Privacy Policy

Last Updated: October 13, 2025

This Privacy Policy ("Policy") for LeverAcc describes the basis on which MetaStellar Technology Ltd. ("Company," "we," "us," or "our") will process personal data we may collect from users of the interface available at leveracc.xyz, including any of its subdomains ("Website"), and any tools, services, features, and functionalities available through the Website (collectively, the "Services"), in accordance with applicable law. For purposes of applicable data protection laws, the Company is the data controller. For this Policy, "you" and "your" refer to you as the user of the Services.

Read this Policy carefully so that you understand your rights in relation to your personal data and how we might collect, use, and process your personal data. If you do not agree to this Policy, do not use, access, connect to, interact with, or download any of the Services or otherwise provide your information to us. Any capitalized but undefined terms used in this Policy will have the same meaning as those in our Terms of Use located at terms.

When you access, use, connect to, or interact with the Services, we may collect certain categories of information about you, including personal data, from a variety of sources.

Information you provide to us:

Personal data may include (i) any internet-protocol address ("IP Address"), (ii) any digital-asset, smart-contract, or protocol address ("Wallet") information, associations, and/or identifiers; and (iii) geolocation data.

In addition, personal data may include your social media handle and related information, transaction data or history (such as your blockchain transaction history and other information associated with a linked address or Wallet, including deposits, withdrawals, and trading activities on the Platform), certain information needed to transfer or allocate tokens or funds under our custodial model, marketing data (such as preferences for receiving marketing communications and related details), token holdings, and any other information collected through the Services. Should you contact us, including to participate in promotions, lotteries, or other programs, we will collect the content of our communications with you and any personal data contained within.

We process this information to perform our contract with you, such as to provide you with our Services, including leveraged trading, perpetual contracts via Hyperliquid integration, and fund custody.

Information we collect automatically:

When you visit certain pages on our Website or access, use, connect to, or interact with certain Services, our servers save each access in a log file. The following data may be collected: (i) the IP Address of the requesting computer or device; (ii) the date and time of access; (iii) the country from which the website is accessed; (iv) any API endpoint; (v) user agent details; (vi) the operating system of your computer and the browser you are using (provider, version, and language); and (vii) the transmission protocol used (e.g., HTTP/1.1).

The processing of this data is carried out for the purpose of enabling your access to, use of, connection to, and interaction with the Services, including (i) to facilitate your connection to the Website, (ii) to identify if you are likely to be a Restricted Person or from a Restricted Region, as defined in our general Terms of Use, available at leveracc.xyz/terms, or if you are subject to any prohibitions with respect to the Services (including restrictions on regions such as China, including Hong Kong and Taiwan); and/or (iii) to verify your identity, identifying information, certain facts with respect to your identity or identifying information, and location to determine eligibility for certain Services. Each case with respect to any of (i), (ii), and/or (iii) is for us to perform our contract with you and, in our legitimate interests, to provide effective Services to you.

We may also process this data in our legitimate interests to provide effective Services to you by processing the data to assist system security and stability for provision of the Services, to conduct troubleshooting, data analytics, testing, and research, and to enable optimization and internal statistical analysis with respect to the Services, as well as to maintain the safety and security of our users, the Website, our Services and business and to improve and develop our Services and Website.

Finally, the Company may use cookies, web beacons/clear gifs, geolocation and tracking technologies, and other applications when you visit the Website, including technologies that collect certain information about your access to, use of, connection to, or interaction with the Services ("Usage Data") that may be integrated with third-party service providers.

With your consent, we may use any data collected, including Usage Data, to tailor features and content to you and to ensure content is presented in the most effective manner for you and your device and to run analytics and better understand your user experience with respect to the Services and, if you have opted into marketing, for marketing purposes.

We may also use your information to provide the Services and perform our contract with you. In the legitimate interest of providing effective services to you, we may also use this data to create aggregated, anonymized, or de-identified data.

In addition to the foregoing, we may use any of your information to comply with any applicable legal obligations, to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

Information we may collect from third-party wallet extensions or connections:

Certain transactions conducted via our Services may require you to connect a compatible third-party digital Wallet to the Services. By using such a Wallet to conduct such transactions via the Services, you agree that your access to, use of, connection to, and/or interactions with such third-party Wallets are governed by the privacy policy for the applicable Wallet, and you agree that you are using the Wallet in accordance with the terms and conditions of the applicable third-party provider of such Wallet.

Wallets are not maintained or supported by, or associated or affiliated with, the Company. We expressly disclaim any liability for actions arising from your use of third-party Wallets, including, but without limitation, actions relating to the use and/or disclosure of personal information by such third-party Wallets.

Your Rights

Under applicable data protection laws, you may have certain rights in relation to your personal data. These rights may include the following:

  1. Access to your personal data that the Company holds, information on how we use it, and who we share it with;

  2. Correction of your personal data that the Company holds, subject to the Company's investigation and verification of any disputed information;

  3. Deletion or removal of your personal data, in certain circumstances;

  4. Objection to the processing of your personal data, in certain circumstances;

  5. Restriction of processing of your personal data, to stop us from processing the personal data we hold about you other than for storage purposes, in certain circumstances;

  6. Portability of your personal data; the Company will endeavor to provide you, or a third party, with a copy of the personal data that we hold about you and transfer it to a third party in a structured, commonly used, machine-readable format;

  7. Objection to marketing communications; you may opt out of any marketing communications at any time by using any unsubscribe or opt-out functionalities displayed in any such communications to you;

  8. Notice of a personal data breach (unless the breach is unlikely to be prejudicial to you);

  9. Complaint to the relevant data protection authority;

  10. Withdrawal of consent, where the Company is relying on consent to process personal data; this will not affect the processing of personal data carried out before consent is withdrawn or on legal bases other than consent.

