Privacy Policy

1. What This Policy Covers

This policy explains what information Hit the Road Dude (the "Service", configured for hittheroad-dude.com) collects, how it is used and shared, and the choices you have. By using the Service you agree to this policy.

2. Your Photos, in Short

• Uploaded photos are used only to fulfill the photo-restoration or video-generation request you authorize and to run configured automated safety checks on those inputs. They are sent to our AI providers for those purposes and nothing else.
• We do not use your photos to train our own models, and we do not sell them.
• Only upload photos you have the right to use. People shown must be you or people who have consented, and you must have the necessary rights to pet photos. Never upload a minor’s photo without a parent or guardian’s consent.
• You can ask us to delete your photos and videos at any time via a support ticket.

3. Information We Collect

• Account information. Your email address, display name, authentication records and preferences needed to operate your account. Passwords for email accounts are stored as salted hashes; we never see them in plain text. Available sign-in methods are shown on the sign-in screen.
• Content you provide and create. Your uploaded photos, selected tool and output settings, any optional scene or topic information requested by that tool, and your restored still photos or generated videos. The primary Hit the Road Dude workflow uses one photo of a person, cat or dog; auxiliary tools explain their own inputs.
• Gift links. If you create a gift link, people who open it see its message, credit allowance and available status. We record claims and show the sender the number claimed. The public gift page does not include account or payment details.
• Payment information. Checkout is currently unavailable. When payments are available, payment information is handled by the payment provider shown at checkout. We keep the order, subscription and transaction references needed to provide purchased entitlements; we do not store full payment-card numbers.
• Technical data. Server logs may include IP addresses, timestamps and request metadata. Session cookies keep you signed in and remember your language preference. Account and request signals help prevent abuse and repeated submissions.
• How you found us and what you did on the site. When optional analytics are enabled and the required consent is given, we record permitted page, referral, campaign and interaction information with visitor and session identifiers. This can include adding photos, changing settings, requesting generation, opening checkout or requesting a download. Account and task identifiers can link relevant records after sign-in. Necessary business records are kept separately to operate the service and reconcile orders and credits.
• Analytics. After you accept analytics, Google Analytics measures visits and selected tool actions on public pages. The same choice also controls the site’s own optional analytics described above. We do not send photos, account details or text you enter to Google through these analytics. Page URLs sent to Google exclude query parameters and fragments; private and account routes are excluded. Advertising signals and ad personalization are disabled. Google still receives normal connection metadata, such as your IP address and browser information; this does not make the collection anonymous.

4. How We Use Information

• To operate the Service: your photos and the selected tool’s required settings are sent to third-party AI rendering providers through Crun, Kie, Comet or Metaso and their model providers, as needed for the photo-restoration or video-generation request you authorize.
• To keep the Service safe: SeeAPI checks the text and images required by the configured input-safety process. We do not claim that every finished video has received a separate output-safety review.
• To store and serve your photos and videos privately. Production image and video files are stored in private Cloudflare R2; the database stores task metadata and resource references. Local development may use local files. Media access requires account authorization or time-limited, purpose-specific links. Files are not automatically published to a public gallery.
• To maintain order, subscription, credit, refund and gift records, and to reconcile payment events if payments are enabled.
• To maintain security: preventing abuse and duplicate charges, enforcing the content rules in our Terms, and debugging failed renders.
• To improve the Service: measuring permitted usage when analytics are configured and consented to, and investigating errors reported through support.
• To run the business: keeping the transaction and credit records needed for reconciliation, accounting and support.
• To help you continue work: browser draft storage can keep prepared photos and settings so a sign-in or canceled checkout does not erase your work. Local photo drafts expire after 24 hours. This is separate from server-side task and media retention.
• To send service communications related to your account when the relevant delivery service is configured.

We do not sell your personal information.

5. How Information Is Shared

Only with parties needed to run the Service:

• AI rendering providers through Crun, Kie, Comet or Metaso, which receive the inputs needed for an authorized photo-restoration or video-generation request;
• Infrastructure providers, including Cloudflare R2 and the applicable database host for the deployed service, or a local server during development;
• Waffo, authentication and optional analytics providers, only when the corresponding integration is enabled and needed as described above;
• SeeAPI, which receives the text or images needed by the configured safety checks;
• Configured service-communication providers, only as needed to deliver account notices;
• Authorities, where required by law or to protect the Service, its users, or people depicted in content.

Private media. Uploads and generated videos are not automatically published in a public activity feed. Public gift links show only their gift description, allowance and status; account and payment details are not part of that public page.

6. Retention and Deletion

• Your photos and videos are kept so you can view and download them, until handled under an applicable deletion request or operational retention rule. Finishing a render does not immediately delete its uploads. There is no promise of automatic media deletion or a particular backup rotation schedule.
• To request deletion of photos, videos, or your account, open a support ticket and identify the media, task or account involved. Records needed for legal, payment or security purposes may need to remain after media removal.
• Transaction history, credit changes, gift claims and security records are retained for reconciliation, accounting, support and abuse prevention.
• The site’s own first-party optional analytics have a 90-day retention setting. Google Analytics retention is controlled separately by the data-retention settings of the Google Analytics property. This does not promise that every business record or backup is erased at exactly 90 days or that deleting an account automatically deletes all related records. Browser photo drafts have a separate 24-hour expiry.

7. Security

Access to stored files is restricted by account authorization or time-limited links. Public deployments require HTTPS; local development may use HTTP. No method of storage or transmission is perfectly secure, so we cannot guarantee absolute security — please use a strong, unique password.

8. Your Choices and Rights

• View and download your videos in your account; edit account details in settings.
• Depending on where you live, you may have rights to access, correct, export, or erase your personal data — exercise them via a support ticket.
• If someone uploaded your photo without permission, contact us and we will remove it.
• You can reject optional analytics in the consent prompt, or change your choice and withdraw consent at any time through “Analytics settings” at the bottom of public pages. You can also limit analytics cookies through your browser settings or extensions.

9. Children

The Service is not directed at children under 13 (or the higher minimum age where you live). We do not knowingly collect their data; if you believe a child has provided data or a minor's photo was uploaded without guardian consent, contact us and we will delete it.

10. International Processing

We and our providers may process data in various countries. Processing by Crun, Kie, Comet, Metaso, SeeAPI and any other enabled provider is subject to that provider’s applicable terms and privacy practices. Contact us if you need information about a particular processing request.

11. Changes and Contact

We may update this policy; the date above (October 24, 2026) reflects the latest revision, and material changes will be announced in the product. Questions or requests: open a support ticket from your account menu (Settings → Support tickets), or email support@hittheroad-dude.com. You can email us without an account.