Privacy Policy

Accounts and sign-in

We store your account email, name, sign-in session, and the information needed to keep your credit balance, orders, subscriptions, and video history. If you sign in with Google, Google provides the account details needed for that sign-in. We use your email for account and service messages, including a video-making guide after a successful login.

Photos and generated videos

When you select photos in the studio — before or after signing in — they are uploaded right away to private Cloudflare R2 storage so they are ready when you start a generation. If you select photos without signing in and never start a generation, those uploads are deleted automatically within 48 hours. When you start a generation, we give our video-generation provider, APIMart, temporary access to those inputs so it can process your request. The generated video is stored in private R2 storage and is available through your signed-in account. The public sample video is a separate example; it is not made from your photos.

Please upload only photos you are allowed to use and for which the people shown have given the necessary permission. We do not publish your uploaded photos or generated video as a public gallery. We attempt to delete the two uploaded photos after a generation request succeeds or fails. Photos may remain while a request is pending or if cleanup fails. Generated videos are retained in your private account; they are not automatically deleted. For a data access or deletion request, email support@hotellobbyai.app.

Payments and credits

Stripe hosts checkout and processes payment details. We store order, subscription, payment status, and credit-ledger records so we can grant credits, handle renewals, and resolve payment problems. We do not store your full card number.

Email

We may send transactional messages such as verification, password reset, and the login guide through our configured email service. Promotional emails are separate from these account messages. When sent through Resend, they are sent only to people who explicitly opted in, and they include an unsubscribe method.

Optional analytics

If you allow analytics, Google Analytics 4 and our self-hosted Plausible instance receive page visits and limited feature events. Microsoft Clarity also receives visible content and interaction data from public pages for session recordings and heatmaps. Clarity uses relaxed masking, while form inputs, photo previews, generated results, and private account and admin pages are explicitly masked. We do not send photos, filenames, prompts, or account identifiers as custom analytics events. Google Analytics and Clarity load only after you allow analytics. You can change your choice using Analytics preferences at the bottom of the site. This choice is stored on your device. Cloudflare also processes request metadata to deliver and protect the site independently of optional analytics.

After you allow analytics, a verified first subscription payment may send a stable order ID, the amount paid, currency and plan details to Google Analytics. If you separately enable optional advertising measurement, Google may associate advertising click identifiers with that purchase and share the conversion with our linked Google Ads account. This option is off by default and does not enable personalized advertising. We do not send your email, uploaded images or prompts in these purchase events.

Contact

Questions about this policy or your data: support@hotellobbyai.app.