Privacy Policy

For the processing described in this Policy, L7 Holdings Group Inc., 16192 Coastal Highway, Lewes, Delaware 19958, United States, is generally the business/controller responsible for your personal information, subject to the role of independent third parties that process data under their own privacy terms. Privacy requests may be sent to legal@l7.exchange.

This Policy does not govern an independent third-party website, exchange, broker, wallet, payment processor or identity provider acting for its own purposes. Review their privacy notices where applicable.

A. Account and Contact Data

Name, username, email address, phone number, country/region, address where required, date of birth, account ID, communication preferences and account credentials/security data.

B. Identity and Compliance Data

Government-issued identification and document metadata; proof of residence; nationality/citizenship; date/place of birth; selfie/liveness images where required; sanctions/PEP/adverse-media screening results; tax residency/forms; fraud/risk information; wallet-ownership information; and other information reasonably required for KYC, sanctions, tax, fraud or legal compliance.

C. Purchase, Payment and Payout Data

Evaluation purchases, price/discount, payment status, billing metadata, payment-provider references, refunds, disputes/chargebacks, payout amount/history, tax/withholding information, USDC wallet address, supported network, blockchain transaction hash and related settlement records. We generally rely on payment processors for complete card credentials.

D. Trading, Evaluation and Funding-Requirements Data

Account size/configuration, Evaluation ID and rule version, orders, fills, positions, instrument/market, side, size, timestamps, prices, realized/unrealized P&L, Server Equity, Daily High Equity, Daily Trailing Drawdown, Static Maximum Drawdown, Qualification Progress, fees/funding, Evaluation result, Certificate status, funded-account activity, payout calculations, rule breaches, strategy/risk indicators and account-linkage signals. We also collect Funding Requirements questionnaires, interview scheduling data, interview recordings/transcripts where used, explanations of trades, reviewer notes, high-level risk/suitability assessments, conditions imposed on funded offers and funded-activation decisions.

E. Device, Network and Usage Data

IP address, approximate location derived from IP, device/browser/OS, session and device identifiers, login timestamps, pages/features used, referral source, crash/performance data, cookies/SDK identifiers, security signals, VPN/proxy indicators and other technical logs.

F. Communications, Interviews and Support Data

Emails, chats, tickets, attachments, support records, questionnaire responses, interview audio/video or transcripts where recorded with appropriate notice/consent, interviewer notes, complaints, appeal/reconsideration requests, surveys and other communications with L7.

G. Public/Third-Party Data

Information from compliance/fraud providers, payment providers, brokers/exchanges/market-data providers, prediction-market sources, blockchain explorers/analytics providers, affiliates, public sources, sanctions lists and business partners where permitted by law.

• Create, authenticate, secure and administer accounts.
• Process purchases, discounts, refunds, payment disputes, tax records and payouts.
• Operate simulated Evaluations; calculate Actual Net Realized Profit, Qualification Progress, Server Equity, drawdown limits and Verified Pass status; issue and verify Certificates.
• Conduct Evaluation integrity review and investigate prohibited trading, coordinated accounts, account sharing, manipulation, technical exploitation and anomalous results.
• Conduct KYC, questionnaires, interviews and qualitative risk/suitability checks as part of the Funding Requirements; decide whether to approve, conditionally approve, defer or decline funded activation; set funded limits and monitoring requirements.
• Establish, operate, monitor and risk-manage funded accounts and calculate Performance Splits.
• Verify identity, age, residence, sanctions status, eligibility and account ownership; prevent fraud, payment abuse and market abuse.
• Maintain, debug, secure, personalize and improve the Services and develop new features, execution/risk models and service analytics.
• Provide customer support and operational/legal notices; resolve appeals/reconsideration requests and disputes.
• Perform analytics, accounting, audit, compliance, recordkeeping and internal business operations.
• Comply with law, lawful process and contractual obligations; establish, exercise or defend legal claims.
• Send marketing or promotions where permitted, subject to consent/opt-out requirements.
• Evaluate or complete a merger, financing, reorganization, sale or other corporate transaction.

