Privacy policy
Understand how your information supports your creation.
Updated and effective: October 6, 2026
1. Scope and contact
This policy explains how Hoshilea (hoshilea.com) handles information when providing accounts, AI creation, workflows, short dramas, asset management and credits. Contact the support address below about privacy, accounts or data.
2. Information we process
- Account information: registration email, nickname, verification status and login methods. Passwords are used to verify sign-in and stored as hashes, not in plain text.
- Google identity: when you choose Google sign-in or linking, we receive basic identity information including the account identifier, email, email verification information and nickname to authenticate and link accounts. We do not request access to Gmail, Drive or Calendar.
- Creation information: uploaded images, video, audio and other assets; prompts, scripts, character information, workflows and storyboards; generated results, task states and associated model usage.
- Credits and orders: credit sources, use and expiry records; top-up order states, amounts and payment transaction identifiers. Card information is handled on Stripe checkout; the platform does not collect complete card numbers.
- Service operation: session records, security verification results, service errors and necessary access logs to protect accounts, troubleshoot and operate the service.
3. How information is used
We use this information for sign-in and email verification, saving and retrieving your work, executing model tasks you initiate, confirming payments and credit changes, answering support requests and preventing account misuse or abuse of signup benefits. Administrators handle operations and support according to their permissions. Google sign-in does not grant access to other Google services.
4. External services and data transfer
When you initiate relevant actions, necessary information may be sent to these services:
- Google: identity verification that you choose to use. Google privacy policy
- AI models: necessary prompts, references, scripts or speech text are sent to MiniMax or other integrated providers for your selected tasks. Avoid unnecessary identifying or sensitive information.
- Stripe: top-up payments, refunds and payment-state notifications you initiate. Stripe privacy policy
- Resend: account emails such as verification and password recovery.
- Cloudflare Turnstile: human verification for eligible signup benefits, processed by Cloudflare. Cloudflare privacy policy
- Hosting: Railway currently hosts the app and data. External services may process information outside your region; their own policies apply to their processing.
We do not request your other Google service data through Google sign-in and do not sell identity information received through Google sign-in.
5. Cookies and account security
Necessary cookies maintain sign-in and short-lived Google verification state. Security verification services may also use browser information needed for verification. Disabling necessary cookies may affect sign-in. Account settings show active session counts and the current session expiry; after re-verifying your identity, you can sign out other sessions. Do not share passwords or account verification links.
6. Retention, deletion and your choices
Account and creation data are kept for the period needed to provide the service. Assets in the recycle bin still use storage. Permanent deletion removes the corresponding files; back them up first. Contact support for account closure, a copy of personal information or deletion requests. We verify identity and handle requests that can be carried out. Information needed for order and credit reconciliation, security or legal retention may remain. Processing in backups or external services may be delayed.
You can change your nickname, unlink Google or avoid external generation services. Before unlinking, retain a working email-and-password login. Unlinking in Hoshilea does not delete your Google account; you can also manage app permissions in your Google account.
We retain necessary eligibility records to prevent repeat claims of signup benefits. Unlinking a login method or changing the email of an external account does not reset new-user eligibility.
7. Policy changes
This policy may change as features and external services change. Updates are dated on this page. Important changes to information processing will be announced on the website or by account email.