Privacy policy for the private development version · November 13, 2026
Grandora Group LLC, operating as Forge Lumina, develops Lumina Video Studio. This policy describes the current prototype, not a publicly available hosted customer service.
Information we handle
The prototype handles topics, scripts, titles, language and style preferences, selected voices, revisions, approvals, generated pictures, narration, video files, schedule settings, time zones and job outcomes. When YouTube is connected, it stores the channel identifier and name, permission scopes, access and refresh tokens, and token expiry information. For the TikTok test connection, we handle an account identifier, granted permission scopes, access and refresh tokens, token expiry times, and temporary sign-in verification data. We also receive support messages you choose to send.
Use and storage
We use this information to create and revise requested content, show previews, manage approved schedules, identify the connected channel, maintain authorized account access and diagnose failures. Automatic social publishing is not currently enabled.
Project records and media are stored on the operator’s computer. YouTube credentials and tokens, xAI credentials, and the private connection-service key are encrypted for that Windows account. TikTok developer credentials are configured in the private environment of the connection service hosted by Hostinger at connect.forgelumina.com. TikTok account tokens are encrypted in a private database on that hosting account, outside the public website and application build folders. The encryption key is held separately in the hosting environment. Scripts and media do not use that credential encryption. Authorized operators can access project data to operate and support the app.
External providers
When generation is requested, relevant topics, prompts or narration text are sent to xAI to produce scripts, pictures or speech. Do not include confidential or sensitive personal data in prompts. Social access tokens and channel information are not sent to xAI for generation. xAI processes API requests under its applicable privacy policy and service terms.
Lumina Video Studio uses YouTube API Services for its YouTube connection. Google handles sign-in and authorization under the Google Privacy Policy. The TikTok sandbox connection uses TikTok Login Kit and requests basic account information and permission to upload drafts; it does not activate automatic posting. TikTok handles its own sign-in and consent. Hostinger processes connection-service traffic and stores its private configuration and encrypted connection records. Hosting access logs may contain request URLs, including short-lived authorization parameters; these logs are managed by Hostinger. Facebook and Instagram connections and the hosted customer service remain under development.
Your controls
You can edit saved scripts, pause series, skip scheduled episodes and archive drafts where those controls are available. Archiving does not delete revisions or cached media.
Use Account connections to disconnect YouTube and revoke access, or revoke access directly in Google’s security settings. The TikTok Disconnect & revoke access control requests revocation from TikTok, then removes the active hosted token record after revocation succeeds. You can also remove access in your TikTok account settings. Revocation does not remove videos already published on a social platform or locally generated project files.
Retention and deletion
The current prototype keeps project records, revisions and media until the operator removes them. It does not yet have automatic expiry or customer self-service deletion. To request access, correction or deletion of information held by Forge Lumina, email support@forgelumina.com. We review requests, verify authority where needed and arrange operator removal of the relevant local files, hosted connection records and applicable backup copies. Hosted TikTok token records remain until disconnect or operator deletion; pending sign-in records expire within ten minutes and are removed on a subsequent service request. Hosting logs and backups follow Hostinger’s retention controls. Data required by law may need to be retained separately. Provider-held information is subject to the provider’s own retention rules.
Before customer launch, we will establish and implement retention periods and deletion procedures appropriate to the hosted service and its integrations.
Cookies, sharing and security
The local app uses a short-lived security cookie to bind a YouTube sign-in request to the browser that started it. The HTTPS connection service also uses a Secure, HttpOnly cookie lasting up to ten minutes to bind a TikTok sign-in to the initiating browser; it is cleared when a verified callback is handled. The app and connection service do not add advertising or analytics trackers. The Forge Lumina website and third-party sign-in pages may use their own cookies and notices.
The prototype does not sell project information or use it for targeted advertising. Information may be disclosed when legally required. Providers may process information in other countries. No storage or transmission method can guarantee absolute security.
Audience, changes and contact
This private development version is intended for adult business operators, not children. We will date and update this policy when processing changes and explain new uses before enabling them. Privacy questions and complaints: support@forgelumina.com. Please do not email passwords or access tokens.