Privacy Policy

This policy explains how the operator of Hotel Lobby AI (hotellobby-ai.app) ("we", "us") handles personal data. We are the controller of the personal data described here. Contact: support@hotellobby-ai.app.

1. What we collect

• Account data: email address, name and profile picture. Source: Google, when you sign in with your Google account. Purpose: to create and secure your account.
• The photos you upload. Source: you. Purpose: to make your video. Photos usually show a person's face.
• The videos made for you. Source: created by the service. Purpose: so you can watch and download them.
• Credit balance, orders and plan status. Source: created by the service and Stripe. Purpose: billing, refunds and support.
• Support messages. Source: you. Purpose: to answer you.
• Records of refused requests: account, time and the rule that was broken. Source: created by our content checks. Purpose: to enforce our Acceptable Use Policy and to show that prohibited content is refused.
• Technical data: IP address, browser, device and request logs. Source: your browser. Purpose: security, fraud prevention and keeping the site working.
• Usage data: the pages you visit, how you arrived, and actions such as signing in, making a video or starting checkout. Source: your browser, through Google Analytics. Purpose: to understand how the site is used and improve it.

We do not collect your full card number. Card details go straight to Stripe.

2. How your photos are used

• Your photos are used to make the video you asked for, and to check that request against our Acceptable Use Policy. They are not used for anything else.
• To make the video, your photos are sent to the AI video provider that runs the model.
• The service does not offer facial recognition or identity verification. We do not build or keep face templates or other biometric identifiers from your photos.
• We do not use your photos or videos to train AI models, and we do not sell them.
• Your photos and videos are private to your account. We do not post them publicly or use them in our marketing without your permission.

If someone else uploaded a photo of you without your agreement, see Copyright & Removal Requests.

3. Legal bases (EEA/UK users)

• Contract: running your account, making videos, billing and support.
• Legitimate interests: security, fraud and abuse prevention, checking requests against our Acceptable Use Policy, and improving the service with aggregate statistics. You can object to this at any time.
• Legal obligation: keeping payment and tax records, and responding to lawful requests.
• Consent: where we ask for it; you can withdraw it at any time.

4. Who we share data with

We do not sell your personal data, and we do not share it for advertising. We share data only with the service providers below, who process it on our behalf:

• AI video provider. Receives: the photos you upload. Purpose: generating your video.
• Content-safety providers. Receive: the photos you upload and the videos made from them. Purpose: automated checks against our Acceptable Use Policy.
• Cloudflare, Inc. Receives: all data stored by the service, and request logs. Purpose: hosting, database, file storage and security.
• Stripe, Inc. Receives: your email and payment details. Purpose: payment processing and fraud prevention (Stripe Privacy Policy).
• Google LLC. Receives: sign-in data. Purpose: authentication.
• Google LLC (Google Analytics). Receives: the usage data above, your browser and device type, and your IP address. Purpose: measuring site usage (Google Privacy Policy).
• Email delivery provider. Receives: your email address and the email content. Purpose: sending account and billing emails.

We may also disclose data when the law requires it, or to protect our rights, our users, the people shown in uploaded photos, or the public.

These providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. How long we keep data

• Uploaded photos: deleted automatically within 7 days of upload.
• Videos: until you ask us to delete them or delete your account; then removed within 30 days.
• Account data and support messages: until you delete your account; then removed within 30 days.
• Orders, payments and credit records: 7 years, for tax and accounting obligations.
• Security and request logs: no more than 30 days.
• Records of refused requests: 3 years, then deleted.

We may keep a photo or video longer when the law requires it, or when it is evidence in an abuse report, a payment dispute or a legal claim.

6. Cookies

We use cookies that the site needs to work: a sign-in session cookie and cookies that remember your preferences. We also use Google Analytics cookies (_ga and _ga_*, kept for up to 2 years) to tell visits apart and measure how the site is used. You can block them in your browser or with Google's opt-out add-on; the site still works without them. We do not use advertising cookies. Google may set its own cookies during sign-in, and Stripe may set cookies on the checkout page to prevent fraud.

7. Your rights

Depending on where you live, you can ask us to: access your data; correct it; delete it; export it in a portable format; restrict or object to certain processing; and withdraw consent. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

To use any of these rights, to delete a photo or video, or to delete your account, email support@hotellobby-ai.app from the address on your account. We will reply within 30 days. EEA/UK users can also complain to their local data protection authority. California residents have the right to know, delete and correct their data and will not be treated differently for using these rights.

8. Children

The service is not for anyone under 18, and photos of anyone under 18 may not be uploaded. We do not knowingly collect data from children; if we learn that we have, we delete it promptly. Contact us if you believe a child's data or photo has been given to us.

9. Security

We use encryption in transit, access controls and encrypted storage for sensitive settings. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.

10. Changes

If we make material changes, we will notify you by email or in the service at least 15 days before they take effect. The date at the top shows the latest version.

11. Contact

support@hotellobby-ai.app