Automated decision-making

We will not take decisions producing legal effects concerning you, or otherwise significantly affecting you, based solely on automated processing of your personal data, unless we have considered the proposed processing in a particular case and concluded in writing that it meets the applicable requirements under applicable data protection laws. You may submit a written request concerning the processing of your personal data to vv@leveracc.xyz. The Company shall use reasonable means to verify your identity before making any determination with respect to your request.

Note that some of these rights may apply only in certain circumstances, and all of these rights may be limited to some extent by law. Such limitations may apply, for example, where fulfilling your request would adversely affect other individuals or our trade secrets or intellectual property, where there are overriding public interests, or where we are required by law to retain your personal data.

To the extent required under applicable data protection laws, the Company will be responsive to your request without undue delay and where required under applicable data protection laws, at least within one month (though this may be extended by a further two months in certain circumstances).

Sharing of Personal Data

In certain circumstances, we may share your information with third parties with your consent, as necessary, or as otherwise required or permitted by law. Specifically, we may share your personal data:

  • With service providers and vendors: the Company may share your personal data with third parties to process on the Company's behalf. Such third parties could include blockchain analysis service providers, know-your-customer and screening service providers, developers, content delivery service providers, and data analytics service providers. Such service providers may assist us with many different functions and tasks, including determining your eligibility with respect to participation in certain Services.

  • With professional advisors, in our legitimate interests or as required by law: As necessary, we will share your personal data with professional advisors such as auditors, law firms, cybersecurity specialists, data analysis organizations, and/or consulting or accounting firms.

  • For legal and security reasons and to protect our services and business, in our legitimate interests or as required by law, including in connection with a security vulnerability or breach.

  • With law enforcement and regulatory authorities, in order to comply with applicable legal and regulatory requirements, respond to mandatory legal or governmental requests or demands for information.

  • With our affiliates, in our legitimate interests: We may share your personal data with companies within our corporate family.

  • In connection with an asset sale or purchase, merger, bankruptcy, or other business transaction or re-organization, in our legitimate interests: We will share your personal data with relevant third parties as necessary while negotiating or in relation to a change of corporate control such as a restructuring, merger, or sale of our assets.

Your personal information may be transferred to and stored or processed in countries outside the jurisdiction in which you live and reside, including outside the jurisdiction of incorporation of the Company, European Economic Area ("EEA") and United Kingdom ("UK"), and including to the U.S., in order to provide the Services. Your personal information may also be processed by staff operating outside such jurisdictions who work for us or for third-party service providers or partners. We will take steps reasonably necessary to ensure that your personal information is treated securely and in accordance with this Policy and applicable data protection laws. Should we transfer your personal information to third parties located outside relevant jurisdictions, we will seek to put in place appropriate safeguards to ensure that this transfer occurs in accordance with applicable data protection laws. These measures include seeking entry into the standard contractual clauses ("SCCs") approved by the European Commission (for transfers outside the EEA) and/or an international data transfer agreement/addendum to the SCCs approved by the UK Information Commissioner's Office ("ICO") (for transfers outside the UK), unless the data transfer is to a country that has been determined by the European Commission or the relevant UK authorities, as applicable, to provide an adequate level of protection for individuals' rights and freedoms for their personal data.

Retention

We will retain your personal data only for so long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements, or as otherwise required by law. The length of time we retain your data will depend on the nature of the data and the purpose for which it was processed. We expect to delete your personal data (at the latest) once there is no longer any legal or regulatory requirement or legitimate business purpose for retaining your data.

Children's Privacy and Data Protection

Persons under the age of majority in their jurisdiction are not permitted to use the Services, and we do not seek to or knowingly collect any personal data about children under thirteen (13) years of age (or sixteen (16) years of age for individuals in the EEA/UK). If we become aware that we have unknowingly collected information about any person under the age of majority in their jurisdiction, we will make commercially reasonable efforts to delete such personal data and other information from our records.

Security Measures Taken to Protect Personal Data

Be aware that despite our efforts to protect your personal data and other information, we cannot guarantee "perfect security" of your information transmitted through the Website. In addition, note that any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. Any transmission is at your own risk. You should carefully read any risk factors specified in any terms of services associated with your access to, use of, connection to, or interaction with the Services, including those related to our custodial fund management and integrations with decentralized infrastructures like Hyperliquid.

Usage Data Collection

When you access, use, connect to, or interact with the Services, including the Website, the Company and its third-party service providers may receive and record personal data that you may have provided and your digital signature, such as your IP Address or information associated with or relating to your Wallet.

On the Website, the Company may provide links to websites or online platforms operated by third parties, including social media or content platforms operated by third parties, such as X (formerly Twitter) or Medium (such platforms, generally, "Social Media Platforms"). We also may provide links to websites or online platforms operated by third-party contributors to the LeverAcc ecosystem ("Contributors"). We do not own, operate, or control such third-party websites. If you follow links to sites not owned or operated by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy, security, or content of these sites, including the accuracy, completeness, or reliability of information and services found on these sites.

Note that third parties and Contributors may provide services, information, dashboards, websites, tools, functionalities, and applications and its subdomains, and these may be linked from time to time through our Services or through our accounts on Social Media Platforms. Such third parties and Contributors are independent and as such, we do not own, operate, or control their services, information, dashboards, websites, tools, functionalities, and applications and cannot guarantee, and are not responsible for, the privacy, security, or content of these sites or the accuracy, completeness, or reliability of services, information, dashboards, websites, tools, functionalities.

Last updated