Privacy Policy

Last updated: 15 September 2026

Obsidion Labs Limited (“Obsidion Labs,” “we” or “us,” or “our”) respects your privacy and is committed to protecting it through our compliance with this Privacy Policy.

This Privacy Policy describes the types of information we may collect from you or that you may provide when you access or use the Services and our practices for collecting, using, maintaining, protecting, and disclosing that information. If you’re a resident of the United Kingdom, California, Washington, or Nevada or from the European Economic Area (“EEA”), you should read this Privacy Policy and the applicable sections below.

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. By accessing or using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, you must not access or use the Services. This Privacy Policy may change from time to time (see “Modifications to this Privacy Policy” Section below). Any changes to this Privacy Policy will be effective immediately upon posting the updated Privacy Policy unless otherwise stated or as required by applicable law. Your continued use of this Services after we make changes is deemed to be acceptance of those changes to the fullest extent permitted by applicable law, so please check the policy periodically for updates. Terms not defined in this Privacy Policy shall have the meanings as set forth in Obsidion Labs’s Terms of Use, which can be found at https://docs.zk.money/terms.

We are committed to maximizing privacy through mathematics rather than mere promises. By leveraging zero-knowledge proofs (“ZKPs”), the Services are architected to execute cross-chain asset transfers without exposing public transaction links between your source and destination addresses.

The core function of our Services rely on zero-knowledge cryptography. This architectural choice ensures that:

Your sensitive transaction details are never revealed on-chain.
Your private inputs never leave your local environment.

I. Scope of Privacy Policy

This Privacy Policy applies to all aspects of our Services as well as to information we may collect offline and on-chain. The Services may link to or incorporate websites or content hosted and served by others over which we have no control, such third-party websites, online properties, platforms, social media, or systems, which are each governed by the privacy policies and business practices of third parties. You understand and agree that Obsidion Labs is not responsible for the security, privacy, or business practices of any third party. This Privacy Policy applies to information we collect:

through communications between you and the Services;
in email, text, or other electronic correspondences and interactions between you and us;
automatically as you use or access the Services; and
through third-party applications and links.

II. Information We Collect

We collect the following categories of information in connection with your use of the Site and the Services:

User Information. We collect information by which you may be personally identified, such as name, e-mail, location information, social media information (including, but not limited to, X handles), other identifier by which you may be contacted online or offline (including, but not limited to, cookie identifiers, usage details, other tracking technologies), and any other personal information that you provide to us.
Wallet Connection Information. When you voluntarily connect a publicly available blockchain wallet address to access the Services, we process that public address to enable wallet connection, surface on-chain positions and activity, and facilitate on-chain interactions you initiate. We do not have access to your private keys or seed phrase and cannot initiate transactions on your behalf.
Technical and Device Information. We and our Third-Party Services may automatically collect technical information when you access the Site, such as IP address (which may be truncated or anonymized where configured), browser type, operating system, device type, language preferences, referring URLs, internet connection, and diagnostic information. We use this information to maintain security, prevent fraud and abuse, measure performance, and debug issues.
Fees. With respect to any paid feature (if and once available), we (or our third-party payment processor) collect information necessary to process your transaction, such as your name, billing address, email address, and/or payment card details. Payment card information is collected and processed directly by our third-party payment processor and is not stored on our servers. We retain records of transactions, subscription tier, billing cycle, and payment history to manage your handle, process renewals or cancellations, provide receipts, prevent fraud, and comply with tax and accounting obligations.
Referral Program Information. If you participate in our referral programs, we may collect information necessary to attribute and credit referrals, including the identities of the referring and referred handles.
Usage Data. We may collect information about your interactions with the Site and the Services, such as pages viewed, features used, links clicked, time and duration of visits, and referral sources. We use this information to operate, maintain, and improve the Services, including user experience and performance.
Location Data. We may derive coarse location information from IP addresses or similar signals to enforce geographic restrictions, such as blocking access from jurisdictions where use of the Services is not permitted under our Terms of Use.
On-Chain Data. We may surface publicly available on-chain information associated with your connected Wallet or other electronic wallet, including transaction hashes, amounts, timestamps, positions, block proposals submitted by builders (block headers, bid amounts, builder identities), block contents for verification purposes, MEV-Boost configuration details from validator connections, and funding or fee activity.
Cookies and Similar Technologies. We and our third-party infrastructure and analytics providers may use cookies, pixels, web beacons, and similar technologies to collect and store the types of information described above. Further information can be found in the “Cookie Policy” Section below.

