Learn how H3 Max processes account details, images, prompts, generated videos, payments, and analytics, and how to request access, correction, or deletion.
2026/09/09
H3 Max at h3-max.me is operated by TerenceXU, an individual based in China. In this policy, “H3 Max,” “we,” and “us” refer to that operator.
We are responsible for the personal information we process to run your account, provide video generation, and operate this website. Contact [email protected] about this policy or to exercise your privacy rights.
This policy covers our website and related support communications. It does not describe how a social network handles a video after you publish it, or replace the privacy notices of services you visit independently.
Account information. We receive your name, email address, sign-in details, and profile information you provide. If you choose Google sign-in, Google supplies the account identifier and basic profile information authorized through that sign-in process, such as your email, name, and profile image. H3 Max does not receive your Google password. For email-and-password accounts, the authentication system stores a password hash rather than the original password.
Images, prompts, and generation records. We process uploaded images and their file information or embedded metadata, optional ending images, prompts, generation settings, and generated videos. We also store task identifiers, status, timestamps, errors, and the credit transactions associated with each task. Product Agent creates an advertising plan and prompt from your images; those generated instructions are part of the processing record. Images and prompts may contain personal information about you or other people.
Payment information. Waffo provides hosted checkout for new purchases; older Creem purchases remain with Creem. We receive information needed to recognize your payment and supply the purchase, including customer and order identifiers, subscription status, amounts, billing periods, and payment or refund events. Payment notifications can include billing or transaction details supplied by the payment provider. We do not collect full card numbers or card security codes through H3 Max forms.
Support messages. We receive the name, email address, message, and any attachments you send to support. Include only information needed to explain the issue.
Device and usage information. Our website, hosting, and security services may receive IP addresses, browser and device information, request timestamps, referring pages, and operational logs. With your permission, Google Analytics 4 collects information about visits and interactions with the website. The cookies section below explains this separately from information needed to provide your account.
You can browse public pages without creating an account. Account and generation information are needed when you ask us to provide those features; if you do not provide the required information, we cannot complete the request. Optional images, profile details, and support attachments should be limited to what you want us to process.
For Text to Video, we send your prompt and selected settings to fal.ai to generate a video with H3 Max Turbo, fal.ai's optimized version of the MiniMax H3 model developed by MiniMax. All three video generation modes use this model.
For Image to Video, we also make the starting image and any supported ending image available to fal.ai for that request.
For Product Agent, resized copies of the starting image and any supported ending image are first sent to APIMART, together with the requested duration and instructions for advertising direction. APIMART routes the request to an AI model to analyze the image and prepare a plan. The resulting prompt, image inputs, and video settings are then used for generation through fal.ai. Ordinary Text to Video and Image to Video do not use this additional Product Agent planning step.
Generation providers may assess requests through their safety systems. Automated checks can make mistakes; contact support if you believe a refusal was incorrect.
Generated videos are transferred from the generation provider to private object storage for delivery through your account. The public example gallery is separate from your uploads and History. Submitting a generation request does not automatically publish your input or output as an example, and it does not authorize us to use it in public marketing.
H3 Max uses generation content to carry out your request, maintain History, investigate reported problems, and address misuse. We do not use your uploads, prompts, or results to train our own AI models. The processing performed by upstream providers depends on their applicable service agreements, model terms, and settings; this policy is not a promise that every provider offers zero retention or identical training restrictions. You can ask support for information about the providers used for your request.
We use account and generation information to authenticate you, run tasks, deliver downloads, preserve your History, and maintain your credit balance. Purchase records let us activate subscriptions, issue credits, reconcile payments, and handle billing disputes. Support messages allow us to respond to requests and investigate specific failures.
Operational and security information helps us diagnose errors, limit abuse, protect accounts, and keep the service available. Website analytics helps us understand which pages people use and where visitors encounter difficulties. We also retain information when required for accounting, legal obligations, or the establishment or defense of legal claims.
Where laws such as the GDPR require a legal basis, we rely on performance of our contract for the account and generation features you request; legitimate interests for proportionate security, service reliability, and support operations; legal obligations for required records and disclosures; and consent where required for optional tracking or communications. Legitimate-interest processing must be balanced against your rights. Agreeing to our Terms does not, by itself, provide consent for optional cookies.
We disclose information to the providers needed for the relevant feature:
Authorized personnel may access information when needed for support, operations, security, or legal obligations. We may also disclose information to professional advisers, authorities where legally required, or a successor involved in a business transfer, with the protections required by applicable law. A business transfer does not authorize unrelated new uses without the notice or consent the law requires.
Provider details are available in fal's Privacy Policy, APIMART's Privacy Policy, and Google's explanation of partner-site data. We remain responsible for our own processing and for obligations applicable to providers acting on our behalf.
Authentication cookies support sign-in and session security. Browser storage also saves generator settings and batch drafts so you can resume after signing in or reloading. Clearing site data removes these local drafts and may sign you out; it does not delete records stored in your H3 Max account.
