Legal
Privacy Policy
Last updated: 9 July 2026 · Template — not legal advice
1. Controller
LeverLock is the controller of personal data processed through this platform. Contact: privacy@leverlock.org.
2. Data we collect
Account data (email, name, display name), KYC documentation (government ID, proof of address, source-of-funds / source-of-wealth documents, corporate records for company applicants), authentication metadata, usage telemetry (routes visited, feature interactions), and technical data (IP, user-agent, device identifiers).
3. Legal bases
Performance of a contract (to operate your account), legal obligation (AML/CTF and sanctions screening, record-keeping), legitimate interests (platform security, fraud prevention, product analytics), and consent where required (marketing communications).
4. Purposes
Providing the service, verifying identity, complying with financial-crime obligations, executing strategies at third-party venues, communicating with you, improving the platform, and defending legal claims.
5. Storage & security
KYC documents are stored in a private object-storage bucket with row-level access controls; application data uses row-level security so users can access only their own records. Access by staff is logged. We use encryption in transit and at rest via our infrastructure providers.
6. Sharing
With third-party trading venues (subaccount identifiers, not raw KYC), with our KYC/onboarding vendor (when integrated), with hosting and infrastructure providers acting as processors, and with authorities where legally required.
7. Retention
Account and KYC records are retained for the duration of the relationship and for the period required by applicable AML law after account closure (typically 5–7 years). Telemetry is retained on a shorter rolling window.
8. Your rights
Subject to applicable law, you may request access, rectification, erasure, restriction, portability, and objection. Requests: privacy@leverlock.org. Erasure may be refused where retention is legally required.
9. International transfers
Data may be processed outside your country of residence, including by our infrastructure and KYC providers, under appropriate safeguards.
10. Cookies & local storage
We use essential cookies and browser local storage to keep you signed in, remember your legal acknowledgement, and store theme preference. We do not use advertising cookies.
11. Changes
We may update this policy; material changes will be surfaced on the platform.