III. Use of Personal Information

We use the personal information that we collect:

to present our Services and its contents to you;
to make our Site and Services more intuitive and easier to use, we use device data, cookies and other information that you may provide;
to provide relevant marketing including providing you with information about events or services that may be of interest to you;
to provide you with notices about your account, including expiration and renewal notices;
to carry out our obligations and enforce our rights arising from any contract entered into between you and us;
to carry out any other business purpose for which the information was collected;
in any other way we may describe when you provide the information; and
to fulfill any other purpose for which you provide it.

We may also use automated technologies to collect information about your equipment, browsing actions, and usage patterns. The information we obtain in this manner may include your device IP address, identifiers associated with your devices, types of devices connected to our services, web browser characteristics, device characteristics, language preferences, referring/exit pages, clickstream data, and dates and times of visits to our Site and Services. The information we collect through cookies and similar technologies helps Obsidion Labs: (1) remember your information so you will not have to re-enter it; (2) understand how you use and interact with our products and website; (3) measure the usability of our products and website and the effectiveness of our communications; and (4) otherwise manage and enhance our Services and Site, and help ensure they are working properly.

We may create aggregated, de-identified and/or anonymized data from your personal information and other individuals whose personal information we collect. We make personal information into de-identified and/or anonymized data by removing information that makes the data identifiable to you. We may use this aggregated, de-identified and/or anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Site, Services, and promote our business, and to train our artificial intelligence models and for other machine learning purposes; We may also collect transaction-related information (such as preferred means of payment, billing information, billing address, and/or a history of purchases through our Site). Your browser may tell you how to be notified when you receive certain types of cookies or how to restrict or disable certain types of cookies. Please note, however, that without cookies you may not be able to use all of the features of our Site.

IV. Marketing Choices

You have control regarding our use of personal information for direct marketing. In certain markets, you will need to expressly consent before receiving marketing. In all markets, you can choose to not receive marketing communications at any time. If you no longer wish to receive marketing communications from Obsidion Labs, or remain on a mailing list to which you previously subscribed, or receive any other marketing communication, please follow the unsubscribe link in the relevant communications or contact us as specified below.

V. How We Share Your Information

We may disclose personal information that we collect or you provide as described in this Privacy Policy:

to our subsidiaries and affiliates;
with vendors, consultants and other service providers who need access to such information to carry out work on our behalf;
in response to a request for information if we believe disclosure is in accordance with any Applicable Law, regulation or legal process, or as otherwise required by any Applicable Law, rule or regulation;
to comply with any court order, law, or legal process, including to respond to any law enforcement, government, or regulatory request;
if we believe your actions are inconsistent with our user agreements or policies, or to protect the rights, property and safety of us or any third-party;
in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business to another company;
with your consent or at your direction; and
we may also share aggregated or de-identified information, which cannot reasonably be used to identify you.

VI. Cookie Policy

We may use cookies and similar tracking technologies (“Cookies”) to automatically track user activity. Cookies help us authenticate requests, remember preferences, enhance performance and security, and understand how the Site is used. Cookies are small pieces of data placed on your computer, phone, or other device that you use to access the Services. A banner or other tool will be presented to you to make decisions about Cookies that are not strictly necessary. You also have the ability to manage Cookies through your personal browser settings. Please be aware that disabling certain Cookies may impair Site or Services functionalities.

VII. Artificial Intelligence

Artificial intelligence (“AI”) technologies, such as those provided by our AI platform providers, OpenAI, Anthropic, Google, and AWS are used to operate the chat and/or user input/prompt features that you can use to communicate with us and/or input your prompts and other data through the Site or Services. WE ADVISE AGAINST SHARING PERSONAL INFORMATION IN CHATBOT INTERACTIONS.

VIII. Legal Bases for Processing (For EEA and other Users)

Specific Provisions for EU-Residents. This Section VIII applies to you, if you are from the European Union. Obsidion Labs adopted the following provisions, to comply with the EU 2016/679 Directive General Data Protection Regulation (“GDPR”), pursuant to which Obsidion Labs will be considered as a “Data Controller” with respect to our use of personal information of resident of the European Union.

