Privacy Policy

1. What One Hub All AI does

One Hub All AI (onehuballai.com; “we”, “us” or “our”) provides a home for creative tools and a shared account for supported products. This policy covers our website, shared sign-in service and the account, membership, credit and payment-record features used by our products.

Our services include video, image and text processing tools, as available. Current browser-based video tools process video on your device. Credit-powered model apps are not currently available. Subscriptions and credit purchases are not open. A feature described here applies when that feature is available to you; this policy does not announce a launch or grant paid access.

2. Information we handle and why

Account and email sign-in

When you request an email sign-in link, we use the address you provide to deliver a short-lived link and verify control of that address. A link expires after five minutes and can be used once. We store its verification value as a hash. Your verified email is associated with your sign-in account; no email password is required.

Sessions, security and browser storage

Home stores a language preference cookie when sign-in starts so you can return to the same language after signing in. It contains only the selected language, not your identity or account details, and lasts for the browser session.

We use essential cookies to complete sign-in and maintain your sessions. The shared sign-in service and each product have their own sessions. Security-related information can include your IP address, browser information, request times and rate-limit records. We use it to prevent abuse, protect accounts and investigate failures.

Home stores original request details in your browser’s session storage to help you explicitly recover a purchase or plan-change request with an unknown result. Depending on the action, these details include the chosen plan and catalog version, a purchase reference, the original billing-period number and times, and a request identifier. They do not include payment-card details, login credentials or checkout URLs.

We attempt to clear the corresponding recovery entry after a confirmed creation or a definite rejection. If browser storage cannot be updated, the original entry may remain. Unresolved entries have no additional app-set expiry and may remain until your browser or you clear the site’s session data. Signing out does not guarantee that this storage is cleared. You can use your browser’s site-data controls to remove it; removing a local recovery entry does not cancel a payment or subscription.

Blocking essential cookies can prevent account features from working. The current Home website does not embed advertising or third-party marketing analytics scripts.

Memberships, credits and payments

For supported account features, we keep the records needed to show memberships, credit grants and usage, confirmed payments, billing periods, refunds and subscription actions. These records may include an internal account identifier, plan, amount, currency, payment reference and timestamps.

When purchasing is available, checkout is handled by Waffo. We send the selected product and an internal buyer reference to that service. Our own website code does not collect or store full payment-card numbers or card security codes. Waffo’s handling of information you enter at its checkout is governed by its own notices and terms.

Support

If you contact us, we receive the information you include in your message and use it to answer your request, verify account ownership where needed and resolve the issue. Please do not send passwords, payment-card details or sign-in links.

Legal bases for processing

Where applicable law requires a legal basis, we process information to provide the service and perform our agreement with you, comply with legal obligations, and pursue legitimate interests such as security, fraud prevention, support and service improvement, balanced against your rights. Where consent is required, we rely on your consent; you may withdraw it without affecting earlier lawful processing. Providing information needed for an account or transaction is necessary for those features.

3. Google sign-in information

When you choose Google sign-in, we request the openid, profile and email permissions. Google may provide a unique Google account identifier, your email address and its verification status, and available basic profile information such as your name and profile image.

We use this information to authenticate you, create or link your One Hub All AI sign-in account and protect that account. Our sign-in service keeps the Google account connection and basic profile information. Our central account service identifies your sign-in account by a service identifier and a stable account identifier; it does not use your email address as its central identity key.

Google credentials are processed during sign-in. We do not retain Google access tokens, refresh tokens or ID tokens in our account records. Necessary One Hub All AI session cookies are separate from those Google credentials.

We do not request access to your Gmail messages, Google Drive files, contacts, calendar or Google Photos library, and we do not receive your Google password. We do not sell Google account information, use it for advertising, submit it to an AI model or use it to train or improve AI models.

Our handling of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements where applicable. See Google’s Privacy Policy for Google’s own processing.

