Privacy Policy

Hit the Road Dude AI — Privacy Policy

Last updated: October 21, 2026

Hit the Road Dude AI ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy ("Policy") explains how we collect, use, store and share your personal information when you use Hit the Road Dude AI at https://hittheroaddude.fun (the "Service"), and the rights available to you.

Please read this Policy before using the Service. By using the Service, you agree to this Policy. We may update it from time to time and will tell account holders about material changes by email and with a notice on the site.

1. Data controller

The data controller for this Service is:

• Name: Wang Wei (王维), an individual operating the Service
• Country: People's Republic of China (no separate business address; the operator is an individual)
• Privacy email: support@hittheroaddude.fun
• Data Protection Officer: not applicable

2. Personal information we collect

2.1 Information you provide directly

• Photos you upload: the one photo you choose for your video (of your pet, yourself, or a person who agreed).
• Videos we generate for you: stored so you can watch and download them.
• Account information, if you create an account: name, email address and password (stored only as a hash). If you sign in with Google or GitHub, the basic profile those services share with us: name, email and profile picture.
• Payment information: the order status, amount, currency and the email used at checkout. Full card numbers are never stored by us; card data is processed by our payment processor (see Section 5).
• Communications: emails and support requests you send us, and any content report you file.

2.2 Information we collect automatically

• Device and network: IP address (used for security and rate limiting), browser type, operating system, device type, approximate country, time zone.
• Usage data: pages visited, buttons used (for example "generate" or "download"), and the steps of a purchase.
• Log data: request timestamps, error logs and performance metrics.
• Moderation records: the result of the automated safety check on each photo (for example a safety score) and any human review decision.

3. How we use your information

| Purpose | Legal basis | | --- | --- | | Generating and delivering your videos, keeping your credits and account | Contract performance | | Billing, receipts and refunds | Contract performance; legal obligation (tax and accounting) | | Customer support | Contract / legitimate interests | | Service notifications (purchase, security, policy changes) | Legitimate interests | | Safety: checking photos for prohibited content, handling reports, preventing fraud and abuse | Legitimate interests; legal obligation for illegal content | | Understanding and improving the Service | Legitimate interests, or consent where the law requires it | | Legal compliance | Legal obligation |

We do not sell your personal information, we do not use it for targeted advertising, and we do not use your photos or videos to train AI models. We do not send marketing emails; if we ever do, every email will include an unsubscribe link.

4. Cookies

We use necessary cookies to keep you signed in (including as a guest), remember your language and complete checkout. If we add analytics cookies, they are only set where the law allows it or after you agree in the cookie banner. You can delete cookies in your browser at any time; the Service may then forget your guest session.

5. How we share your information

We share personal information only with the service providers we need to run the Service, only for that purpose, and under contracts that protect it:

• Waffo Pancake — our payment processor and merchant of record. It collects your payment and billing details directly and processes card data under its own privacy policy; we never receive full card numbers.
• fal.ai — runs the AI models. Your photo is sent to fal.ai for the safety check and to generate the video.
• xAI — provider of the Grok Imagine Video 1.5 Lite model, which processes your photo through fal.ai to create the video and apply its safety filters.
• Cloudflare — hosting, database and video storage.
• Resend — sends service emails (for example the link to restore a purchase).
• Google and GitHub — only if you choose to sign in with them.
• Authorities — where the law requires it, for example to report child sexual abuse material.

We do not share your information with anyone else unless you ask us to or the law requires it.

6. International transfers

Our providers are located in several countries, including the United States, and the operator is based in the People's Republic of China, so your information may be processed outside your country. Where the law requires it (for example for data from the EU or UK), transfers are protected by standard contractual clauses or equivalent safeguards offered by these providers.

7. How long we keep your information

• Uploaded photos: kept only in fal.ai's temporary storage while your video is generated; we do not copy them to our own storage.
• Videos made without an account: available for download for 3 days.
• Account data and videos in an account: until you delete them or your account; account data is deleted 90 days after account deletion.
• Moderation records: up to 12 months, or longer if needed for a legal case or a report to the authorities.
• Payment records: as long as tax and accounting law requires (usually up to 7 years).
• Support emails: up to 24 months after the conversation ends.

8. Your rights

Depending on where you live (for example under the GDPR in the EU/UK, the CCPA/CPRA in California, the LGPD in Brazil or the LFPDPPP in Mexico), you have the right to:

• access the personal information we hold about you and receive a copy (portability);
• correct inaccurate information;
• delete your information;
• restrict or object to certain processing;
• withdraw consent at any time, where processing is based on consent;
• not be discriminated against for exercising these rights.

To exercise any right, write to support@hittheroaddude.fun from the email linked to your account or purchase. We reply within 30 days. You can also complain to your local data protection authority.

9. Security

Data is sent over HTTPS. Passwords are stored only as hashes, secrets and payment keys are encrypted, and access to user data is limited to the person who runs the Service. If a data breach affects your personal information, we will notify you and the competent authority without undue delay and, where required, within 72 hours of becoming aware of it.

10. Children

The Service is intended for adults aged 18 or older. We do not knowingly collect personal information from anyone under 18, and photos of children must not be uploaded. If you believe a child has given us personal information, contact us and we will delete it.

11. Changes to this Policy

If we change this Policy we will update the "Last updated" date above and, for material changes, tell account holders by email before the change takes effect.

12. Contact us

Questions about this Policy or your data: support@hittheroaddude.fun

This Policy is referenced by our Terms of Service, section 11.