Terms of service

Malaf is run by Jehaad AL-Johani. These terms are the agreement between you and Malaf. Using the site, the API, the MCP server, or the malaf command line tool means you accept them.

Two other pages are part of this agreement. The acceptable use policy says what may not be published. The privacy page says what is stored and why.

You can publish without an account. Those links live 24 hours and come with a claim token, so you can move them into a workspace later.

A workspace is created by signing in with Google or GitHub. You need to be at least 13 years old, and if you are under 18 you need permission from a parent or guardian. One person, one workspace. Keep your API keys private: anything done with a valid key counts as done by you.

You are responsible for what your agents publish through your key, the same as if you had published it yourself.

You keep every right you already had in the plans, files, and sites you publish. Malaf claims no ownership over them.

To run the service, you give Malaf permission to store your content, copy it between systems, and serve it to anyone who opens the link, for as long as you keep it on Malaf. That permission ends when the content is deleted or expires. It exists so the product can work, and for nothing else: your content is never sold, licensed on, or used to train a model.

You confirm you have the right to publish what you publish, and that it does not break the acceptable use policy.

Every site and plan lives at an address made of a name and six random characters, so nobody reaches it by guessing. That makes an address hard to find, not secret. Anyone you send it to can open it and pass it on.

For anything that needs more than an unguessable link, use a password on a site or plan, or mark a file private so only your workspace can read it. Do not publish material you cannot afford to have seen.

Malaf is free and has no paid tier. Fair limits are what keep it that way. A workspace holds 200 MB of storage, up to 50 MB per file, 50 sites and plans, and 2,000 API requests an hour. The current numbers are always on the docs page and in GET /api/v1/whoami.

Nothing on Malaf is permanent. Links made without an account expire after 24 hours. Everything in a workspace expires 30 days after its last update. Republishing, re-uploading the same file, or pressing Renew resets that clock. Expired content is deleted, and deleted content is removed from storage within three days.

Limits can change as the service grows or costs shift. If a change would reduce what you already have stored, you get notice before it takes effect.

Malaf is provided as it is, with no uptime promise and no service level agreement. Checks run against every part of the service and the results, including outages, are published on the status page without editing.

Keep your own copy of anything that matters. Malaf is a place to put things and share them, not a backup.

You can stop at any time. Delete individual items from the dashboard, the API, or the CLI, or delete your whole account from settings, which removes your content, your API keys, your webhooks, and your profile.

Malaf can suspend or close a workspace that breaks these terms or the acceptable use policy, that puts the service or other people at risk, or that is required to be removed by law. Where it is reasonable you get an explanation and a chance to reply first. For active harm, such as malware or phishing, removal comes first.

If Malaf is ever shut down for good, there will be at least 30 days of notice on the site so you can take your content elsewhere.

Malaf is free, and it is offered without warranties of any kind, to the extent the law allows. It is not promised to be uninterrupted, error free, or fit for any particular purpose.

Malaf is not liable for lost content, lost profit, lost data, or any indirect or consequential loss. Where liability cannot be excluded, it is limited to the amount you paid for the service, which is nothing.

You are responsible for the content you publish, and for claims that come from it.

These terms can change. The date at the top of this page always shows the last substantive change. If a change matters to you, for example one that reduces limits or adds an obligation, it is announced on the site before it takes effect.

Using Malaf after a change means you accept the new version.

This agreement is governed by the laws of the Kingdom of Saudi Arabia, and its courts have jurisdiction over any dispute. Nothing here takes away rights you have under the law where you live.

Questions about these terms go to hi@jehaad.com.