This policy describes how minimax-h3ai.video (the “site”, “we”) handles information when you use https://minimax-h3ai.video.
It applies only to this website. It does not describe MiniMax’s Hailuo apps, official API, or open weights.
Effective 19 August 2026. Contact for privacy requests: hello@minimax-h3ai.video.
We are an independent third-party interface for the MiniMax H3 video model (also called Hailuo 3). We are not MiniMax.
We do not store full card numbers. The processor named at checkout (typically Stripe; PayPal or another listed processor if offered) handles the charge. We keep a customer or subscription token, the plan or pack you bought, credit movements, and whether a refund succeeded.
cf-connecting-ip for quota; a hashed form is used for anonymous allowance)h3_vid: first-party visitor id, HttpOnly, up to 1 year. Used so the anonymous allowance is per visitor, not per refreshNEXT_LOCALE, banner-dismiss, and utm_source when presentWe do not collect health, biometric, or precise GPS data. We do not knowingly collect information from children (see section 11).
We do not use your prompts or clips to train a public dataset of our own, and we do not sell them as a product.
If you are in the EEA, UK, or Switzerland, you may object to processing based on legitimate interests. Write to the email above.
We share only what that party needs to do its job:
| Party | Why |
|---|---|
| Model providers (MiniMax for H3 jobs; the published free-tier engine for anonymous / free-credit jobs) | Prompt, media, and settings for that job |
| Payment processors (Stripe and any other processor named at checkout) | Charge, invoice, refund |
| Cloud infrastructure (Cloudflare Workers, D1, R2 object storage) | Host the site, database, and files |
| Email (Resend, when verification or transactional mail is on) | Deliver the message |
| Analytics (Google Analytics, Microsoft Clarity — only if enabled) | Usage measurement |
| Auth providers (Google, GitHub) | Complete sign-in you started |
| Bot protection (Cloudflare Turnstile) | Tell humans from automated abuse |
| Authorities | When the law requires it |
We do not sell personal information as that term is used in CCPA/CPRA. We do not share it for cross-context behavioural advertising.
Processors may be outside your country. Cloudflare and typical US processors rely on Standard Contractual Clauses or an adequacy decision where they say they do. We do not operate a separate “EU-only” region.
The site is hosted on Cloudflare. Generation providers and Stripe (or the checkout processor) may process data in the United States or other countries. If a transfer tool is required, it is the one that provider documents (usually Standard Contractual Clauses).
| Data | Period |
|---|---|
| Anonymous outputs | About 24 hours, then they are eligible for deletion. Download them if you need a copy |
| Signed-in finished work | About 7 days on the account unless you download or delete sooner |
| Account profile | While the account is open, then deleted or anonymised after a deletion request except as below |
| Billing and credit ledger | As long as tax, accounting, and card-dispute rules require (often years, not days) |
| Security and error logs | A short operational window, then rotated |
Visitor cookie h3_vid | Up to 1 year, or until you clear cookies |
“Eligible for deletion” means we schedule removal from our storage; copies in backups or a provider’s cache may linger for a short technical period.
You can ask us to:
Send requests to hello@minimax-h3ai.video from the email on the account. Say which right you are using. We will not charge for a request we are required to honour. We may need to verify it is you.
We aim to reply within 30 days, or the shorter period your local law sets.
Strictly necessary: h3_vid, session and sign-in cookies, security (Turnstile). The generator and anonymous quota do not work without them.
Preferences: locale, banner dismissed, localStorage UI flags.
Analytics (optional, only if enabled in settings): Google Analytics, Microsoft Clarity. Disable them with your browser’s tracking protection, an analytics opt-out add-on, or by asking us to turn the integration off.
We do not run a separate cookie-consent wall today. If we enable non-essential analytics for visitors in a region that requires prior consent, we will add a choice before those scripts run.
No method is perfect. If we learn of a breach that legally requires notice, we will email affected accounts and say what we know.
The service is not directed at children under 16. Do not create an account or upload a child’s face or voice for them. If we learn we have collected personal information from a child under 16, we will delete it. US COPPA uses 13 as a floor; we set 16 so the same rule covers stricter regional ages.
Privacy request plus the right you want (access, delete, …)We have not appointed a Data Protection Officer. Privacy mail is read by the operator of this site.
We will change the date at the top when this policy changes. If a change is material (new category of data, new sale, or a weaker right), we will also note it on Updates or email signed-in users when we can. Continued use after the new date is acceptance of the updated policy.