L7 may use automated tools to assist with fraud detection, account security, KYC/sanctions screening, Evaluation-rule compliance, account-linkage analysis, trading-integrity review, prediction-market/market-data checks, funded risk analysis and operation of the L7 pipelines. Automated signals may lead to requests for information, temporary holds, risk-limit actions or human review.

Funding Requirements may use quantitative and qualitative risk indicators, but material funded-activation decisions may also involve human judgment, including review of questionnaires and trading interviews. Where applicable law grants a right to review, explanation, appeal or opt out of solely automated decisions producing legal or similarly significant effects, L7 will provide that right to the extent required. In addition, regardless of jurisdiction, a final Evaluation-integrity invalidation, funded-activation decline based materially on risk/integrity factors, or payout denial for prohibited-trading/integrity reasons will be made or confirmed by a human reviewer under the applicable policy.

We use cookies, pixels, SDKs, local storage and similar technologies for authentication/security, preferences, analytics, performance and, where enabled, advertising/measurement. See the L7 Cookie Notice and cookie settings for more detail. Where law requires consent for non-essential technologies, L7 will seek consent before activating them.

• Service providers: cloud hosting, cybersecurity, analytics, customer support, communications, payment processing, identity/KYC, sanctions screening, fraud prevention, blockchain analytics, tax/accounting and professional advisers.
• Trading and infrastructure partners: brokers, exchanges, market makers, liquidity providers, custodians, data vendors and technology providers where necessary to operate evaluation/funded trading or protect capital.
• Payment and payout partners: processors, banks, stablecoin/wallet/network providers and fraud/chargeback services.
• Affiliates and capital partners: where reasonably necessary to operate the Services, allocate funded capital, manage risk or provide support.
• Legal/regulatory recipients: courts, regulators, law enforcement, sanctions authorities or other persons where required by law or reasonably necessary to protect rights, security or investigate unlawful conduct.
• Corporate transaction counterparties and advisers: subject to appropriate confidentiality arrangements.
• Other parties with your direction or consent.

L7 does not sell personal information for monetary consideration. Some U.S. privacy laws define “sale,” “sharing” or “targeted advertising” broadly enough to include certain advertising/analytics disclosures. If L7 engages in activity covered by those definitions, L7 will provide the legally required notice and opt-out mechanisms, including recognized opt-out preference signals where required.

• Contract: processing needed to provide an account, evaluation, funded trading, payout or support you request.
• Legitimate interests: security, fraud prevention, trading integrity, risk management, product improvement, analytics and business operations, balanced against your rights where applicable.
• Legal obligation: sanctions, tax, accounting, legal process and other mandatory requirements.
• Consent: marketing, non-essential cookies, sensitive/biometric processing or other purposes where consent is required.
• Legal claims: establishing, exercising or defending rights and resolving disputes.

Where L7 enables identity verification using a selfie, liveness check, facial comparison or similar technology, a verification provider may process images or measurements that qualify as biometric or sensitive personal information under some laws. L7 will provide any separate notice/consent required before collection and will use such information only for identity, fraud, security or compliance purposes unless law permits and L7 separately discloses another purpose.

L7 will not sell or commercially trade biometric identifiers. Retention and deletion will follow applicable law and any provider-specific biometric retention notice. If L7 does not use biometric verification, this section does not itself authorize collection.

Public blockchain transactions can be visible and effectively immutable. If you provide a wallet address or receive a USDC payout, the address, network, amount, transaction hash and related blockchain data may be publicly observable and may be analyzed for sanctions, fraud and security purposes. L7 cannot delete data written to a public blockchain.

L7 is a U.S. company and may use service providers in multiple countries. Your personal information may be transferred to and processed in the United States and other jurisdictions whose privacy laws differ from those where you live. Where law requires a transfer mechanism or safeguards, L7 will use appropriate contractual or other safeguards.

