Privacy Policy

This Policy applies to the Services listed above. It does not apply to third-party websites, wallets, applications or blockchain networks that we do not control, even where we link to them or where they interoperate with our products. Those third parties have their own privacy practices, and we encourage you to read them.

Where we act as a processor or service provider under a separate written agreement with an institutional counterparty, that agreement — not this Policy — governs how we handle personal information on their behalf.

Glacis Labs sells to institutions. We treat the personal information covered by this Policy as pertaining to individuals acting as representatives of a business, and not in their individual, family or household capacity. The Services are not designed or marketed for personal, family or household use.

Information you give us. This website has no contact form or account sign-up. If you get in touch — by emailing us, messaging us on a social or messaging platform we link to, applying for a role, or beginning institutional onboarding — you may give us information such as your name, work email address, phone number, employer, job title, and whatever else you choose to include in your message.

Onboarding and compliance information. If your organisation applies for access to a KYB-gated product, we (and the compliance providers we engage) may collect identity and verification information about the business and its representatives, beneficial owners and authorised signatories, as required to meet our regulatory and sanctions-screening obligations.

Information collected automatically. When you visit the Services, our hosting and analytics providers process technical data:

• Standard server and request logs, including IP address, user agent, referring page, requested URL and timestamp.
• Aggregate usage and performance measurements from Vercel Web Analytics and Vercel Speed Insights. These products are designed to be privacy-friendly: they do not use cookies and do not build cross-site profiles of visitors.
• Coarse location inferred from IP address, at roughly country or region level.

Information from other sources. We may receive business-contact information from partners, referrals, event organisers, and publicly available or commercially available sources such as company websites and professional networks.

We aim to keep this website free of non-essential tracking. We do not use advertising cookies, and we do not run cross-site advertising or retargeting pixels on it.

Strictly necessary cookies or local storage may be used to operate the site, remember interface preferences, and secure the Sanity Studio used by our own editors. Our hosting provider may also set cookies needed to serve, secure and load-balance requests. Third-party content you choose to open — a video, a document, a social platform — may set its own cookies once you leave our pages, under that provider’s policy.

You can control cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the site from working.

Blockchain networks are public, permissionless and immutable. Transactions, wallet addresses, balances and smart contract interactions are visible to anyone, are recorded permanently, and are not under our control. We cannot alter, delete or anonymise data written to a blockchain — including at your request.

This website does not connect to your wallet and does not collect wallet addresses. Where a separate Glacis Labs product interface does connect to a wallet, it processes your address for the purpose of preparing the transaction you request.

For institutional and KYB-gated products, we and our compliance providers may screen wallet addresses against sanctions and illicit-finance datasets, which can involve linking an address to the onboarded counterparty for compliance purposes.

We use personal information to:

• operate, maintain, secure and improve the Services;
• respond to your enquiries and provide support;
• evaluate, onboard and manage institutional counterparties, including due diligence, sanctions and AML screening;
• communicate about products, releases, events and other business matters, where permitted by law and subject to your right to opt out;
• understand aggregate usage and performance so we can improve the site and our products;
• detect, investigate and prevent fraud, abuse, security incidents and other harmful activity;
• comply with legal, regulatory, audit and tax obligations, and to establish, exercise or defend legal claims; and
• evaluate applications if you apply to work with us.

We do not use personal information collected through this website to make automated decisions that produce legal or similarly significant effects about you.

If you are in the European Economic Area, the United Kingdom or Switzerland, we process personal information on the following legal bases:

• Legitimate interests — operating, securing and improving the Services, business communications with representatives of current and prospective counterparties, and preventing fraud and abuse.
• Performance of a contract — providing the Services under an agreement with you or your organisation, or taking steps at your request before entering into one.
• Legal obligation — meeting our compliance, sanctions, AML, accounting and reporting duties.
• Consent — where we ask for it, such as for certain marketing communications. You may withdraw consent at any time without affecting processing already carried out.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used under California law. We share personal information only as described here:

• Service providers. Vendors that process information on our behalf under contract — including Vercel (hosting, web analytics and performance measurement), Sanity (content management), email and communication providers, and identity, sanctions-screening and compliance vendors used for institutional onboarding.
• Professional advisers. Lawyers, auditors, accountants and insurers, bound by duties of confidentiality.
• Legal and safety. Where we reasonably believe disclosure is required by law, regulation, subpoena, court order or a lawful request from a public authority, or is necessary to protect the rights, property or safety of Glacis Labs, our users or the public.
• Corporate transactions. In connection with a merger, acquisition, financing, reorganisation or sale of assets, subject to appropriate confidentiality protections.
• With your direction. Where you ask us to share information, or where you make it public yourself.

The Services link to third-party destinations — GitHub, X, LinkedIn, Telegram, our documentation host, cloud document storage, and aggregators such as LI.FI and Jumper. When you follow a link or interact with one of these services, you are subject to that provider’s privacy policy and terms, not ours. We are not responsible for their practices.

We keep personal information only as long as necessary for the purposes described in this Policy, and then delete or de-identify it. How long that is depends on the type of information and why we hold it.

Business correspondence and prospect records are generally kept for the duration of the relationship and a reasonable period afterwards. Compliance and onboarding records are kept for the retention periods that applicable AML, sanctions, tax and corporate law require. Server logs and aggregate analytics are kept for a short period. Where we are required to retain information, we retain it for that period even if you ask us to delete it.

We take reasonable technical and organisational measures to protect personal information — including encryption in transit, access controls, least-privilege permissions on our infrastructure, and vendor review. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send us sensitive information by unencrypted email, and never send anyone your private keys or seed phrase.

We are based in the United States and our service providers operate globally. Personal information we collect may be transferred to, stored in and processed in the United States and other countries whose data protection laws differ from those in your country.

Where we transfer personal information out of the European Economic Area, the United Kingdom or Switzerland, we rely on an appropriate transfer mechanism, such as the European Commission’s Standard Contractual Clauses together with any additional safeguards required. You may request more information about these safeguards using the contact details below.

Depending on where you live, you may have the right to:

• access the personal information we hold about you and obtain a copy of it;
• correct information that is inaccurate or incomplete;
• delete personal information, subject to the legal retention duties described above;
• receive certain information in a portable, machine-readable format;
• object to or ask us to restrict certain processing, including direct marketing;
• withdraw consent where processing is based on consent;
• opt out of the sale or sharing of personal information — which is straightforward here, because we do not sell or share it; and
• not be discriminated against for exercising any of these rights.

To exercise a right, email legal@glacislabs.com. We will verify your request, usually by confirming details you have already given us, and will respond within the time the applicable law allows. An authorised agent may submit a request on your behalf with proof of authorisation.

You can opt out of marketing emails at any time by using the unsubscribe link in the message or by contacting us. We will still send you messages needed to operate the Services or to meet a legal obligation.

If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local supervisory authority. We would appreciate the chance to address your concern first.

The Services are intended for business use by adults and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where the change is material, take reasonable additional steps to notify you. Your continued use of the Services after an update means you accept the revised Policy.

For privacy questions or requests, email legal@glacislabs.com. Correspondence can be addressed to Glacis Labs, Inc., Privacy.