How Loresta keeps your account and supporters safe
Loresta only gets the access it needs, keeps each creator's data separate and records what it does, so you can see it.
Your connected accounts
You connect Instagram, Facebook, X or TikTok through each platform's own sign-in. Loresta never asks for your social password. Access keys are encrypted, and each connection can only do what you allowed. You can disconnect any account whenever you like.
Replies stay under your control
Automated replies are off until you turn them on, and they only answer incoming messages from answers you approved. Payments, refunds, legal, safety and other sensitive questions come back to you. Pause everything with one control.
Useful automation with visible boundaries
Approved by you, identified where the surface supports it, and returned to you when judgment matters.
Approved by you
Creators can review and change the information Loresta may use before a draft or automatic reply relies on it.
Product evidence: Onboarding requires an explicit review before discovered public details become approved context. Creator Page chat and connected-inbox replies receive the current approved facts and offers. A reply outside the approved boundary is not eligible for automatic sending.
Limitation: AI can still misunderstand a question. When approved context is missing, conflicting, or uncertain, Loresta must avoid an automatic answer and return the conversation for review.
Available when: Use this claim only where creator approval is recorded and the approved context is supplied to the reply decision.
Automation stays visible
Supporters see an automation notice and a Loresta label when an eligible Creator Page reply is sent automatically.
Product evidence: Automatic Page chat requires a disclosure before the first eligible reply. Loresta-authored messages have a distinct sender type and visible label. Disclosure events and final delivery decisions are recorded for review.
Limitation: A label explains that Loresta assisted with the message; it does not certify the reply as accurate, safe, compliant, or creator-authored.
Available when: This public claim currently applies to Creator Page chat. Do not apply it to a connected provider unless the delivered message or provider surface can identify the automation to the recipient.
Judgment comes back to you
Loresta treats a no-send decision as a successful outcome when the next step needs human judgment.
Product evidence: Payment, legal, safety, minor-related, personal, business, and low-confidence messages are not automatically answered. Creators can pause automatic sending without deleting their setup. Needs you states keep the conversation and the reason visible for human review.
Limitation: Automated classification is not perfect. Creators remain responsible for reviewing their Inbox, setting appropriate boundaries, and pausing automation when circumstances change.
Available when: Use this claim only for workflows with a no-send outcome, a creator-visible review state, and a working pause control.
A record of what happened
Publishing, replies, setting changes, connection changes and conversations that need you are all recorded with delivery receipts. Access keys are never written to those records.
Your data is separate from everyone else's
Every request is checked against the signed-in account and its role before anything is shown or changed. Sensitive changes need a fresh, same-site request. Sending is built so a reply cannot go out twice.
Report a security issue
Email security@loresta.co with the page address and the steps to reproduce it. Please leave out private supporter data. For retention, export and deletion, read Data and privacy. Plans are on Pricing, and the setup is on How it works.