Privacy Policy
Last updated 2026-10-09
This Privacy Policy explains what information Principia Global Holdings Limited, a company incorporated in the British Virgin Islands ("Principia Labs", "we", "us") collects when you use principialabs.io and its subdomains, including Listscope (listscope.principialabs.io), Real World Assets (rwa.principialabs.io) and our sign-in service (auth.principialabs.io) (together, the "Services"), and how we use it.
Information we collect
When you sign in
You can browse the Services without an account. If you choose to sign in, we receive the following from the method you pick:
| Sign-in method | What we receive |
|---|---|
| Your Google account ID, name, email address and profile picture | |
| X | Your X user ID, name, username and profile picture |
| Telegram | Your Telegram user ID, name, username and profile photo |
| Crypto wallet | Your public wallet address and a signed message proving you control it |
We never receive your passwords, and we never receive or ask for a wallet's private key or seed phrase. Signing in with a wallet does not give us permission to move any assets.
We store this information, together with the time you signed in and the methods you have linked, so that we can recognise you across the Services.
Cookies
When you sign in we set a session cookie on principialabs.io so that you stay signed in across our subdomains. It is strictly necessary for sign-in and is removed when you sign out or when it expires. We do not use advertising or analytics cookies.
When you contact us
If you send us a message through a form on the Services, we receive the name, email address and message you enter. The form is delivered to us by EmailJS.
Technical information
Like most websites, our hosting and network providers process your IP address, browser type, the pages you request and the time of each request. We use this to run the Services, keep them secure and fix problems.
How we use information
We use the information above to:
- sign you in and keep you signed in across the Services;
- provide, maintain and improve the Services;
- respond to your messages;
- protect the Services and their users against abuse, fraud and security threats; and
- comply with legal obligations.
We do not sell your personal information, and we do not use it for advertising.
Who we share it with
We share information only with service providers that help us run the Services, and only as far as they need it:
- Railway: hosting and databases
- Cloudflare: DNS, content delivery and security
- EmailJS: delivery of contact-form messages
- Lark: email
The sign-in provider you choose (Google, X or Telegram) also learns that you signed in to the Services, under its own privacy policy.
We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply.
International transfers
Our service providers may process information in countries other than the one you live in, including the United States and Singapore. Where we transfer personal information, we take steps to keep it protected as described in this policy.
How long we keep it
- Account information: until you delete your account.
- Contact-form messages: as long as needed to deal with your enquiry.
- Technical logs: for a limited period, typically no more than 90 days, unless needed to investigate a security issue.
Your choices and rights
You can sign out at any time. You can ask us to access, correct or delete your personal information, or to delete your account, by emailing us at the address below. Depending on where you live, you may have further rights under local law, such as objecting to or restricting how we process your information; we will honour them as the law requires.
You can also remove our access from your Google or X account settings at any time.
Security
We protect your information with measures such as encrypted connections (HTTPS), signed session tokens and restricted access to our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Children
The Services are not directed to anyone under 18, and we do not knowingly collect personal information from them.
Changes to this policy
We may update this policy from time to time. When we do, we will change the date at the top of this page, and for significant changes we will give notice on the Services.
Contact us
Questions or requests about this policy: [email protected].