Lumorastat provides read-only analytics dashboards for TikTok accounts. An account owner connects an account by approving access in TikTok through TikTok's official authorization screen.
With the owner's permission we read: the public profile name, username, bio and account type; follower, following, like and post counts; daily account metrics (views, profile views, likes, comments, shares); and, for each public post, its caption, publication time and performance metrics including aggregated audience breakdowns (country, city, gender, viewer type) and traffic sources. We do not receive passwords, private messages, contact lists or any data about individual viewers.
Only to display analytics reports to the account owner and to the people the owner or their agency chooses to share a report with. The service is read-only: it never posts, edits or deletes anything on the account. Data is not sold, not used for advertising and not combined with other sources to profile people.
Data is stored on our server. TikTok access tokens are encrypted at rest. Access to the team area requires authentication; client reports are available only through unguessable links.
We keep analytics while the account is connected. An owner can revoke access at any time in TikTok (Settings → Security → Manage app permissions) and can ask us to delete all stored data for their account by writing to hello@lumorastat.com. We delete it within 30 days. One exception: if the account took part in a paid campaign, the views and amounts already locked for payout are kept for accounting, anonymised (without the username, the post and its caption).
Questions about this policy: hello@lumorastat.com.