Privacy Policy

Who we are

Malinal is a product of Webvig Labs, a Georgia limited liability company. This policy covers the whole malinal.ai site: the marketing pages, the documentation, the demo, the signed-in console, and billing. Questions go to [email protected].

What we collect

We collect only what we need to run the service.

• Account: your email address and display name, from the provider you sign in with (GitHub, Google or Apple). We also keep the company name if you enter one. We do not keep the rest of your provider profile.
• Billing: Stripe customer and subscription identifiers, your plan status, and a record of billing events. Stripe processes payments. We never receive or store your card details.
• API keys and usage: your API keys are stored only as one-way hashes, with a short visible prefix. We count requests per key and endpoint per day, so the console can show your usage.
• Sign-up source: the page or button that brought you to sign-up, recorded once.
• Server logs: web requests, including IP addresses, kept for 30 days.

Cookies

We set two cookies: one that keeps you signed in, and one that protects forms against cross-site requests. We do not use analytics, advertising or tracking cookies.

Who we share with

• GitHub, Google and Apple: to verify your identity when you sign in.
• Stripe: to take payments and manage subscriptions.
• Our hosting provider: to run the servers that host the site and the database.

We do not sell your personal information.

How long we keep data

• Your account: until you delete it.
• Server logs: 30 days.
• Billing records: as long as tax and accounting law requires.

Your choices

You can delete your account from the console. Deleting it cancels any live subscription first. To ask for a copy of your information or a correction, write to [email protected].

Changes to this policy

We will post any change on this page and update the date above.