Security of Luffa Service Account
Public Visibility
All Luffa Service Account accounts are publicly accessible. Anyone can search for and view Service Account profiles. All content published within an Service Account channel is also publicly available and searchable by all users.
Privacy and Encryption Protection
End-to-End Encryption (E2EE) is applied to private conversations between users and service account+, ensuring that only the user and the respective Echo+ can access the message content.
Service Notifications are lightly encrypted, making them inaccessible to third parties and excluded from search indexing.
Anti-Spam Measures Service account channels are unable to proactively send messages to followers unless:
It is an automatic welcome message triggered immediately after a user follows the service account.
The user initiates a conversation, in which case the service account is permitted to respond for up to seven days thereafter.
Security Advisory Please be aware that Luffa cannot control or verify whether an service account operator may disclose your conversation content. Every Service Account should be treated as an unverified third party - even if they appear polite or trustworthy, you must never share sensitive information such as passwords, seed phrases, or private keys.
Last updated