We load Google Analytics 4, with measurement ID G-KMZ492L64M, only after you choose Allow analytics. Until you agree, or when you reject analytics, we do not load the Google Analytics tag or send it website measurements. This can involve cookie or device identifiers, page addresses, referral information, and information about your browser and device. Our GA integration does not intentionally send your uploaded images, prompt contents, generated videos, or account email as analytics event parameters. Avoid placing private information in page URLs.
Choose Reject analytics to continue without Google Analytics. You can reopen Cookie settings at the bottom left of any page to change your choice. Rejecting analytics after allowing it stops further GA4 collection and clears the GA cookies accessible to this website. It does not erase information already received by Google; contact support about a data-deletion request.
We remember your choice in this browser for up to 180 days. After that, or if you clear the saved preference, analytics remains off until you make a new choice. The preference is specific to your browser and does not follow your account to other devices. If browser storage is unavailable, a choice applies only to the current tab until you reload.
Analytics consent does not authorize personalized advertising. Our Google tag keeps advertising storage, advertising user-data use, and advertising personalization disabled. Rejecting analytics does not prevent sign-in, video generation, or purchases. Necessary account storage and any Google sign-in you choose are separate from GA4.
You can also remove or restrict cookies in your browser. See our Cookie Policy for the storage categories and controls.
Private media. Uploads and completed videos are stored in a private bucket. The application checks account ownership before returning media access. Playback and download links are temporary bearer links: someone who obtains a valid complete link may be able to use it until it expires or the file is removed. Treat those links as private. Generation providers also receive the access needed to process your request.
History and uploaded images. Saved task media is retained to provide your History. Deleting a completed, failed, or cancelled task removes it from visible History and queues its media for removal. An image still needed by another retained task is not removed with the first task. Uploads not associated with a retained task become eligible for background cleanup after seven days. Cleanup may take additional time if processing is delayed or retried.
Prepared ZIP downloads. Prepared download archives expire after seven days and are cleaned up in the background. Deleting a source video also invalidates its prepared downloads. Copies you have already downloaded are outside our control.
Other records. Deleting a video is not a request to erase every associated record. Task metadata and prompts may remain in the database after media deletion. Account information is kept while needed to provide the account. We retain payment, credit, support, security, and dispute records for the periods needed for their stated purposes, including applicable accounting requirements and claim periods. Retention depends on record type, whether a matter remains unresolved, and any legal requirement to preserve it.
You can request account closure or broader deletion by emailing support. We will identify any information that must be retained and the reason. Deletion from backups and provider systems follows the applicable retention and deletion arrangements; deleting History does not instantly erase every third-party copy. Information that must remain will be restricted to its permitted purpose.
H3 Max is operated from China. Our hosting, storage, payment, and AI providers may process information in other countries or regions, including outside your country of residence. Processing locations depend on the provider and the feature used; those locations may have different privacy laws. Private storage does not mean that information stays within one country.
Contact [email protected] for information about the providers, processing locations, and safeguards applicable to your request. Where applicable law requires a specific transfer mechanism or separate consent, those requirements apply independently of these Terms and this policy. Acceptance of this policy is not blanket consent to international transfers.
Depending on your location and the law that applies to us, you may have the right to access or obtain a copy of personal information, correct inaccuracies, request deletion, restrict processing, or receive portable data. You may also withdraw consent for processing based on consent; withdrawal does not affect processing that was lawful before withdrawal.
Right to object: where applicable, you may object to processing based on legitimate interests, including related profiling. You may object to direct marketing at any time. If applicable law gives you rights concerning sale, sharing, targeted advertising, or an appeal of a denied request, contact support to exercise them. Those legal terms can include disclosures other than a sale for money.
Email [email protected] with “Privacy request” in the subject. We may ask for information proportionate to verifying your identity or an authorized agent's authority. We will respond within the period required by applicable law and explain any lawful extension or refusal. You may ask us to review a refusal and may complain to the supervisory authority or regulator responsible for your location. We will not retaliate against you for exercising a legal right.
You can correct available profile fields in account settings and delete eligible videos from History. Account closure and broader data requests are handled through support; this policy does not imply that there is a self-service account-deletion button.
H3 Max is intended for people who are at least 18 and legally able to enter into a contract. It is not directed to children. If you believe a child has provided personal information to us, contact support so we can investigate and take the steps required by law.
Do not submit identity documents, financial credentials, medical records, or other sensitive personal information unnecessary for video generation. Obtain the permissions needed before uploading another person's image or information. We do not offer identity verification or a facial-recognition service through the generator.
We use access controls and private storage to reduce unauthorized access. No website, storage system, or transmission method can eliminate every risk. Notify support if you suspect account misuse or exposure of a private media link.
We will update the effective date when this policy changes. For material changes, we will provide additional notice through the website or account communications where appropriate, and obtain any consent required for a new use. Contact details and privacy requests remain available at [email protected].
