Privacy, built for sensitive media
Your photos are inputs to a generation request, not raw material for our marketing or model training.
By HotelLobby.ai · Content updated
What we process
We process your account identity, order and credit records, two uploaded images, generation settings, provider task identifiers, and the resulting video. We never store card numbers or security codes.
Who helps provide the service
Manus provides hosting, login and the application database. Stripe processes payment. For new two-photo video tasks, APIMart edits the selected template with WAN 3.0, receiving both photos via unguessable, short-lived HTTPS links; these are not Seedance private-avatar approvals. Earlier APIMart tasks may still use Seedance 2.5 and approved private face assets. SeeAPI may hold historical task or output records and is not a fallback for new tasks. Only material needed for the requested service is sent. See the APIMart WAN 3.0 reference and SeeAPI historical reference.
Privacy-friendly analytics
We use Plausible to measure aggregate site visits and page performance without advertising cookies or cross-site behavioral profiles.
Retention
For newly consented successful tasks, processed source photos stay with the video for up to 7 days; authorized administrators may inspect them for support and quality. Failed tasks purge photos, and earlier tasks keep their prior shorter deletion rule. Deleting the video or account removes local photos sooner. Provider-facing photo links expire within 24 hours. Minimal order records may be retained for fraud, accounting, tax and legal obligations.
Your choices
You can delete an individual video from its result page or request account-data deletion from Account. We do not sell your images or use them to train models.
Temporary face-quality check
For human videos, our server temporarily compares facial features from both uploads with several frames of the generated result before delivery. These temporary face descriptors are not retained, sent to a separate quality-check provider, used for login, or shared with other users. If the result cannot be checked or does not match, we do not deliver it and return the generation credits.
Provider copies and deletion limits
For new two-photo video tasks, APIMart handles WAN 3.0 template editing with the two uploaded images supplied through unguessable, short-lived HTTPS links; these are not Seedance private-avatar approvals. Earlier APIMart jobs may still use Seedance 2.5 and separately approved private face assets. HotelLobby.ai uses APIMart’s deletion API for best-effort task cleanup, which may require retries and does not promise remote deletion. For newly consented successful jobs, processed original photos and videos stay on HotelLobby.ai for no longer than seven days; failed photos are purged and older jobs kept their shorter policy. The provider-facing source URLs still expire within 24 hours. SeeAPI may hold historical task or output copies from earlier processing. SeeAPI states that its generated assets currently have no automatic expiration, and its consulted public API does not document remote deletion. Deleting a video or account here removes our local copy but cannot be promised to delete provider-held copies. Contact support@hotellobby.ai about provider-held data.