Privacy Policy

Version 3.0 — review draft. This policy separates currently available features from generation and payment features that have not opened. The operator's identity and final retention periods require confirmation before this draft is treated as a complete paid-service policy.

1. Who is responsible

The service brand is hotellobbyaivideo, at www.hotellobbyaivideo.top. The operator's actual legal name, individual or company status, and country or region are awaiting confirmation. A company must also provide its registered address.

Privacy, security and support requests use support@hotellobbyaivideo.top. Signed-in users can also submit support tickets.

2. Information we process

We limit collection to what is needed for the functions you use:

• Accounts: name, email, password hash for email accounts, profile image where supplied, authentication-provider identifiers, session and verification records, and authentication credentials or tokens needed for sign-in. We do not store plaintext passwords.
• Creation: selected photos, prompts, scene choices, aspect ratio, resolution, duration, audio choices, task status, generated videos and media metadata, only where the corresponding feature uses them.
• Subscriptions and credits: plan, billing period, orders, amounts, currency, payment status, subscription state, credit grants, expiry, consumption, refunds and compensation records when paid features are enabled.
• Support: messages, tickets, attachments and the records needed to respond or investigate a report.
• Technical and security records: request time, errors, IP address, user agent, session activity and abuse signals where necessary. We do not request precise device location.

Current photo preview and local preferences

Photos selected in the video studio are currently used in your browser for composition previews. They are not submitted to an AI model or saved in the browser's persistent settings. Reloading or closing the page clears the selected studio photos. Scene settings and director notes can be saved in local browser storage; do not include sensitive information in notes, especially on a shared device.

This does not describe every upload on the website: uploading a support attachment or another file through an upload feature sends that file to server-managed storage. Closing the browser does not remove such uploads.

3. Purposes and applicable grounds

Account and requested-service processing supports our contract with you. Necessary billing and entitlement records support that contract and relevant legal obligations. Security, fraud prevention, debugging and support use only information needed for those purposes; where legitimate interests are a recognized legal basis, we consider the effects on your rights. Optional processing requiring consent must obtain that consent separately.

This policy is a notice about data handling, not blanket consent to every possible purpose. We do not sell your photos, prompts or other personal information, publish your private files as marketing material, or use them to train our own models without separate permission.

4. Cookies and browser storage

• Authentication and security: maintain sessions and verification. You can sign out or block cookies, although sign-in may stop working.
• Language preference: remembers English or Chinese. Change language or clear browser cookies to reset it.
• Local studio settings: save scene parameters and director notes. Clear this site's browser storage to remove them.
• Optional analytics and advertising: are not currently enabled. Before activation, we will disclose them and obtain consent or provide controls where required.

Google sign-in or One Tap may load Google's authentication resources and process device or browser signals under Google's policy. You can manage site cookies and stored preferences through your browser settings.

5. Providers and data sharing

We share only data needed for the specific function, not all account information with every provider:

• Cloudflare R2: stores uploaded files. Private user files and public website assets use separate storage. Short-lived authorized links are used for private access; an expired link does not mean the file has been deleted.
• Google: provides Google sign-in and One Tap where available. We receive the profile and authentication information required for account access, not your Google password.
• Resend: is the configured account-email provider, for verification and other necessary messages when sending is enabled.
• APIMart / Doubao Seedance 2.0 Fast: are planned for video generation, not currently active. Once enabled, the selected photos, necessary prompt and task parameters may be sent to the provider to produce your video. The applicable provider retention, training and downstream processing terms will be disclosed before you submit content.
• Waffo Pancake: is the planned payment, subscription and refund provider. Checkout is currently closed. Once opened, card data is submitted in its hosted checkout, not collected or stored as full card numbers or security codes by our application. We receive the order and payment information necessary to deliver purchased rights and handle support.

The Service is currently in local testing. Production hosting and database providers will be identified before public release. We will update this disclosure before moving live account data to a different processor.

Disclosure may also be necessary for a lawful request, a reported rights violation or a security investigation. Any ownership transfer must continue to protect personal information and be notified where required. Additional purposes require an appropriate legal basis and any necessary consent.

Provider information: Google Privacy Policy, Cloudflare Privacy Policy, Resend Privacy Policy, APIMart and Waffo Pancake. These third-party policies do not replace our responsibilities for data we control.

6. Storage and security

Private files are not automatically placed in a public gallery. Access is limited through authentication, ownership or authorized support/admin permissions. Passwords are hashed, and configured provider secrets are protected separately. Public access will use HTTPS when the Service is released.

No system is risk-free. If a relevant security incident occurs, we will investigate, contain it and notify affected people or authorities when required by applicable law.

7. Retention and deletion

We retain information for the purpose for which it was collected, necessary security and support, or an applicable legal obligation. Once those needs end, it is eligible for deletion or anonymization. Retention depends on the data category:

• Studio preview photos: browser session only; cleared on reload or closure.
• Local scene settings and notes: remain on your device until you clear them.
• Private uploads and support attachments: stored for their requested purpose; eligible deletion can be requested.
• Photos sent for generation and generated videos: generation is closed. Their retention periods will be disclosed before it opens; those periods remain pending in this draft.
• Account data: needed while the account is active. The deletion-request processing period remains pending.
• Support and security records: retained for relevant support, security or dispute needs. Routine maximum periods remain pending.
• Billing and tax records: limited to the records and duration required by applicable law or a genuine payment dispute. The legal period depends on the operator and transaction.
• Backups, if used: final deletion and expiry periods remain pending. Deleted live data must not be reintroduced into active use.

File retention and credit expiry are separate policies. Canceling a subscription does not delete the account, photos or videos.

8. Your requests and account deletion

Contact support@hotellobbyaivideo.top or use support tickets to request access, correction, a copy or export, eligible deletion, restriction, objection or withdrawal of consent, as applicable to your jurisdiction. Support normally acknowledges requests within three business days; completion follows the applicable legal deadline and the finalized deletion policy. We may verify account ownership before releasing or deleting data, without asking for unnecessary identity documents.

Download wanted files and resolve paid subscriptions, outstanding orders and any eligible refund before account closure. A request for account deletion is not an automatic subscription cancellation or cash-out of credits. Eligible live media and account records are removed through the deletion process. Limited evidence may be retained where needed for tax, fraud, security or a dispute; backup and provider-held copies must be handled under the applicable retention arrangements.

Account deletion is currently requested through the contact channels above. You may also complain to the competent data-protection or consumer authority. We do not restrict mandatory privacy rights.

9. International processing

A provider's infrastructure may process data outside your country. Applicable processing locations and transfer protections will be disclosed before public release or a new provider is activated. Any consent required for a transfer will be requested separately.

10. Adults only

Accounts and reference-photo subjects must be at least 18. Do not upload photos of minors. Report a suspected underage account or image through the privacy contact so we can investigate and remove information where appropriate.

11. Service emails and optional marketing

Verification, security, billing, cancellation and policy notifications are necessary service messages when applicable. Marketing is separate and is not currently enabled. Marketing must not be activated without any required opt-in and a functioning unsubscribe mechanism; unsubscribing must not block necessary account or billing messages.

12. Updates and contact

Material changes will be announced at least 14 days in advance through the site or account email where appropriate, except for urgent legal or security changes. A new purpose requiring consent is not authorized merely because you continue browsing. Dated versions will be retained.

Contact: support@hotellobbyaivideo.top. See also the Terms of Service. This draft's operator and retention entries must be completed before it is published as a final paid-service policy.