Privacy Policy

1. Introduction

This policy describes how Hotel Lobby AI at migosaivideo.art handles personal information when you create an account, upload two portrait photos, generate image previews or videos, and purchase one-time video passes. Contact the service operator at zhao031119@gmail.com for privacy questions or requests.

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We collect information directly provided by you, automatically recorded through your usage, and received from authorized third parties:

1. Account Information - Your name, email address, password hash for email accounts, session records, and any profile information supplied by a sign-in provider when that option is enabled.
2. Photos and Generation Records - The two portraits you submit, your consent confirmation, the selected resolution, task identifiers, status and results, and automated safety review records. This product uses a fixed preset prompt; it does not require you to write a prompt. Selected photos stay in your browser until you submit a generation request.
3. Billing and Transaction Data - Waffo collects the billing information needed to process payments. We record order identifiers, amounts, payment status and purchased allowances. We do not store full payment card numbers on our servers.
4. Device and Usage Information - Hosting and analytics services may process your IP address, browser and device information, access times, and interactions with the site for security, service operation and analytics.
5. Cookies and Local Storage - Authentication cookies maintain your session. Browser storage holds interface preferences, active task identifiers and event-deduplication markers. Analytics cookies are described below.

3. How We Use Your Information

We process your data for the following legitimate purposes:

• Service Delivery & Media Generation - To send your submitted photos and the fixed preset to the generation provider, track the task, and deliver its result.
• Account & Credit Management — To track credit balances, record transaction history, and manage your account lifecycle.
• Safety and Legal Obligations - To screen submitted photos before generation and generated media before delivery, investigate abuse and content reports, enforce our acceptable use policy, and respond to valid legal requests. Automated screening can make mistakes and does not verify identity, age, consent or copyright permissions. Files uploaded without a generation request and completed creations from before this screening was introduced are not covered by these checks.
• Customer Support & Communications — To respond to your technical inquiries, notify you of system updates, and deliver essential account notifications.
• Quality Optimization — To analyze aggregated usage trends and improve model latency, rendering performance, and user experience.

4. AI Processing & Third-Party Providers

We use Cloudflare Workers and D1 for hosting and account, order and task records. Waffo processes payments, KIE provides media upload and generation services, and Google Analytics provides site analytics. These services may process data outside your country under their own policies.

• When you submit a generation task, your photos, reference media and preset prompt are sent to KIE for processing with MiniMax H3 (video) or GPT Image 2 (image previews). The provider handles those inputs under its own policies.
• Submitted photos and generated results are also sent through KIE to Gemini 3.5 Flash for automated safety screening. We retain the decision, category, policy version, model, review time and reported usage cost with the task record. A rejected output is not delivered or linked in your creation history; provider-side files may still exist under the provider's retention policies.
• We do not sell your personal data or user-submitted creative assets to third parties.
• Uploaded photos and generated images and videos use provider-hosted public URLs. We do not publish a public gallery of your uploads, but anyone with a file URL can access it. An authenticated history page does not make the underlying media URL private. Avoid uploading sensitive images.

5. Analytics and Cookies

We use Google Analytics 4 (Google tag ID G-PTN7G0EL1T) to understand page visits and product events such as preview requests, generation outcomes and checkout starts. It may use analytics cookies and process device and usage information under Google's privacy policy. Our custom events do not include your photos, generated media URLs, prompts, email address or task IDs. Advertising personalization and Google signals are disabled in our tag configuration. You can block analytics using browser privacy controls or Google's analytics opt-out tool.

6. Data Storage and Retention

• We retain your personal data and account details for as long as your account remains active or as needed to provide our services and meet legal obligations.
• Task records include safety review metadata so we can investigate failures, abuse and appeals. We do not add descriptions of explicit content to these review records.
• Uploaded photos and generated media are stored by our providers and may expire under their retention policies. We do not promise a permanent archive or a fixed provider deletion date. Download completed creations promptly. Deleting an account does not guarantee immediate deletion of provider-hosted media, copies already downloaded by others, backups or records required by law.
• To request account or media deletion, email us with your account email and relevant task identifiers. We may verify account ownership, remove records we control, and coordinate with providers where needed. Do not attach new portrait photos to a support email.

7. Data Security

We use HTTPS, authenticated account access, hashed account passwords and server-side provider credentials. These measures do not make public media URLs private. No method of electronic transmission or storage is completely secure.

8. Your Privacy Rights

Depending on your jurisdiction and applicable law, you may have rights to:

• Access & Portability — Request a copy of the personal data we hold about you.
• Correction — Request updates or corrections to inaccurate information.
• Deletion — Request the deletion of your account and associated personal data.
• Withdraw Consent — Revoke consent for optional data processing activities at any time.

Email zhao031119@gmail.com to make a request. Account settings do not provide every privacy action. We may need to verify your identity and explain any legal or technical limits on fulfilling a request. You may also have the right to complain to your local privacy authority.

9. Updates to This Privacy Policy

We may periodically revise this Privacy Policy to reflect changes in our services, technological advancements, or legal requirements. When updates occur, we will revise the "Last Updated" date at the top of this document. Continued use of our platform after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

For support, billing questions, privacy requests, or content reports, email zhao031119@gmail.com. Please include your order number or task ID when relevant.