Your photos stay yours

Choosing a photo runs an optional quality guide locally in your browser. It checks image size, light, contrast and detail without uploading the photo. It does not detect age, species, permission or identity. For all templates, photos upload only when you start generation after verified payment.

The dedicated pet page accepts ordinary cat and dog photos only, with one animal per photo and no people. You must be 18+ and own or have permission to use the photos and depict the pets. Solo dance uses one photo and creates a 10-second 720p video with original Spanish rap and a silent download. Pet rap duet uses two distinct photos and creates a 10-second native 480p video with original English rap. Custom audio, copyrighted characters, cruelty, harmful scenes and misleading endorsements are not supported. The same payment, private processing, provider retention, 24-hour download and failure-credit rules apply. AI anatomy, coat markings, mouth motion and identity may vary.

Your one or two authorized adult or pet photos are stored privately and sent with the selected template instructions to Seedance through SeeAPI. We delete source photos after successful generation or within 24 hours. Completed videos remain available for 24 hours. Providers have their own retention policies; deleting our copies does not establish deletion from their systems. We do not train our own models on your photos or publish them as customer examples.

HTTP-only visitor and signed session cookies connect purchases and results to this browser and can last up to a year. Browser storage holds task identifiers. Before checkout, selected photos, consent and a request identifier are saved temporarily in IndexedDB on your device so they can be restored when you return. The draft expires after 24 hours and is deleted the next time it is read, when generation is admitted, when a photo is changed or when you remove a photo. Photos are not sent to Waffo. Minimal abuse-prevention records may be kept to enforce service limits.

We keep order and task identifiers, amounts, status changes and fulfillment timestamps for payment reconciliation and support. Waffo processes payment and billing details. Our task and payment records do not contain full card numbers. Historical service events may remain after media files are deleted.

For delivery support, we record when a completed result is visible, playback starts, a download is clicked, and the browser confirms receipt of the complete file. Records include the order and task IDs, video version, interface language, timestamps and byte counts. Origin-side transfer completion is recorded separately and does not by itself confirm browser receipt. Neither event proves the video was saved to your device. These support records may remain with transaction records after media deletion; they do not include photos, video contents, full card numbers, IP addresses or raw session cookies.

We use a signed first-party cookie for up to 30 days to remember your first visit source and most recent identifiable source before checkout. At checkout, we save the source, campaign tags (utm_source, utm_medium, utm_campaign and utm_content when valid), referring domain, landing page path, interface language and timestamps with the order. We detect the presence of supported advertising click parameters but do not store their identifiers. Internal links, language changes and Waffo payment returns do not replace a known source. No full referring URLs, search queries, IP addresses or device fingerprints are collected by this feature. Direct visits and hidden referrers cannot be reliably distinguished and are labelled direct or unknown. Source labels reflect observed links and parameters, not verification by Google, TikTok or another platform. Cookie blocking, deletion or changing devices can prevent attribution. Order source records may remain with transaction support records after the cookie expires.

Source photos are deleted after successful generation or within 24 hours. Videos expire 24 hours after completion. Scheduled cleanup and storage lifecycle rules remove expired media. Minimal order, task and abuse-prevention records may remain for support and reconciliation. Provider retention follows the provider’s own policy.

For a deletion request, contact support@hotellobbyai.com and include your task or order ID. Do not send card numbers or unnecessary identity documents.

Human templates accept authorized adult photos only. You must have permission from every person pictured. Minors, public figures and celebrities are not supported. Use the separate pet page for cats and dogs, with no people in pet photos.

We do not use your uploads to train our own models. Providers and payment processors operate under their own terms and retention policies.

After paid generation starts, our private media processor compares temporary face features from your uploaded portrait, generated builder frames and a checked first-shot reference. Comparisons run inside our private processor without a separate face-identification service. Features are not added to an identity database or retained after the check. Pass/review decisions and comparison scores may remain with private job support records. These checks can be wrong or inconclusive.

The extracted scene reference and short generated clips are private processing inputs. Along with the uploaded source, they are deleted on successful completion or within 24 hours through scheduled cleanup. SeeAPI receives the portrait, checked reference and template inputs needed to generate the shots; its own retention policy also applies.

For this photo template, one or two authorized adult portraits are saved temporarily on your device before checkout. Only after verified payment do we store the uploaded photos privately and send them with the selected fixed instructions to Nano Banana 2.1 through SeeAPI. We do not train our own models on your uploads. The provider has independent retention policies.

Source photos are removed after successful generation or by scheduled cleanup after 24 hours. The generated PNG is private and its download expires 24 hours after completion. The result can provide a signed phone link and QR code that open only that photo without the purchasing browser cookie. Anyone with that link can access it until it expires or the purchase is refunded; keep it private. Minimal checkout, consent, order and task records remain for reconciliation and support.