Security
Loresta checks who owns what before anything about an account or a supporter can change.
Safe connection links
Section titled “Safe connection links”The links used to connect an app expire, can be used only once, and are stored in a form nobody can read back.
Your account stays separate
Section titled “Your account stays separate”Every sign-in, connection and benefit is checked against your account and creator profile. If someone asks for a record that belongs to another account, Loresta answers as if it does not exist.
Revocable permissions
Section titled “Revocable permissions”You can disconnect any connected account or your Discord server whenever you like. Disconnecting stops Loresta using the account right away. Refunds and disputes update the matching Discord roles.
No secrets in what you see
Section titled “No secrets in what you see”Loresta never shows social access, Discord credentials or sign-in secrets on screen or in an export.
Protected contacts and access
Section titled “Protected contacts and access”Loresta checks protected-contact rules before any AI prepares a reply. Mobile actions follow the same account and role rules as the web. Phone alerts leave out private supporter details, and a notification link never gives access to what it opens.
Connection and payment safety
Section titled “Connection and payment safety”Connection links expire and work once. Discord requests must carry a valid signature. Payment confirmations are verified before anything changes. When you disconnect, a refresh that is still in flight cannot bring the connection back.
Browser protections
Section titled “Browser protections”Loresta pages use strict browser protections, including limits on what can load and on embedding the site in other pages. If you run your own tools around Loresta, protect your own passwords, logs and networks.
Support references
Section titled “Support references”When something fails, the error shows a request reference. Loresta support can use it to look up a short, seven-day record of the failure. That record holds safe labels and where the problem happened, not your message text. See troubleshooting for what to send us.
Verified accounts on Creator Pages
Section titled “Verified accounts on Creator Pages”A verified X badge on a Creator Page means Loresta confirmed that you control that X account when you connected it. You cannot add the badge yourself. It does not verify anything else about your Page, offers or identity, and it goes away if the connection no longer matches.
Every public Creator Page has a button to report impersonation or a duplicate account. Reports go to a restricted team that records what it checks before verifying, restricting, dismissing or reversing anything. Each decision is logged and the creator is told.
Safety for supporters and creators
Section titled “Safety for supporters and creators”You can mute, block or report any Page supporter or inbox participant. Muting keeps the conversation for your review but stops Loresta’s AI and automatic replies. Blocking also stops normal sending, ends their Page chat access and carries the block over if they come back in the same browser.
Supporters can report a Creator Page or a chat. Public forms are rate-limited and checked for bots. A report holds the reason, a short excerpt and a fingerprint of the message, not the whole conversation.
Loresta’s team can investigate, restrict, dismiss, record an appeal and reverse a decision, and each step is logged with a name and a reason. If you think a block or restriction was a mistake, contact support with the report reference and we will review it and restore things if that is right.
Continue with data and privacy for how long things are kept and how to export them.