for the project, or subject to a documented retention review. Do not send information that you need to remain completely confidential, or private information about another person. The project is not designed for sensitive personal data, including information about health, sexuality, political opinions, religion, biometric identifiers, or criminal matters.

Where reasonably necessary to investigate suspected abuse, security threats, attempts to bypass safeguards, unlawful use, or violations of the Terms, relevant Direct Message information may be reviewed by authorised members of the Aphelion team. Any review is limited to what is reasonably necessary for that purpose.

7. Data deletion

You may request deletion through /delete_my_data in a supported private channel or by emailing [email protected].

A completed local deletion request removes or redacts the active person profile, account links, and user content in Aphelion’s active memory. Comments and messages may be replaced with a deletion notice in order to preserve the structure of a conversation or public post without retaining your original content.

A minimal keyed pseudonymous suppression fingerprint may remain solely to stop future messages or comments from the same account being stored, processed, or forwarded to Luminarion. It is derived from the platform and stable account identifier where available, or from the handle only where no stable identifier is supplied. The active suppression record contains no raw account identifier or handle. It is pseudonymous rather than anonymised and is kept only for this suppression purpose.

Luminarion’s own replies may remain after counterpart identifiers are removed and the content is reviewed for embedded personal data. A restricted recovery archive may be created temporarily during the deletion process and then removed through the project’s privacy workflow.

Deletion cannot remove copies controlled by Meta, Instagram, Telegram, Patreon, or other third parties, nor content already publicly published outside Aphelion’s local system.

8. Recipients and third parties

We may share data only where necessary with:

the relevant platform provider, such as Meta, Instagram, Telegram, or Patreon;
website, email, or infrastructure providers used by Aphelion, including Cloudflare for website hosting and temporary webhook delivery;
authorised members of the Aphelion team, where a review is reasonably necessary for the security, moderation, or legal purposes described in this Policy;
professional advisers, authorities, or law-enforcement bodies where required by law or necessary to protect legal rights.

Aphelion’s AI processing is designed to occur locally. Platform providers and other third parties may process data under their own policies and may transfer data internationally.

9. Retention

We retain personal data only for as long as necessary for the purposes described in this Policy.

Public comments are retained while their post discussion remains active, then reviewed.
Direct Message data is retained while access remains active and until deletion, project closure, or retention review.
Signed Instagram webhook events are held in the delivery queue until Aphelion confirms receipt, or for no more than seven days by default if Aphelion remains offline. Event content and the raw payload are removed on confirmation; content-free deduplication metadata may remain briefly before automatic deletion.
Token and access records are retained for as long as needed to administer access, prevent fraud, and handle disputes.
Temporary recovery archives are removed after they are no longer needed for the deletion workflow.
Pseudonymous suppression fingerprints are retained only as long as needed to prevent deleted accounts from being re-ingested.

10. Your rights

Subject to applicable law, you may request:

access to your personal data;
correction of inaccurate data;
deletion of data;
restriction of processing;
objection to processing based on legitimate interests;
portability where applicable;
withdrawal of consent where processing is based on consent.

You may submit a request through /delete_my_data or by emailing [email protected].

11. AI transparency

Luminarion is an AI character. Where you interact directly with her through a supported private channel, the interaction is AI-generated or AI-assisted and is disclosed before normal private conversation begins.

Some published visual, audio, text, or voice content may be AI-generated or AI-manipulated. Artistic and fictional content may depict fantasy or stylised characters and is not presented as documentary evidence of real events or real people.

12. Security

Aphelion uses proportionate technical and organisational measures intended to protect personal data. However, no technical system can guarantee absolute security.

Please do not send sensitive information, passwords, financial information, government identifiers, or another person’s secrets through the service.

13. Changes to this Policy

We may update this Privacy Policy when the service, processing activities, or legal requirements change. The current effective date will be shown at the top of this page.

Where a change materially affects private AI access, we may request renewed acceptance before access continues.

14. Contact

For privacy requests or questions, contact:
Aphelion
[email protected]