Privacy Policy

MFL Studio is a service operated by B-NOVAT LLC, a United States limited liability company (“MFL Studio”, “we”, “us”). We operate a web studio and Telegram bots that let you modify your own photos and videos — generating altered variants, converting between formats, compressing files and extracting frames. This policy explains what data we collect, why, how we use it, and the choices you have. We do not sell your personal data. Your use of the service is also governed by our Terms of Service.

1. Who this applies to

This policy covers everyone who uses MFL Studio through the website (MFL Studio) or our Telegram bots. You can use the free tools without an account; signing in is done solely through Telegram Login — we never ask for an email or password.

2. What we collect

• Account & identity — when you sign in with Telegram, we receive your Telegram user id, username, display name and (if set) profile photo URL. We store the time of your last login.
• Content you submit — the photos and videos you upload (or links you paste) to process, and the resulting output files. These are stored only as long as needed to deliver your results (see Retention).
• Usage & billing — batch/job records, storage and output counts, your plan, and payment records (handled by our payment processors — we never store card numbers).
• Technical data — IP address, request logs and basic analytics used to operate and secure the service.
• Google account data — only if you choose to connect Google Drive (see §4).

3. How we use your data

• To run the tools you ask for and return your processed files.
• To maintain your account, plan limits and usage history.
• To process payments and send service notifications over Telegram.
• To secure the service, prevent abuse and meet legal obligations.

4. Google Drive integration & Google user data

Connecting Google Drive is optional and exists for one purpose: to let MFL Studio deliver the files you process directly into a folder in your own Google Drive when you select “Drive” as the output destination for a batch.

Scope we request

We request a single, narrow scope: drive.file (https://www.googleapis.com/auth/drive.file). This grants access only to the files MFL Studio itself creates in your Drive. We cannot see, read, list, download or modify any other file in your Google Drive, and we do not request any broader Drive permission.

What we do with it

• Create a folder (e.g. “MFL Studio / Batch #…”) and upload the output files of that batch into it.
• Store a reference id for each uploaded file so we can show you the delivery link.

We do not use Google user data for advertising, profiling, or any purpose unrelated to this delivery feature.

Storage & revocation

Your Google OAuth tokens are stored encrypted at rest and used only to perform the uploads described above. You can disconnect Google Drive at any time from your account console, which deletes the stored tokens, and you can also revoke access directly at myaccount.google.com/permissions.

Limited Use

MFL Studio’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not transfer or sell Google user data to third parties, do not use it for advertising, and do not allow humans to read it except where required for security, to comply with applicable law, or with your explicit consent.

4b. MFL Downloader browser extension

MFL Downloader is an optional Chrome extension that adds two buttons — Download and Send to Studio — on the photos and videos of the websites you browse. It only works while you are signed in to MFL Studio in the same browser.

What it reads

• On the supported websites only, the web addresses of the photos and videos shown on the page, and the data the page itself already receives about them (to find the full-size file behind a preview or a video stream). This stays in your browser, in memory, for the open tab.
• Your MFL Studio sign-in state, to know whether the buttons are unlocked. The extension has no password or token of its own: it uses your existing studio session.

It does not read your messages, your browsing history, your passwords or the content of pages on any other website, and it does not track what you look at.

What it sends, and when

• Download: the file is saved by Chrome straight to your computer. Nothing is sent to us.
• Send to Studio: the one file you clicked is uploaded to your MFL Studio account so you can use it in a tool. It is kept in your account for 14 days and is visible only to you.
• For videos a page does not hold as a file (YouTube, some TikTok videos), the address of that video page is sent to MFL Studio, which fetches the video for you and makes it available to download or open in the studio.

Nothing is sent without a click on one of the two buttons (or their keyboard shortcuts). We do not sell this data, use it for advertising or share it with third parties. You can remove the extension at any time from chrome://extensions; files sent to the studio can be deleted from your account or by writing to us.

5. Sharing & third parties

We share data only with the service providers needed to run MFL Studio, each acting on our behalf:

• Telegram — sign-in and bot messaging.
• Stripe and NOWPayments — payment processing.
• Apify — fetching a source video when you paste a social link.
• Google — only the Drive uploads you initiate (§4).
• Our hosting and infrastructure providers.

We may disclose data if required by law. We do not sell personal data.

6. Retention

Uploaded inputs and generated outputs are kept only as long as needed to deliver and let you download your results, then removed under our routine cleanup. Account, billing and usage records are kept as long as your account is active or as required for legal and accounting purposes. Files uploaded to your own Google Drive stay in your Drive and are under your control.

7. Security

We use encryption in transit, encrypt sensitive credentials (including Google OAuth tokens) at rest, and restrict access to production data. No method of transmission or storage is perfectly secure, but we work to protect your information.

8. Your rights

You may request access to, correction of, or deletion of your personal data, and you can disconnect Google Drive or delete your account at any time. To exercise these rights, contact us at the address below.

9. Children

MFL Studio is intended for adults and is not directed to anyone under 18.

10. Changes

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated through the service.

11. Contact

Questions about this policy or your data? Email contact@b-novat.com.