Your photos.
Your privacy.

Selecting photos creates a local preview. Clicking Create video uploads a prepared copy for private AI processing. Your media is not added to a public gallery.

Photo previews stay on your device

When you choose a photo in the casting panel, your browser opens it locally. The preview does not upload the image to our servers, store it in an account or send it to an AI service. Before Google sign-in, a prepared photo and your consent choice are saved temporarily in this tab’s session storage to restore your preview after the redirect. The draft is removed when restored, rejected if older than 30 minutes, and normally cleared when you close the tab. Otherwise, leaving or reloading clears the preview.

Accounts and site requests

Google sign-in uses your name, email address and profile image to create and authenticate your account. Account records and sessions are stored in our database. We request only basic profile and email permissions. Passwords and private authentication credentials are not displayed publicly. Email registration stores your email address and a protected password hash, and requires email verification before password sign-in. Resend delivers account verification and password-reset emails. We do not send your selected photos in these messages.

Services supporting this website

Vercel hosts the website, Neon stores account and application records, and Cloudflare provides domain services and private media infrastructure. Google provides optional sign-in and, only with your analytics choice, site measurement. These services may process requests outside your country. Cloudflare stores your uploads and results in private storage.

AI video model and processing

When you submit a video, we use Seedance 2.0 Mini (model identifier: seedance-2.0-mini) through APIMart’s API. APIMart is the API platform that provides access to this underlying AI video model. We send APIMart links to your prepared photo and our fixed reference video, together with generation instructions, so the model can process those inputs and generate your requested clip.

Prompt safety screening

Waffo receives the actual text prompts for safety checks before image or video generation. This integration does not send Waffo your photos, videos, media URLs, name or email. We store the prompt fingerprint, verdict, matched policy categories, Waffo request identifier and check time with the generation record for enforcement and recovery; these records have no automatic expiry.

Waffo documents its prompt scan as stateless and says it does not retain the original prompt text after returning the verdict. See its prompt safety documentation for the scope of this statement. Our audit records are separate from Waffo’s processing. Our media retention rules below apply to our own copies.

Requests for pages and public videos may produce ordinary hosting logs, such as the request time, IP address, browser information and requested address. The public reference clip and illustrated examples are separate from user photos and private video results.

Storage rules for submitted videos

Uploaded photos are retained for 7 days from the successful original upload. Derived copies and intermediate clips use that same expiry. Finished videos are stored privately and permanently until you delete them from My videos or delete your account. They have no automatic expiry. Deletion requests revoke access and are processed in the background, with retries if storage is temporarily unavailable. A temporary download URL expiring does not delete the saved video; sign in again to download it.

APIMart receives access to the photos needed for your submitted task. Selecting or replacing a photo alone does not send them for AI processing. Our storage period describes our copies; APIMart handles its processing records under its own policies.

Purchases and account records

Waffo receives the information required for hosted checkout and payment verification. We store order references, amounts, payment status and credit transactions. We do not store full card numbers. Generation records include task status, provider identifiers and settlement history so failed or interrupted tasks can be reconciled. These records have no automatic deletion period; contact support for access or deletion requests.

Analytics and tracking

Google Analytics loads only after you allow optional analytics. We use it to understand visits to public pages. We do not send photos, form contents, account email addresses, URL query parameters or fragments as analytics data. Advertising features are disabled. You can withdraw your choice through Cookie settings in the footer. Essential account cookies work separately. The cookie notice explains storage and your choices.

Your choices

You can remove a selected photo using its remove control, replace it with another file or close the page. These actions do not delete the original file from your device. Use only photos you are permitted to use, with consent from identifiable people depicted. My videos lets you request deletion of a stored result; profile settings allow account deletion after active tasks are resolved. Account deletion removes access immediately and schedules media removal. Backups, payment records and security records may persist where needed for recovery, accounting, fraud prevention or legal obligations.

Updates and contact

For privacy questions or requests to delete stored media or your account, contact support@aihittheroaddude.org.