This Advisor Privacy Policy explains how LunaLink (“we”, “us”, or “our”), operated by Lunaris Holdings LLC, collects, uses, discloses, and safeguards your information when you apply to become, or work as, an advisor on LunaLink, including through the LunaLink advisor app and advisor tools and our websites at lunalinkapp.com and app.lunalinkapp.com (together, the “Services”).
LunaLink is a marketplace that connects clients with independent advisors (e.g. tarot readers, astrologers, life coaches) for chat, audio, and video sessions. The Services are intended for users 18 years and older. Your use of the Services as an advisor is also governed by our Advisor Terms of Service. Clients and website visitors are covered by our Privacy Policy.
1. Information We Collect
Application & profile
- Account: name, email address, password (managed by our authentication provider, Firebase Authentication) or your Google or Apple sign-in, preferred language, and the languages you can hold sessions in.
- Application & onboarding: the answers you give while setting up your profile (experience, reading focus, tools and methods, specialities, reading style, communication methods), and the profile draft we help generate from them.
- Public profile: display name, profile photo, tagline, bio, years of experience, specialities, tools and methods, reading style, the session types you offer, rates, free minutes, schedule and time zone, and spoken languages.
- Test reading: if you are asked to give a test reading during your application, the video response you record and submit, and the scheduling details of the reading.
Identity verification
- Before your profile can go live, we verify your identity through Stripe Identity. You photograph a government-issued ID document and take a matching selfie inside the app, and Stripe checks them.
- Stripe collects and keeps the ID images, selfie, and the details read from them under its own privacy policy. LunaLink does not receive or store your ID images or selfie. We receive and store a reference to your verification and its result (for example verified, or needs more information), and when you were verified.
Payouts, earnings & tax records
- Payout details: to pay you, we collect the bank details you enter in the app: account holder name, bank name, account number, routing number, country, and currency. We store these securely and use them to send your payouts by bank transfer. In the app we only show a masked reference (the last 4 digits of the account number).
- Earnings & withdrawals: the sessions you complete and what you earned from each, your available, pending, and withdrawn balances, payout holds, processing fees, and your withdrawal requests and their status.
- Tax & accounting records: the earnings and payout records we need to meet our legal, tax, and accounting obligations.
Sessions
- Session records: who you held a session with, when, for how long, the session type, the price, and how the session ended.
- Session content: the chat messages and images you send in a session, and follow-up messages you exchange with clients afterwards. Calls are powered by Agora. We also store session messages and call state so a session can run, be restored, and be supported.
- Call recordings: audio and video sessions may be recorded. Our call service joins the call and records the call audio (all participants, mixed) and, on video calls, each participant’s video, and stores the recording with us. You are told before a call starts.
- Call transcripts: during an audio or video session, the speech of each participant may be transcribed to text by our call service using Google Cloud Speech-to-Text, so it can be screened for content that isn’t allowed. You are shown a notice before the call, and we record that you accepted it.
- Reviews & ratings: the ratings and reviews clients leave you, and your rating and session count.
- Moderation records: flags raised on your sessions (for example attempts to share contact details), mutes, ended sessions, and the outcome of any review.
Information collected automatically
- Device & usage: device model, OS version, app version, IP address, language, and in-app activity/diagnostics.
- Crash diagnostics: crash and error reports through Firebase Crashlytics.
- Presence & availability: whether you are online, busy in a session, or offline; your availability switch; when the app was last active; and unanswered session requests. We use this to route sessions and may switch your availability off when you are idle or miss several requests in a row.
- Push tokens: a Firebase Cloud Messaging (FCM) token to deliver notifications such as session requests and test-reading reminders, if you enable them.
- Cookies & similar technologies on our website — see our Cookie Policy.
Communications
- Messages you send to us, including support requests and messages sent through the support forms on our websites.
2. How We Use Your Information
- Review your application, run your test reading, and decide whether your profile can go live.
- Verify your identity and your eligibility to offer sessions and receive payouts.
- Build and show your public profile, and suggest profile text using Google Gemini from your onboarding answers, which you can edit.
- Show you to clients, route session requests to you, and deliver notifications.
