Privacy Policy

1. About This Policy

This policy applies to Hotel Lobby AI at https://hotellobbyai.im, including the public website and signed-in generation services. “We,” “us,” and “our” refer to the service operating under the Hotel Lobby AI brand. For privacy questions or requests, contact our support team using the link at the end of this policy.

2. Information We Handle

• Account information: your email address, display name, profile image, sign-in provider identifiers, verification details, and session information. If you sign in with Google, we receive the account information needed to authenticate you.
• Generation content: the photos you upload for each performer, selected video quality, generation settings, generated videos and previews, and related file URLs.
• Task and credit records: task identifiers, status, timestamps, model settings, credit grants and consumption, and signed-in creation history.
• Purchase information: payment provider, order and transaction identifiers, package, amount, currency, payment status, and related customer or billing information returned by the payment provider. Payment credentials are entered through the provider shown at checkout; our application does not store full card numbers or card security codes.
• Security and technical information: IP addresses, browser and device information, request logs, session identifiers, and registration identifiers derived from IP address and browser information. These identifiers help us secure accounts, investigate errors, and prevent abuse; they are not a guarantee of anonymity.
• Attribution and support information: referring pages, landing pages, campaign parameters and ad-click identifiers when present, device/language information, and information you choose to send in support messages.

3. Why We Use This Information

Where data-protection law requires a legal basis, the basis depends on the activity: providing the service you request, complying with legal obligations, legitimate interests such as security and service administration, or consent where required. You may contact us about the basis for a particular use.

• To sign you in, process video-generation requests, deliver downloads, maintain creation history, and respond to your requests.
• To process purchases, allocate and deduct credits, review refund eligibility, reconcile payments, and resolve billing disputes.
• To prevent fraud and abuse, protect accounts, investigate errors, enforce usage limits, and maintain service reliability.
• To understand service usage and campaign performance through the measurement tools described below.
• To meet applicable legal obligations and establish, exercise, or defend legal claims.

4. AI Processing and File Access

Uploaded photos and generation settings are sent to the AI processing providers configured for Hotel Lobby AI. Those providers may use underlying model and infrastructure providers to complete your request. Uploaded files and generated results are also stored using our configured object-storage services, including Cloudflare R2 or S3-compatible storage.

Hotel Lobby AI uses AI processing to fulfill your generation requests and does not operate its own model-training service. Third-party AI providers have their own processing and retention terms; we have not established a blanket no-training or zero-retention guarantee for all downstream providers. Contact us before submitting material that requires specific confidentiality, retention, or training restrictions.

Stored source and result files may be accessible through direct file URLs without signing in to Hotel Lobby AI. Anyone who obtains such a URL may be able to view or download the file. Treat file links as sensitive. Do not upload passwords, identity documents, confidential records, or other material that requires private, access-controlled storage.

Closing a browser tab, completing a generation, or downloading a result does not automatically erase uploaded photos or generated videos.

5. Service Providers and Other Disclosures

Providers may process data in countries other than your own. Their roles, retention rules, and legal obligations may differ. Where applicable law requires safeguards for international transfers, those requirements still apply. Contact us for information about a specific provider or transfer.

• AI processing: our configured generation providers and the infrastructure providers they use receive the uploaded photos and settings needed to create your video.
• Hosting, storage, and delivery: Cloudflare and our configured database, object-storage, and infrastructure providers process data needed to operate and deliver the service.
• Authentication and email: Google handles Google sign-in; our configured email service, such as Cloudflare Email Service or Resend, processes recipients and transactional message content.
• Payments: the payment provider shown at checkout processes the payment method you choose and may process data for its own fraud prevention, legal, and payment-network obligations.
• Measurement: Google Ads tags may process identifiers and conversion information when configured. Plausible may process website usage data. If PostHog is enabled, usage events can be associated with your account identifier, email, name, and plan information. The tools that load depend on the live service configuration.
• We may disclose information when legally required, to address fraud or security incidents, to protect legal rights, or as part of a business transfer subject to applicable protections. If you choose to share a file link or output, its recipients can access the material you share.

6. Cookies, Browser Storage, and Measurement

We use cookies and browser storage for sign-in, preferences, task recovery, purchase-status synchronization, security, and abuse prevention.

Browser storage can also retain first and recent visit information, campaign parameters, and ad-click identifiers. Measurement services may use their own cookies or similar identifiers. We may associate attribution information with a session, account, or purchase.

You can clear cookies and site storage in your browser and use controls offered by measurement providers. Doing so may sign you out or remove local task-recovery information; it does not erase server-side records. See the Cookie Policy for more detail. This policy does not treat mere use of the site as consent where affirmative consent is legally required.

Cookie Policy

7. Retention and Deletion

We retain information according to its purpose, including providing accounts and creation history, delivering and recovering generations, administering credits and purchases, limiting abuse, handling support, and meeting legal obligations. The current service does not apply a single automatic deletion deadline to all uploaded photos or generated videos.

Deleting an item from My Creations hides that record from your creation list. It does not, by itself, delete the underlying uploaded or generated files from storage, erase transaction records, or remove copies held by AI providers.

You can use the available account-deletion option in account settings or contact support. Account deletion does not automatically guarantee removal of every associated storage object, provider copy, backup, or payment record. For a photo, video, or file-deletion request, include the account email, task identifier, or file URL needed to locate it. Do not send passwords or full payment credentials.

We will review verified deletion requests under applicable law. Some information may need to be retained for payment reconciliation, fraud prevention, disputes, or legal obligations. Copies in backups or with independent providers may have different deletion schedules. Download any results you need before requesting account deletion; the service is not a permanent file archive.

8. Your Choices and Rights

Depending on your location and applicable law, you may have rights to access, correct, delete, or obtain a copy of your personal data, restrict or object to certain processing, and withdraw consent where processing relies on it. You may also have the right to complain to your local data-protection authority.

Send a request to support using the contact link below. We may ask for proportionate information to verify your identity and locate the relevant records. We will respond within the period required by applicable law. Refusing information needed to process a generation, authenticate an account, or process payment may prevent us from providing that part of the service.

9. Security and Information About Others

We use measures such as authenticated account access, HTTPS, and ownership checks on task and account operations. No system is completely secure, and these measures do not make direct file URLs private.

Only upload images and personal information you have permission and an appropriate legal basis to process. The service is not directed at children under 13. If you believe a child has submitted personal data without appropriate permission, contact us so we can review it.

10. Updates and Contact

We may update this policy as the service or its data practices change. The date above identifies the latest revision. Where required, we will provide additional notice or obtain consent for a material change.

For privacy requests and questions, contact Hotel Lobby AI support.

[email protected]