Privacy Policy

This Policy explains how the Levli service operator handles personal data when you visit the site, connect a wallet, join the Waitlist, take part in the closed beta, purchase a challenge, contact support, or use a related Levli service.

The entity identified as the operator in the invitation or checkout for the relevant service is responsible for that processing. Before paid public access begins, Levli will publish the operator’s legal name, registered contact details, and any jurisdiction specific information required by law. Privacy questions can be sent to support@levli.io.

Account and Waitlist data may include your wallet address, X account ID, X username, display name, profile image URL, X authorization time, referral code, invitation status, country, eligibility information, payout address, and optional contact details you choose to provide. When identity verification becomes necessary, we may receive verification status and related compliance results from an approved provider.

Service records may include challenge selections, rule snapshots, orders, simulated trades, balances, breaches, payouts, Points, referrals, payment amounts, token and network details, transaction hashes, support messages, appeals, and records of your acceptance of product terms.

Technical and security data may include request time, page or endpoint, browser and device information, session data, network and error logs, a salted hash derived from an IP address, and a limited device signal used to detect duplicate or abusive activity. Levli’s application does not store a raw IP address in its Waitlist or security event records.

We receive data directly from you when you connect a wallet, authorize your X account, sign an authentication message, complete a form, trade in a simulation, make a payment, or contact support. We also receive data from X through its OAuth service, public blockchains, connected wallets, infrastructure providers, market data and trading venues, identity or sanctions screening providers, payment services, and people who share a Levli referral code with you.

A wallet signature is used to verify control of the stated address. Levli does not need and will never ask for your private key or recovery phrase.

X authorization is used to confirm the account ID and current username associated with the approving X account. Levli requests read-only identity scopes and does not retain the X access token or a refresh token after verification.

We use personal data to create and secure a session, confirm Waitlist registration, provide a challenge, calculate rule results, maintain Points and referral records, process payments and eligible payouts, respond to support, and provide notices about the service.

We also use it to prevent duplicate accounts, fraud, manipulation, sanctions evasion, and security incidents; investigate disputes and chargebacks; test and improve reliability; understand service performance; enforce our terms; and comply with accounting, tax, court, regulatory, and other legal duties.

Where data protection law requires a legal basis, we rely on steps requested before a contract and performance of a contract for core account services. We rely on legitimate interests for security, fraud prevention, support, product improvement, and protecting legal claims, after considering your rights. We rely on legal obligations when records or checks are required by law, and on consent for optional communications or processing when consent is the appropriate basis.

Wallet addresses, token transfers, amounts, token contracts, and transaction hashes recorded on a public blockchain can be viewed and copied by anyone. They may reveal activity and may be linked to you through information held by Levli or others.

Levli cannot erase, hide, or change a public blockchain record. A request to delete data from Levli’s own systems does not remove data independently held by a wallet provider, blockchain network, venue, or other third party.

Levli applies programmed challenge rules to trading records and uses automated signals to identify possible duplicate accounts, shared devices, suspicious referrals, payment risk, sanctions concerns, or other abuse. These signals can temporarily pause access, a reward, a promotion, or a payout.

A user may ask for human review of a material decision by contacting support. The reviewer can examine the data used, correct inaccurate information, and confirm or change the outcome. Levli does not rely on a risk signal as the only basis for a legally significant decision where applicable law requires meaningful human involvement.

We share data only when reasonably needed with providers that support cloud hosting, databases, wallet connectivity, blockchain access, security, analytics, identity and sanctions checks, payments, communications, and customer support. They may process data only for the agreed service and under appropriate confidentiality and data protection duties.

We may also share information with professional advisers, auditors, insurers, banks, courts, regulators, tax authorities, law enforcement, or another party when necessary to comply with law, protect users, establish or defend legal claims, or investigate fraud. If the Levli business or service is reorganised, financed, sold, or transferred, relevant data may be disclosed under confidentiality protections and transferred as part of that transaction.

Levli does not sell personal data for money and does not use Waitlist data for third party behavioural advertising. We will provide any notice or choice required by law before changing that practice.

Levli and its providers may process data in countries other than the country where you live. Those countries may have different privacy laws. Where the law requires a transfer safeguard, we use an approved legal mechanism and appropriate contractual, technical, or organisational protections.

You may contact support for more information about the safeguards relevant to your data. The location of a blockchain node or participant cannot be controlled in the same way as a private service provider.

We keep data only for as long as it is reasonably needed for the purpose described in this Policy. The period depends on whether your Waitlist or account relationship is active, whether a payment, payout, appeal, security review, or legal claim remains open, and whether accounting, tax, sanctions, or other law requires a longer record.

Authentication nonces and X OAuth attempts are short lived and single use. Browser sessions end or expire, although wallet connection preferences may remain in browser storage. When an operational record is no longer needed, we delete it, deidentify it, or restrict it to required legal and security purposes.

Fraud prevention records may be retained after an account closes when they are necessary to prevent repeated abuse or defend a claim. Public blockchain data remains available independently of Levli and cannot be deleted by us.

Levli uses access controls, authentication, logging, data minimisation, hashed network identifiers, environment separation, backups, and other technical and organisational measures designed for the sensitivity of the data. Access is limited to people and providers who need it for an authorised purpose.

No internet or blockchain service can guarantee complete security. You are responsible for protecting your wallet, device, recovery phrase, private keys, and active sessions. Contact us promptly if you suspect unauthorised access involving Levli.

Levli uses browser storage and similar technology to maintain a wallet connection, remember compatible wallet preferences, keep an authenticated session, protect requests, and make the site work reliably. The landing experience stores its Levli authentication token in session storage rather than asking for a password.

Wallet extensions and connected services may use their own storage under their privacy policies. If Levli introduces optional analytics or marketing technology that requires consent, we will provide the required notice and controls before it is activated.

Depending on where you live, you may ask to access, correct, delete, restrict, or receive a copy of personal data, or object to certain processing. You may withdraw consent for future processing when consent is the basis. You may also object to direct marketing at any time.

Send a request to support@levli.io and identify the relevant wallet address. We may ask you to sign a message or provide other information to verify that the request concerns you. We will not ask for a private key or recovery phrase.

A right may be limited when we must retain a record, protect another person, prevent fraud, establish a legal claim, or comply with law. You may complain to the privacy or data protection authority where you live if you believe a request was not handled properly.

Levli is not intended for anyone under 18. We do not knowingly permit a child to join the Waitlist or use an account. Contact support if you believe a child has provided personal data so we can investigate and take appropriate action.

We may update this Policy when the service, providers, or legal requirements change. The current version and update date will remain on this page. We will provide additional notice before a material change takes effect when the law requires it.

Questions, requests, and concerns can be sent to support@levli.io. Please do not send a recovery phrase, private key, identity document, or other sensitive material unless Levli provides a secure and authorised method for that specific purpose.