- Enable chat/audio/video sessions.
- Calculate your earnings, apply payout holds and fees, and send your payouts.
- Live translation. When you and a client don’t share a language, we may offer translation. It only starts if both of you agree. Chat messages and call speech are then translated using Google Gemini, and on calls the translation may be shown as captions or spoken aloud using Google Cloud Text-to-Speech.
- Trust, safety & moderation. We automatically screen chat messages, images, and call transcripts using rule-based checks and Google Gemini to detect content that violates our Advisor Terms of Service — for example attempts to share contact details or move a conversation off-platform, and abusive, illegal, or exploitative content. On some calls, audio may pass through our call service with a short delay so that contact details can be muted before the other participant hears them. Based on that screening we may block a message or image, temporarily mute a participant or a session, or end a session, and we may flag a session for review. A Quality Assurance (QA) officer may review recorded sessions, transcripts, and flagged content, and may join and silently observe a live session, where a safety or policy concern arises. Repeated violations may affect your account.
- Provide support and respond to your requests, including by email.
- Detect, prevent, and address fraud, abuse, and security issues, and enforce our Advisor Terms of Service.
- Comply with legal obligations, including tax and accounting obligations.
3. How We Share Information
We do not sell your personal information. We share it:
- With clients: your public profile (as listed above), your online/busy/offline status, your rating and reviews, and the messages and images you send in a session. We do not share your payout details with clients. Both participants are told when a session may be recorded.
- With service providers that process data on our behalf, including Google Firebase (authentication, database, storage, messaging, hosting, and crash reporting), Google Cloud (hosting our backend and call service, Speech-to-Text, and Text-to-Speech), Stripe Identity (identity verification), Agora (real-time calls), Google Gemini (profile drafts, translation, and the safety screening of messages, images, and call transcripts), and the email providers we use to send account and service emails.
- With banks and payment intermediaries as needed to send your payouts.
- For legal reasons — to comply with law, respond to lawful requests (including from tax authorities), or protect rights, safety, and property.
- In a business transfer (merger, acquisition, or asset sale), subject to this Policy.
4. Data Retention
We keep your information for as long as your account is active or as needed to provide the Services. Audio and video session recordings and call transcripts are automatically deleted 30 days after they are created, unless we must keep them to comply with law. Identity verification images are kept by Stripe under its own policy, not by us. We may retain certain data (e.g. earnings, transaction, and payout records) where required for legal, tax, or accounting purposes.
If you ask to delete your account, you can change your mind by signing in again within 14 days. Because advisors can have earnings and withdrawals in progress, our team reviews every advisor deletion request; once it is approved, your account is disabled and can no longer be used. Your account data, including your profile, payout details, sessions and their messages and recordings, reviews, test reading, and sign-in account, is then deleted, except records we must keep as described above. See Account Deletion for how to delete your account and data.
5. Security
We use administrative, technical, and physical safeguards designed to protect your information (including encryption in transit and access controls). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
6. Your Rights & Choices
Depending on where you live (e.g. the EEA/UK under GDPR, or California under the CCPA/CPRA), you may have the right to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. You can exercise these rights by contacting info@lunalinkapp.com. You can edit your profile and payout details in the app, switch your availability off at any time, turn off push notifications in your device settings, and decline live translation when it is offered. You may also delete your account at any time — see Account Deletion. We will not discriminate against you for exercising your rights.
7. International Data Transfers
We and our service providers may process your information in the United States and other countries. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.
8. Children’s Privacy
The Services are not directed to children under 18, and we do not knowingly collect personal information from them. Advisors must be at least 18. If you believe a child has provided us information, contact info@lunalinkapp.com and we will delete it.
9. Third-Party Services
The Services rely on the third parties named above, each with its own privacy practices: Google (Firebase, Google Cloud & Gemini), Stripe (Stripe Identity), and Agora. We encourage you to review their policies. We are not responsible for the practices of third parties.
10. Changes to This Policy
We may update this Policy from time to time. Material changes will be posted here with a new “Last updated” date and, where appropriate, additional notice.
11. Contact Us
LunaLink
Email: info@lunalinkapp.com