L7 retains information for as long as reasonably necessary for the purposes in this Policy, taking into account the duration of the account, financial/tax requirements, KYC/compliance recordkeeping, chargeback periods, trading/audit needs, fraud prevention, security, legal limitation periods and active disputes/investigations.

When data is no longer required, L7 will delete, anonymize or securely dispose of it as appropriate, except information retained in backups, legal holds or immutable public blockchains. Different categories have different retention periods.

L7 uses administrative, technical and organizational safeguards designed to protect personal information, including access controls, authentication, logging, encryption where appropriate and service-provider controls. No system is completely secure. You are responsible for protecting credentials, devices and payout wallets and should notify L7 promptly of suspected compromise.

Depending on your residence and applicable law, you may have rights to confirm processing; access personal information; obtain a portable copy; correct inaccuracies; delete information; restrict or object to processing; withdraw consent; opt out of targeted advertising, sale or certain profiling; obtain information about recipients; and appeal a denied request.

To exercise a right, email legal@l7.exchange or use any privacy-request mechanism L7 makes available. L7 may verify identity and authority. Authorized agents may be used where applicable law permits. Rights are subject to legal exceptions, including data needed for security, fraud prevention, transactions, legal obligations and claims.

If the Delaware Personal Data Privacy Act applies to L7 and to your information, Delaware consumers may have rights including access, correction, deletion, portability, information about specific third parties to which data has been disclosed (subject to the statute), and opt-outs of targeted advertising, sale of personal data and profiling in furtherance of solely automated decisions producing legal or similarly significant effects.

L7 will respond to authenticated requests within the time required by applicable law and will provide instructions to appeal a denial. If L7 processes personal data for targeted advertising or a statutory “sale,” L7 will provide the required conspicuous opt-out and honor recognized preference signals when legally required.

This section supplements the Policy for California residents to the extent the California Consumer Privacy Act, as amended, applies. During the relevant period, L7 may collect the categories described above, including identifiers; customer/account records; commercial/payment data; internet/network activity; geolocation approximations; professional/account activity; inferences/risk signals; and sensitive personal information such as government ID, account credentials, precise data if enabled, or biometric information where identity verification uses it.

L7 collects these categories from you, your devices, service providers, trading/payment/infrastructure partners, public/blockchain sources and affiliates for the business/commercial purposes described in this Policy. L7 may disclose categories to service providers/contractors, infrastructure partners, professional advisers, legal authorities and corporate-transaction parties.

California residents may have rights to know/access, correct, delete, receive portability, opt out of sale/sharing, limit certain uses of sensitive personal information, and receive non-discriminatory treatment. L7 does not sell personal information for monetary consideration. If L7 engages in “sharing” for cross-context behavioral advertising, it will provide the legally required opt-out.

Where the GDPR, UK GDPR or comparable Swiss law applies, you may have rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent, and the right to complain to a competent supervisory authority. Some rights depend on the legal basis and are subject to exceptions.

Where L7 relies on legitimate interests, you may request information about the balancing analysis where appropriate. Where data is transferred internationally, L7 will use an applicable adequacy mechanism, standard contractual clauses or other lawful safeguard as required.

You can unsubscribe from promotional email using the unsubscribe link or contacting L7. You may continue to receive transactional, security, legal, account and payout communications. Cookie/advertising choices are addressed in the Cookie Notice and cookie settings.

The Services are not intended for persons under 18 and they may not create an account or trade. If L7 learns that personal information was collected from an ineligible minor, L7 will take appropriate steps to close the account and delete information where legally permitted/required.

L7 may update this Policy as the Services or law changes. The “Last Updated” date identifies the current version. L7 will provide additional notice or obtain consent where a material change legally requires it.

Privacy requests, appeals and questions: legal@l7.exchange. Mail/contact address: L7 Holdings Group Inc., 16192 Coastal Highway, Lewes, Delaware 19958, United States. Include enough information to identify your account and request, but do not send passwords or private keys. L7 may request verification before acting.