How Hotel Lobby handles uploads, accounts, private results and personal data requests.
Last updated:
Local drafts and uploads
Photos and settings stay in this browser for 30 minutes, renewed when you use the editor. Expired drafts are cleared on the next visit; signing out or deleting your account also clears them. Files are uploaded on submission. Demo mode does not send photos to an AI provider. Live mode sends both photos and a built-in prompt to Kie.ai for MiniMax H3 processing; fal.ai is an optional provider supported by the application. Provider copies follow their retention policies; deleting files from Hotel Lobby does not immediately delete third-party copies.
Private results and retention
Uploaded assets and results require an account to access. Download links are temporary. The default access period is 7 days; the expiry shown with each result applies. After expiry, new playback and download links are blocked; existing signed links may remain valid briefly. Stored files are removed by scheduled cleanup, with retries if needed. Save any files you want to keep.
Content checks and SeeAPI
During restricted testing, SeeAPI checks the built-in generation prompt and both uploaded photos before generation, and samples the generated video before delivery. Video review samples frames for NSFW content; it does not check audio or guarantee every frame is safe. Our review records include task references, policy version and findings and are removed with account-linked generation records. Temporary media URLs are removed from our review records when a task closes. Authorized administrators may inspect related photos, video and audio during human review. Review outcomes are emailed to the user; administrator alerts contain only a task ID and a sign-in-protected review link. Human decisions, reviewer IDs and reasons are retained with the review record. SeeAPI states that API inputs and outputs are not used for training, but stored inputs, task information and moderation results have no automatic expiry; request logs are retained for 60 days. Our seven-day media access period does not apply to these provider copies. Contact [email protected] for deletion assistance; deletion at SeeAPI requires a separate request and is not triggered automatically by deleting your Hotel Lobby account.
Account deletion
Deletion revokes sessions and removes account-linked creations and media through a background job. Financial records are retained without the account mapping. Unused credits expire; signing up again does not restore them. Deletion does not automatically request a cash refund.
Accounts, payments and browser storage
We use your email and sign-in profile to manage your account, sign-in cookies to maintain your session, and browser storage to restore drafts and pending creations. Google provides Google sign-in; Resend delivers email sign-in links. Account data is stored in Supabase, private media in Cloudflare R2, and the site is hosted on Vercel. At checkout, your signed-in email is passed to Waffo to prefill the buyer email; Waffo handles payment details and transaction-related customer data. Browser storage also keeps first and latest traffic sources and campaign labels for 30 days and may attach them to an order. This source tracking is disabled when the browser sends Do Not Track or Global Privacy Control.
Service records, security and international processing
We keep generation settings, task status, credit transactions and order references to deliver videos, resolve failures and handle payment disputes. Hosting and authentication services may process IP addresses, browser information and security logs. Providers may process data outside your country. We use account access controls, encrypted connections and private media storage, but cannot guarantee absolute security. Do not upload confidential documents or photos you are not permitted to share. Hotel Lobby does not use uploads to train its own AI model; this does not promise that third-party providers have the same retention or training practices.
Your data rights and contact
Contact [email protected] to request access, correction, a copy or deletion of personal data, or to object or withdraw consent where applicable. We may verify account ownership without asking for your password. Account deletion is also available in Account. Some transaction, dispute and security records may be retained for legal obligations or unresolved claims; deletion requests do not automatically remove provider records. Support and abuse reports are used to investigate the request and retain a necessary record of its resolution. Hotel Lobby is independently operated by an individual.