Legal Basis. We base our processing of any personal information as “Data Controllers” based on the following lawful grounds: Obsidion Labs relies, primarily, on your consent to the terms of this Privacy Policy as a legal basis for processing any personal information related to you or communicating any other promotional material and collecting and using your personal information when it is necessary for one of the legitimate uses set out in Section III above, which we believe are not overridden by your fundamental rights.

We may process your personal information to comply with a legal obligation and to protect our users’ vital interests. If, at any time, you wish to exercise your rights in accordance with the provisions provided by law (including as provided under this Section and Section XIV of this Privacy Policy) you may send us an email to company@obsidion.xyz and request: access your personal information together with information about how, and on what basis, such information is being processed. Should you desire to receive such information in a different format than the one that was provided to you, you can contact us via company@obsidion.xyz and we shall use commercially reasonable efforts to accommodate your request, if applicable; rectify any of the personal information being held when such information is inaccurate; to delete or restrict access to your personal information in limited circumstances as described under the GDPR. Please note that if we need to delete any personal information related to you, as per your request, it can take time until we completely delete residual copies of such data from our servers and backup systems. Exercising this right will not affect the lawfulness of any previous processing activities based on consent that was lawfully obtained before its withdrawal and to obtain and reuse your personal information for your own purposes across different services, as part of your right to data portability.

Please note that you have the right to complain to a Data Protection Authority about our collection and use of your Personal Information. For more information, please contact your local data protection authority in the European Economic Area (“EEA”). If you have any concerns with respect to our methods of processing any personal information related to you, or if you wish to withdraw your consent, for any reason, kindly let us know by sending an email to company@obsidion.xyz. If you reside in a country from the EEA, then, by agreeing to the terms of this Privacy Policy, you agree to Obsidion Labs sharing your personal information outside of the EEA. These transfers are subject to special rules under data protection laws. If this happens, we will ensure that the transfer will be compliant with data protection law and all personal information will be secure. Our standard practice is to use ‘standard data protection clauses’ which have been approved by the European Commission for such transfers. Obsidion Labs shall not charge you for requesting to exercise any of the aforementioned rights.

Please also note that we cannot change, edit or delete information that is stored on a public blockchain.

IX. Transfer of Personal Information to Other Countries

We may transfer your personal information to countries outside of your country of residence, including, but not limited to the UK, as well as the United States. Personal information is not processed outside of the countries listed in this Privacy Policy.

If you access the Site or Services from outside the jurisdiction where our servers are located, you consent to the transfer and processing of your information in accordance with this Privacy Policy and at your own risk, recognizing that the level of protection in such jurisdictions may be different from that of your home jurisdiction.

X. State Privacy Rights

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah or Virginia, you may have certain rights in relation to the personal information we collect from you. However, these rights are not absolute, and we may decline your request as permitted by law. These rights include:

Right to know whether or not we are processing your personal data;
Right to access your personal data;
Right to correct inaccuracies in your personal data;
Right to request the deletion of your personal data;
Right to obtain a copy of the personal data you previously shared with us;
Right to non-discrimination for exercising your rights; and
Right to opt out of the processing of your personal data if it is used for targeted advertising (or sharing as defined under California’s privacy law), the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

Depending on the state you live in, you may also have the following rights:

Right to access the categories of personal data being processed (as permitted by applicable law, including the privacy law in Minnesota);
Right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in California, Delaware, and Maryland);
Right to obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in Minnesota and Oregon);
Right to review, understand, question, and correct how personal data has been profiled (as permitted by applicable law, including the privacy law in Minnesota);
Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including the privacy law in California); and
Right to opt out of the collection of sensitive data and personal data collected through the operation of a voice or facial recognition feature (as permitted by applicable law, including the privacy law in Florida).

To exercise these rights, please contact us at: company@obsidion.xyz.

If you are a California resident, you have the right to request that Obsidion Labs disclose the specific personal information and categories we have collected about you. To request this information, please contact us at: company@obsidion.xyz. You can also request to have your personal information deleted that has been collected about you. To submit a deletion request, please contact us at: company@obsidion.xyz. We may not be able to accommodate a request if we believe that it would violate any law or legal requirement.

