Privacy Policy
How we handle your personal data at MALAS.
Última actualización: August 20, 2026
MALAS is an international platform of verified profiles. This policy explains what data we collect, how we use it and the rights you have under the GDPR (Regulation 2016/679).
1. Data controller
The controller of your data is the entity that operates MALAS. For any privacy inquiry, contact us through the Help Center.
2. Data we collect
- Account: email address, full name and verification phone number.
- Public profile: display name, biography, age, declared attributes and photos you publish.
- Identity verification (private): legal name, address, phone number, identity document and selfie. Used only to confirm your identity; never displayed publicly.
- Public location: city, region and country. We do not store the coordinates used momentarily to detect an area. Your residential address is collected separately and privately only during verification.
- Payments: processed by Stripe; we do not store your full card details.
3. Purposes of processing
- Verify your identity before approving your profile.
- Display your published profile and, only with your consent, the external channels you choose to activate.
- Manage credits, postings and daily charges.
- Ensure security, prevent fraud and comply with legal obligations.
4. Legal basis
We process your data on the basis of the performance of the contract (profile publication), your consent (photos), legal obligations (identity verification and fraud prevention) and our legitimate interest (platform security).
5. Retention
The documents, address, phone number and legal name provided to verify identity are removed from the operational record once the review is approved. If a legal obligation requires exceptional retention, access is restricted and the reason and period are documented. Financial and security records are kept on a restricted basis for the applicable periods.
6. Recipients
Your data is only shared with necessary processors (the payment provider Stripe, hosting infrastructure) and authorities when required by law. We never sell your data.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to the Help Center. You may withdraw your consent at any time without affecting the lawfulness of prior processing.