Privacy Policy

Introduction

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.

Information We Collect

We collect the following types of information to provide and improve our service:

1. Account Information — Your name, email address, and other details you provide when creating an account.
2. Usage Data — Information about how you interact with the service, including features accessed, frequency of use, and interaction patterns.
3. Device Information — Device type, operating system, and browser type, used to optimize compatibility and performance.
4. Cookies — Small data files stored on your device to remember preferences and improve your experience.
5. Generation and Support Content — Images or other references you upload, generation instructions, generated results, task records, and information you provide in reports or support requests.
6. Payment Information — Billing details handled by trusted third-party payment processors. We do not store full card numbers on our servers.

How We Use Your Information

We use the data we collect to:

• Provide, maintain, and improve the service.
• Process transactions and send related confirmations.
• Send technical notices, security alerts, and support messages.
• Respond to your questions, feedback, and support requests.
• Detect, prevent, and address fraud and abuse.

Data Sharing

We do not sell your personal information. We may share data only in these limited cases:

• With service providers needed to operate the service, including AI generation providers that process the inputs needed for your requested generation.
• To comply with legal obligations or respond to lawful requests from public authorities.
• To protect our rights, property, or safety, or that of our users.

For text-based generation workflows, we share the final text prompt with Waffo Prompt Screening for content safety. Waffo documents this check as stateless and says it does not retain prompt text after returning. Our screening audit logs contain verdicts and request IDs, not raw prompts or credentials. This check does not send uploaded image files or generated outputs for screening. Generation instructions may still be stored in our existing task and chat records as described above.

To create Hotel Lobby videos, we share the two portraits you upload with our video provider SeeAPI for processing.

Data Security

We implement industry-standard security measures including encryption in transit, access controls, and regular reviews. No method of transmission over the Internet is 100% secure, but we work continuously to protect your information.

Your Rights

To request access, correction, export, or deletion of your personal information, contact the email address below. We may need to verify that the request relates to your data before acting on it. You can also use the account settings available in the service.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, sending a notice through the service.

Contact Us

For privacy questions or data requests, email laoliuliu157@gmail.com; no account or login is required. The same address accepts support requests, prohibited-content reports, and appeals. Signed-in users may also use support tickets.

Provide a relevant task ID or link and a brief explanation so we can locate the matter. Do not send passwords, payment-card details, or copies of illegal material. For suspected child sexual abuse material, provide only a reference or link and a brief description; do not download, copy, or attach the material.

Interaction Analytics

We use PVUV.ai to understand page visits, page duration, scroll depth, visitor journeys and selected button interactions. The service uses pseudonymous visitor and session identifiers and receives ordinary page, referrer, browser and device information. Added interaction events contain only predefined button names, placements, public option identifiers and section visibility or accumulated visible-time milestones (5 and 15 seconds). Button events indicate intent, not successful generation or payment. We do not add form values, prompts, uploaded files, filenames, account identifiers or email addresses to these events, and do not link analytics visitors to accounts. PVUV interaction events do not include session recordings or click coordinates. Custom interaction measurement is limited to public pages; administrator, authentication and private workspace pages are excluded.

When configured, Microsoft Clarity provides click/scroll/attention heatmaps and reconstructed session replays on selected public pages only after you explicitly allow it through Replay preferences. Clarity receives public page/device information, pseudonymous visitor/session identifiers and interaction data, and may use analytics cookies after agreement; advertising consent is always denied. Inputs, uploaded image previews, account menus and support dialogs are masked before recording. We do not use Clarity to identify your account, and administrator, authentication and private workspace pages are excluded. Public URLs containing query strings or unknown fragments, and pages with sensitive referrers, are also excluded from replay.

You can allow or decline replay without changing the service's functionality, and change your choice using Replay preferences on a public page. Withdrawing consent reloads the page to unload the recorder, sends denied consent and clears Clarity's accessible first-party cookies. The preference itself is stored locally in your browser. Clarity recordings show observed interactions and the last observed viewport; a hidden tab or last event does not prove the exact moment someone permanently leaves. See Microsoft Clarity's privacy information for vendor details.