Privacy Policy
Last updated: June 2026. This Privacy Policy describes how Abraxas Protocol, operated under World Labs Protocol ("Abraxas," "we," "us," or "our"), collects, uses, and discloses information when you use our website and services (the "Services"). By using the Services, you accept and consent to this Privacy Policy.
1. Information we collect
The information we collect depends on how you interact with the Services. This includes:
Account information. Your email address from Google sign-in, and the Sui wallet address derived via zkLogin when you authenticate on /passport.
Identity verification information.If you complete Abraxas Precheck, our certified partner Veriff collects your government ID and a liveness check directly. We receive a verification result from Veriff, not your underlying ID images or biometric data. If you submit documents for Business, Property, or Asset Owner verification, those documents are stored securely and reviewed by our team.
Transaction information. When you make a purchase, book a stay, or express investment interest, we collect your email, the asset or item involved, the amount, and, where relevant, a shipping address or booking dates.
Automatically collected information. Like most websites, we may collect your IP address, browser type, device type, and pages viewed, to help us understand usage and maintain security.
2. How we use your information
We use your information to create and maintain your account, process identity verification, confirm stablecoin transactions, fulfill purchases and bookings, communicate with you about the status of any of the above, maintain the security of the Services, and comply with legal obligations, including recordkeeping required under securities law for any investment offerings you participate in.
3. Children's privacy
The Services are not directed to, and we do not knowingly collect personal information from, anyone under the age of 18. If we learn that we have collected personal information from someone under 18, we will take steps to delete that information. If you believe a minor has provided us with personal information, please contact us using the information in Section 8.
4. Do-not-track signals
Some browsers include a Do-Not-Track ("DNT") feature. No uniform standard for recognizing DNT signals has been finalized across the industry, so we do not currently respond to DNT signals in a particular way, but we limit our own tracking to what is necessary to operate and secure the Services.
5. How we share your information
We do not sell your personal information. We may share information with:
Service providers. Veriff (identity verification), Supabase (data storage), and HeroSwap (the Swap feature, a separate third-party service with its own privacy practices). Each provider processes information only as needed to provide their service to us.
The Sui blockchain. Your Sui wallet address and Passport stamp bitmask may be recorded on-chain. Your name and personal information are not published on-chain. only cryptographic proofs.
Legal and safety reasons. We may disclose information to comply with a court order, law, or legal process, or to protect the rights, property, or safety of Abraxas, our users, or others.
6. Your rights
Depending on where you live, you may have the right to request access to, correction of, or deletion of your personal information. If you are a resident of California, Virginia, or another state with its own consumer privacy law, you may have additional rights under that law, including the right to opt out of certain uses of your data. To exercise any of these rights, contact us using the information in Section 8. Some information, particularly records related to completed securities transactions, may need to be retained for legal and regulatory reasons even after a deletion request.
7. Data security
We use reasonable technical and organizational measures designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Contact us
Questions or requests regarding this Privacy Policy can be sent through the contact form on our website.
9. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the Services after a change is posted constitutes acceptance of the update.