4. Videos and AI features

The current browser-based video workflow reads and processes the files you select in your browser on your device. It does not upload those video files to One Hub All AI for processing. The browser downloads model and runtime files; downloading a model does not send your selected video to that model’s publisher. Video processing does not require Google account information.

Processing can use temporary browser storage or memory for output. Files you choose to save remain on your device under your control. Account sessions, membership checks and static-resource requests are separate from local video content.

Any future feature that sends prompts, images, video or other content to a remote model will need its own clear data-handling information before use. Do not assume this local-video description applies to a future cloud feature.

Our tools must not be used to create or distribute non-consensual intimate imagery, including AI-generated imagery. We do not provide a feature intended for that purpose, and we do not use Google account information to create such content. Local processing does not mean that we inspect or moderate the contents of your videos.

5. Sharing and service providers

We share information as needed to provide the service you request: Google authenticates Google sign-in; Cloudflare supplies hosting and database infrastructure; and Waffo handles checkout when purchasing is available. Hosting and database services process account and technical information. When email sign-in is enabled, our configured email delivery provider receives the recipient address and requested sign-in message for delivery.

These services receive information for their respective functions. They do not receive your local video merely because you use Google sign-in or check your membership. We use Cloudflare’s global network to host and operate our services. Depending on the service and configuration, information may be processed or stored in countries or regions outside your own. Other service providers may also process information where they operate, subject to their own privacy notices. Where applicable law requires safeguards for international transfers, these may include an adequacy decision or appropriate contractual safeguards. Contact us for information about applicable safeguards and how to obtain a copy where available.

We may disclose relevant records when needed to investigate fraud or security incidents, resolve payment disputes, meet legal obligations or protect people’s rights. We do not sell your personal information. A future change to our services or providers must be reflected in the information we give you about that processing.

6. Retention and security

We keep account and connection information while it is needed to provide and secure your account. Short-lived sign-in links stop working at expiry; expired verification, session and rate-limit records are removed by scheduled maintenance. Expiry and deletion are different: a record may remain until a maintenance batch removes it.

Account records and financial or security records do not all have one deletion deadline. Payment, credit-ledger, audit and dispute records may need to be retained for accounting, security, consistency or legal obligations, including after an account-data request. We will explain relevant retention limits when responding to a request rather than promise that every record can immediately be erased.

Our safeguards include HTTPS for deployed services, secure and HttpOnly session cookies, hashed central session tokens and email-link verification values, and access controls that separate accounts and products. Access to account and payment operations is checked on the server. Our current implementation does not keep Google OAuth credentials in account records.

7. Your choices and data requests

You can browse the public Home pages without an account, choose email sign-in instead of Google and sign out of an individual product. Signing out ends that product’s session; it is not an account-deletion request.

You can review or revoke Google’s authorization in your Google Account connections settings. This stops the Google authorization. It does not by itself remove the account records held by One Hub All AI or cancel a subscription.

To request access to, correction of or deletion of your account information, email support@onehuballai.com, preferably from the address associated with the account. Tell us which request you want to make. We may need to verify ownership before acting. Requests are handled through support; there is no automatic account-deletion or Google-unlink button in the current product.

We will assess what can be removed, corrected or de-identified and explain any records we must retain. Do not send a password or a one-time sign-in link as proof of ownership.

Additional privacy rights and children

Depending on where you live, you may also have the right to obtain a copy of your information, receive or transfer it in a portable format, restrict or object to certain processing, withdraw consent, or complain to a data protection authority. Contact us to exercise applicable rights; we will respond within the time required by law and may verify your identity. Some requests are subject to legal exceptions.

The service is not directed to children under 13, or a higher minimum age where local law requires it. If you believe a child below the applicable age has provided personal information, contact us so we can investigate and take appropriate action.

8. Changes and contact

We will update this page when our data-handling practices change and revise the date above. Material changes affecting your choices will be communicated through the relevant service. For questions about this policy or One Hub All AI’s handling of your information, contact support@onehuballai.com. See also our Terms of Service.