Privacy Policy

1. Scope

This policy explains data handling for Hotel Lobby AI's website, accounts, photo uploads and video generation. Hotel Lobby AI is independently operated by an individual under the Hotel Lobby AI name. References to “we” and “our” mean that individual operator, who is responsible for the personal information handled by the Service. Privacy questions and requests can be submitted by emailing support@hotellobby.studio.

You can choose two photos, select a model and video settings, and submit a generation request after signing in. Selecting photos for preview and submitting them for generation are separate steps.

2. Photos and generated videos

Selecting a photo first creates a local preview in your browser. If you continue to sign in, the site can save your selected photos and settings in browser storage so they can be restored after sign-in. See our Cookie Policy for details.

When you start generation, the photos are uploaded through our server to EvoLink's file service. The selected AI model receives the photo references and generation settings through EvoLink to create your video. We associate uploaded-file references, task identifiers, settings, status and credit usage with your account.

Generated video files are saved using our storage service for playback and download. The current workflow adds the original music in your browser and uploads the finished video to our storage. Your photos and generated videos are private by default; we do not publish them. Processing by the service providers needed to generate and deliver your video is separate from public sharing.

Removing a photo from the picker does not delete a copy that has already been uploaded. Your original file on your device is unaffected. Retention and deletion are described below.

3. Other information processed

Depending on the features you use, the Service processes:

• Accounts: name, email address, profile image, account identifiers, verification status and sign-in records. Password accounts use a password hash rather than a stored plain-text password. If you choose Google sign-in, we receive the profile and authentication information needed for that sign-in.
• Sessions and security: session identifiers, expiry times and, where recorded, IP address and browser or device information needed to manage access and investigate abuse.
• Support: the name, email address and message you submit, plus information you choose to include in later correspondence. Avoid sending sensitive documents or payment credentials.
• Email subscriptions: your email address and subscription status. New accounts are not automatically subscribed to marketing emails, including accounts created through Google. You can opt in separately through a subscription form or account notification settings. The opt-in control is not preselected for new subscribers. Refusing or withdrawing marketing consent does not affect registration or use of your account. You can unsubscribe in notification settings or through the unsubscribe contact provided in our emails. Transactional account emails, such as verification, password resets and order notifications, are separate.
• Website activity: ordinary request and diagnostic data. Where analytics is enabled, this may also include pages viewed, interactions, referral information and browser or device identifiers. Such records are not necessarily anonymous.
• Purchases, if you use an available checkout: order or customer identifiers, product, amount, payment status and related billing records. Payment details entered into a hosted checkout are handled by its payment provider. The homepage photo picker does not request payment details.

4. Why information is used

We use information to upload photos, generate and deliver videos, operate requested features, authenticate accounts, send verification and password-reset messages, handle support, administer applicable purchases, prevent misuse and meet legal obligations. Subscription information supports email delivery; enabled analytics helps understand website use.

Where a legal basis is required, account and requested-service processing may be necessary to perform a contract; security and support may rely on legitimate interests subject to your rights; legally required records rely on legal obligations. Processing that requires consent must have that consent. Reading this policy or registering an account is not, by itself, consent to every marketing or tracking purpose.

5. Service providers and disclosure

Information can be handled by providers needed for the feature you use, including hosting and database infrastructure, email delivery, a sign-in provider you choose, and a payment provider identified at checkout. The application's configured infrastructure includes Cloudflare hosting, database and file storage services, EvoLink for photo uploads and access to the selected AI model, and Resend for email delivery. The payment provider is identified at checkout. Actual availability depends on the deployed configuration.

Optional analytics integrations, including Google Analytics and PostHog, depend on production settings. Their presence in the application does not mean every integration is active. See our Cookie Policy for the distinction between account storage, preferences and optional analytics. Contact us for information about the services active for your use.

We may disclose relevant information where legally required or reasonably necessary to address fraud, security incidents or legal claims, subject to applicable safeguards. Providers may process information outside your country. The applicable locations and transfer safeguards depend on the provider and processing involved; you may request further information from us.

6. Retention and deletion

Uploaded photos are held by the file service used for generation; uploaded-file references and task records are associated with your account. Generated source and finished videos are saved in our file storage. Expiration of a provider file link does not mean all related account records or stored video copies have been deleted. Account and session data are retained as needed to operate your account and secure access. Support records are retained as needed to resolve the request and any related dispute. Applicable transaction records may need to remain for accounting, fraud prevention or legal obligations.

Retention depends on the purpose, whether the information is still needed, and applicable legal requirements. This policy does not promise a fixed deletion period for every record. You can request further retention information or deletion by email at support@hotellobby.studio.

Removing a video from My Videos removes it from your visible list; it does not immediately erase every stored file or related transaction record. You can contact us to request deletion of the underlying information. Account deletion is available in account settings. Deleting an account does not necessarily erase records held separately by email or payment providers, required legal records, or copies in backups immediately. Contact us about information beyond the account itself.

7. Your choices and rights

Depending on applicable law, you may have rights to access, correct, delete or obtain a portable copy of personal information; restrict or object to processing; withdraw consent for processing based on consent; and complain to a competent privacy authority.

Submit requests by emailing support@hotellobby.studio, describing the request and the email associated with your account, if any. We may need proportionate verification before disclosing or changing personal information. We will respond within the time required by applicable law and explain any applicable limitation or lawful extension.

You can remove photos from the picker before submitting them for generation. For copies already uploaded or generated, use the contact above to request deletion. You can also control browser storage as described in our Cookie Policy. Withdrawing marketing consent or unsubscribing does not prevent essential account messages.

8. Security and children's information

We use measures such as account access controls and session validation to protect the information handled by the Service. No online system can guarantee absolute security. If an incident requires notification under applicable law, we will provide that notification.

The Service is for users aged 18 or over who have also reached the age of majority where they live. Everyone shown in selected photos must be at least 18; photos of minors are not permitted even with parental or guardian permission. If you believe personal information about a minor has been submitted to us, contact us so we can investigate and remove improperly collected information as appropriate. Photos that have not been submitted for generation can be removed from the picker; any saved sign-in draft can be cleared through your browser’s site-data settings.

9. Changes to processing and this policy

If we introduce additional uses of photos or videos, we will explain the information involved, its purposes, recipients and retention, and obtain consent where required. This policy does not authorize undisclosed future uses.

We will update the date on this page when the policy changes and provide additional notice of material changes where required. For privacy questions, contact us by email at support@hotellobby.studio.