Privacy policy

Scope and contact

Ocean Studio operates Lobby Duet AI. This policy is shared by the public introduction and planned product website. Contact Hello@lobbyduet.com for privacy requests, access, correction, deletion or complaints. Required legal operator details and production retention schedules must be completed before commercial accounts, uploads or purchases open.

Public browsing and analytics

Public accounts, portrait uploads, generation and purchases are closed. Browsing does not send portraits to AI providers. Cloudflare may process IP addresses, browser information, requested URLs and timestamps for hosting, reliability and security under its privacy policy.

Language, display and analytics-consent preferences use browser storage. A sanitized campaign source may remain in a first-party cookie for up to 30 days. Advertising, Google One Tap and support widgets remain disabled in the public preview.

Plausible Analytics runs when you browse using its default cookie-free configuration, independently of the Google Analytics consent choice. It provides aggregate page-visit and engagement (scroll depth and time), referral/campaign, browser/device and approximate-location statistics. It does not use cookies, local storage or persistent visitor identifiers, and does not track visitors across sites or days. IP addresses and browser information are processed to derive statistics without storing raw IP addresses or User-Agent strings. The browser sends the page URL to Plausible; its server discards ordinary query parameters and retains supported campaign/referral parameters. Our current tracking configuration also counts outbound-link clicks, file downloads and form submissions. Link and download events include destination URLs; form submission events do not include form field values. We do not configure custom identity, order or portrait events or user properties. Do not include personal or order information in page URLs or campaign parameters. See Plausible's data policy.

Optional Google Analytics 4 loads only after you accept analytics. It processes page visits, browser/device information and campaign sources under Google's privacy policy. Portraits, email addresses and account/order information are not sent as analytics events. Advertising storage, advertising user data, personalization and Google signals are disabled.

Reject Google Analytics or withdraw its consent using “Analytics preferences” at the bottom of the page. Withdrawal stops further Google Analytics collection, clears accessible Google Analytics cookies and reloads when the preference can be saved; otherwise Google Analytics stays disabled on the current page. It does not delete information already sent to Google. Without acceptance, no Google Analytics tag loads.

Email and content reports

Emailing us provides your address and the information you choose to send. We use correspondence to respond, investigate safety or rights complaints and handle necessary security/legal obligations. Reporter information is shared only as needed for review, response or a lawful obligation. Do not send illegal imagery, private portraits, identity documents, passwords or payment credentials.

You can request access, correction or deletion by email. We may need proportionate information to verify a request and retain records necessary for unresolved disputes or legal obligations. No fixed support SLA, automated acknowledgement or 24-hour moderation team is represented as operating.

Authorized tests and future public processing

Development tests are separate from browsing. They may process account details, portrait inputs, reference media, settings, task identifiers, outputs and payment/credit records. The experimental video integration uses MiniMax H3 through fal, specifically minimax/h3/reference-to-video; see AI models and fal's privacy policy.

fal receives the inputs required for a task, including expiring signed media URLs. Possession of a valid signed URL permits access until expiry. Experimental media is outside public directories and media endpoints check account ownership. This does not mean the same private-storage flow has already been deployed for public Cloudflare users.

Uploads are not automatically published. Ocean Studio does not use uploaded portraits to train its own models. Provider-side retention and any training rights depend on the applicable provider terms and configuration; deleting our copy does not guarantee deletion of all provider copies. Additional production providers and international-transfer details must be disclosed before public upload.

Waffo Pancake and PayPal are being integrated for test payments. Their hosted flows handle the required payment details. The application handles identifiers, amount, currency, status and credit records, not full card numbers. Pancake acts as Merchant of Record for an enabled Pancake transaction. Neither provider currently accepts real purchases on this public website. See Pancake privacy information and PayPal privacy information.

Retention, deletion and moderation

The preview has no public portrait or generated-video archive. Hosting logs follow the configured hosting retention. Correspondence is kept for request handling and necessary security/legal obligations; request deletion by email. Experimental media has no implemented fixed automatic deletion period.

In authorized local tests, unused portraits and completed media can be removed through available account controls or by the operator. Active or unresolved tasks may require their inputs until the outcome is resolved. Media deletion can leave minimal account, task and transaction metadata. Numeric production retention periods for accounts, payments, support, safety review and media, plus backup deletion rules, remain launch requirements; this policy does not invent them.

The AUP moderation workflow is a launch prerequisite. Before public generation, we must disclose the actual screening provider/manual-review arrangement, what information it receives and its retention. A policy alone does not demonstrate implementation.

Rights, examples and updates

Where applicable, you may request access, correction, deletion, restriction or portability; object to processing; withdraw consent; and complain to your local data-protection authority. Withdrawal does not invalidate earlier lawful processing. We do not sell visitor portraits or automatically publish them as examples.

Displayed fictional portraits are demonstration inputs, not visitor uploads or proof of successful output. Production processing purposes/legal bases, applicable response deadlines and legal operator details must be completed before launch. Material changes will be reflected on these shared policy pages. Applicable privacy rights remain preserved.

Terms · Content policy · Contact