Privacy Policy

At MalkyLab Studio, we prioritize your data security. This privacy policy details how we handle account credentials, stock media resources, temporary renders storage, and OAuth credentials.

1. Storage and Retention Rules

All generated videos and uploaded clips are stored on secure Cloudflare R2 servers. Files are automatically deleted from our servers based on your active plan retention rules:

• Free users: Deleted after 6 hours.
• Starter users: Deleted after 24 hours.
• Creator users: Deleted after 3 days.
• Pro users: Deleted after 7 days.
• Agency users: Deleted after 30 days.

2. Social OAuth Access Tokens

When you link social accounts (Facebook Page, YouTube channel, Instagram business profile, or TikTok account), we authenticate using standard OAuth. MalkyLab Studio never stores your account usernames or passwords. All access tokens are stored in an encrypted format.

3. Stock Library Integrations

When searching stock photos or video footages, we call Pexels, Pixabay, or Unsplash API servers. We comply with photographer attributes and licensing requirements and do not store private profile details.