Privacy Policy
Effective October 1, 2026
Who handles your data
Hotel Lobby AI is operated by an individual based in China. Contact [email protected] for privacy questions and requests.
Information and purposes
Reference photos and creative directions stay in your browser until you submit them. We process them to screen requests and generate videos. A random session cookie connects your browser to an account. We store account credit balances, task identifiers and statuses, completed video files and their links, payment and refund event references, and safety-check decisions. Recovery codes and session tokens are stored as hashes. We do not store source photos or raw creative directions in our application database.
Service providers
Submitted photos are sent to OpenAI for image safety screening before upload to Kie. The composed generation prompt is sent to Creem for safety screening. If screening succeeds, Kie receives the reference images and generation settings to process the video. Creem handles checkout and payment information; we do not collect payment card numbers. Cloudflare handles traffic to the site. Providers may process information outside your country and maintain their own operational records under their policies. Image screening does not verify identity, age, ownership or consent.
Cookies and local storage
The HttpOnly account session cookie is necessary to access your account and lasts up to one year unless cleared or revoked. Browser storage remembers your theme and local creation history. Clearing the session cookie removes this browser's access unless you have saved a recovery code. A recovery code is replaced after use. Email-based recovery is not available if both the session and code are lost.
Retention and security
Account, task and transaction records remain stored while needed to provide account access, reconcile credits and payments, handle disputes and meet applicable legal obligations. The application does not currently delete these records or completed video files automatically on a fixed schedule. You can request deletion; records needed for outstanding tasks, disputes or legal obligations may need to be retained. After a successful generation, we copy the completed video from the provider to our server and restrict access to your account. Archival retries can delay availability; provider links can expire before a copy succeeds. Server storage is not a promise of permanent availability. Download a copy of videos you wish to keep. We restrict server access and use HTTPS, but no system can guarantee absolute security.
Your choices
Email support to request access, correction or deletion, or to raise an unauthorized likeness concern. Include an account or order reference where available; we may ask for information needed to verify the request. Do not email your recovery code, payment card information or API keys. We do not sell your uploaded photos. This service is intended for adults and does not knowingly permit child subjects.