XI. How We Protect Your Information

Protecting your information is important to us. We maintain administrative, technical and physical safeguards designed to protect against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use of Personal Information.

XII. How Long We Retain Your Information

We strive to keep your personal information only for the period of time needed for legitimate business purposes. In certain circumstances, however, legal or regulatory obligations may require us to retain records for a longer time than we otherwise would.

XIII. Children’s Information

The Site and Services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from individuals under the age of 18. If you believe that an individual under the age of 18 has provided us with Personal Information, please contact us, and we will take appropriate steps to delete such information where feasible.

XIV. Your Rights

If you are resident in countries with applicable data privacy laws you have the right, subject to certain exceptions, to request a copy of the personal information we are processing about you, to require that any incomplete or inaccurate personal information is amended, to request that we delete your personal information (although we may not be able to delete certain data due to legal or other obligations), to object to the use of your personal information or to withdraw consent. You may also have a right to lodge a complaint with the local data protection authority if you believe that we have not complied with the applicable data protection laws. You may also contact us to address and resolve concerns you may have about our use of your Personal Information. Please contact us at company@obsidion.xyz.

XV. Modifications To This Privacy Policy

We may update this Privacy Policy from time to time including in response to changing legal, technical, or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws.

You can see when this Privacy Policy was last updated by checking the last updated date displayed at the top of this Privacy Policy. It is your responsibility to check the last updated date.

XVI. Third-Party Services, Applications, and Websites

Certain Third-Party Services, websites, or applications you use, or navigate to or from our Site or Services or made available by using our Site or Services may have separate user terms and privacy policies that are independent of this Privacy Policy. We are not responsible for the privacy practices of these Third-Party Services or applications. We recommend carefully reviewing the user terms and privacy policy of each Third-Party Service, website, and/or application prior to use.

XVII. Data Security

Our Security Safeguards. We have established commercially reasonable safeguards to protect the information we collect from loss, misuse, and unauthorized access, disclosure, alteration and destruction, but we cannot guarantee that your information will never be disclosed in a manner inconsistent with this Privacy Policy (e.g., as a result of unauthorized acts by third parties that violate Applicable Law, or our or our affiliated providers’ policies). Please be aware that despite our efforts, no data security measures can guarantee 100% security. While we strive to use commercially acceptable means to protect your personal information and data, we cannot guarantee its absolute security. Any natural or legal person who processes the data on behalf of Obsidion Labs may have access to your personal information or data. These third-party vendors collect, store, use, process and transfer information about your activity on our platform in accordance with their respective privacy policies. TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, OBSIDION LABS DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, REGARDING THE SECURITY OF YOUR PERSONAL INFORMATION, AND SHALL NOT BE LIABLE FOR ANY UNAUTHORIZED ACCESS TO, DISCLOSURE OF, ALTERATION OF, OR DESTRUCTION OF YOUR PERSONAL INFORMATION, EXCEPT TO THE EXTENT SUCH LIABILITY CANNOT BE EXCLUDED OR LIMITED UNDER APPLICABLE LAW. ANY LIMITATIONS OF LIABILITY SET FORTH IN THE TERMS OF USE ARE INCORPORATED HEREIN BY REFERENCE.

Your Obligations. You may log in to your account using third-party credentials or by connecting a digital asset wallet. We may use authentication technologies to register or authenticate you and enable you to use the Site. You are responsible for preventing unauthorized access to your Wallet, other electronic wallet, account, and personal information by appropriately safeguarding all credentials and access methods associated with your use of the Services and the Site, including passwords, private keys, seed phrases, recovery codes, and access to your computer, device, and browser, and by logging out or disconnecting your wallets when you have finished using the Services or the Site. We are not responsible for any lost, stolen, or compromised credentials or access methods, or for any unauthorized activity conducted through your account or connected wallet.

XVIII. Governing Law

This Privacy Policy shall be construed in accordance with and governed for all purposes by the substantive laws of the British Virgin Islands without regard to conflicts of law provisions. The exclusive jurisdiction for all disputes will be in the British Virgin Islands, and you and the Company each waive any objection to such jurisdiction and venue.

XIX. Contact Us

If you have any questions about this Privacy Policy, please contact us via company@obsidion.xyz.