Legal

Privacy Policy

Last updated: July 11, 2026

At Malvik Security, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our video course platform.

Information We Collect

Personal Information

When you create an account, we collect information such as your name, email address, and password. If you subscribe to premium features, we also collect billing information through our payment processor, Stripe.

Usage Information

We automatically collect information about how you interact with our platform, including your course progress, video watch history, lesson completion status, comments, and bookmarks. We also collect technical information such as your IP address, browser type, device information, and access times.

Authentication Data

Our authentication system is powered by Supabase Auth. When you sign up or log in, Supabase securely handles your authentication credentials and maintains session information.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our video course platform
  • Process your transactions and manage your subscriptions
  • Track your learning progress and provide personalized course recommendations
  • Send you important updates about your account, courses, and platform features
  • Respond to your support requests and communications
  • Analyze platform usage to enhance user experience and develop new features
  • Prevent fraud, abuse, and unauthorized access to our services
  • Comply with legal obligations and enforce our terms of service

Information Sharing and Disclosure

We may share your information with the following parties:

Service Providers

We work with trusted third-party service providers who help us operate our platform:

  • Supabase: Database hosting, authentication, and storage services
  • Stripe: Payment processing for premium subscriptions
  • YouTube & Twitch APIs: Fetching video content and live stream status

Legal Requirements

We may disclose your information if required by law, legal process, or government request, or to protect the rights, property, or safety of our platform, users, or others.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership.

Security Practices

We implement robust security measures to protect your information:

Data Encryption

All data transmitted is encrypted using TLS/SSL. Passwords are hashed using bcrypt. Sensitive data at rest is encrypted.

Access Controls

Strict role-based permissions. All administrative actions are logged. MFA required for admin accounts.

Infrastructure Security

Hosted on SOC 2 compliant infrastructure. Regular security audits. Encrypted database backups.

Payment Security

We never store credit card information. Stripe (PCI DSS Level 1) handles all payment data.

Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: View and download your personal information from your account settings
  • Correction: Update your account information at any time
  • Deletion: Request deletion of your account and associated data
  • Data Portability: Request a copy of your data in a machine-readable format
  • Opt-out: Unsubscribe from marketing emails (transactional messages may still be sent)

Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. If you request account deletion, we will remove your data within 30 days, except where we are legally required to retain certain information for tax, legal, or audit purposes.

Children's Privacy

Our platform is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it immediately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the platform after such changes constitutes acceptance of the updated policy.

Questions about our privacy practices?

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, our team is here to help. We typically respond within 5 business days.

Contact Us

Your privacy matters to us. We are committed to transparency and protecting your personal information.