Last updated: November 2025

Lava Protocol Inc., doing business as Magma Devs (“Magma Devs,” “we,” “our,” or “us”) values your privacy. This Privacy Policy explains how we collect, use, and protect personal information when you visit our website or use our products and services.

1. Introduction

Lava Protocol Inc. DBA Magma Devs (“Magma Devs”) is committed to safeguarding your personal data and ensuring that your privacy is protected. This Privacy Policy describes the types of information we collect, how we use it, who we share it with, and the rights and choices available to you. It applies to all data collected through our website, communications, and services, including the Magma Devs Smart Router, development, and support services (collectively, the “Services”).

2. Data Controller and Contact Information

The entity responsible for processing your personal data is:

Lava Protocol Inc. DBA Magma Devs

Registered in Delaware, United States

Email: privacy@magmadevs.com

If you are located in the European Economic Area (EEA) or United Kingdom, we act as the data controller for your personal data in accordance with the General Data Protection Regulation (GDPR).

3. Information We Collect

We collect and process the following categories of personal data:

a. Information you provide directly

● Contact details: name, company name, title, email address, and phone number.

● Account details: username, password, and profile information.

● Billing and payment information: invoicing details, tax identification, and payment records.

● Communications: correspondence with our support, sales, or billing teams.

b. Information collected automatically

● Technical and usage data such as IP address, browser type, device information, and access times.

● Log and analytics data related to your interactions with our website or platform.

● Cookies and similar technologies to enhance functionality, improve performance, and analyze traffic.

c. Information processed on behalf of enterprise customers

When providing our Services to enterprise clients, we may process limited personal information about authorized users solely to perform our contractual obligations. In these cases, the client remains the data controller, and we act as a data processor.

4. How We Use Personal Data

We use personal data only as permitted by law and for the following purposes:

● To provide, operate, and improve our Services.

● To manage accounts, subscriptions, and billing.

● To respond to requests, support inquiries, and provide customer assistance.

● To send updates, newsletters, and product communications (with the ability to opt out).

● To ensure system security, prevent fraud, and comply with legal obligations.

5. Legal Basis for Processing (EEA and UK Users)

Where applicable under GDPR, we process personal data on one or more of the

following bases:

● Performance of a contract: to provide the Services and fulfill our obligations.

● Legal obligation: to comply with applicable laws and regulations.

● Legitimate interests: to operate and improve our business, provided these interests are not overridden by your rights.

● Consent: for certain communications or optional features where required.

6. Cookies and Analytics

We use cookies and similar technologies to enhance your experience, understand usage, and improve our website and Services. You can manage or disable cookies in your browser settings. Disabling cookies may affect functionality.

7. Data Sharing and Disclosure

We may share personal information as follows:

● With service providers who perform services such as hosting, analytics, customer support, or payment processing, subject to confidentiality and data protection agreements.

● With affiliates and subsidiaries to support operations, under equivalent privacy safeguards.

● With legal or governmental authorities when required by law or to protect our rights.

● In connection with mergers, acquisitions, or corporate restructuring, in which case we will ensure continued protection of your data.

We do not sell or rent personal information to third parties.

8. Data Retention

We retain personal data only as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Data that is no longer required will be securely deleted or anonymized.

9. Data Security

Magma Devs employs industry-standard security measures to protect personal data from unauthorized access, alteration, or destruction. These measures include encryption in transit and at rest, access control, monitoring, and regular security assessments. In the event of a data incident, we will notify affected parties and regulators in accordance with applicable laws.

10. International Data Transfers

Your information may be transferred and processed in countries where we or our service providers operate, including the United States and Israel. We ensure that such transfers comply with applicable data protection laws, including through the use of Standard Contractual Clauses (SCCs) or equivalent safeguards.

11. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

● Access: request a copy of your personal information.

● Rectification: correct inaccurate or incomplete data.

● Erasure: request deletion of data when it is no longer needed or consent is withdrawn.

● Restriction: limit processing under certain circumstances.

● Portability: request your data in a machine-readable format.

● Objection: object to processing based on legitimate interests or for direct marketing.

● Withdraw consent: stop receiving marketing or withdraw consent for optional processing.

To exercise any of these rights, contact us at privacy@magmadevs.com. We will respond in accordance with applicable data protection laws, including GDPR and CCPA/CPRA.

12. Data Processing on Behalf of Customers

When acting as a data processor for enterprise clients, we handle personal information only as instructed by the customer and in accordance with our Master Service

Agreement (MSA) and applicable Data Processing Addendum (DPA).

13. Third-Party Links and Services

Our website may contain links to third-party websites or services. We are not responsible for their content or privacy practices. We encourage users to review those third-party privacy policies before sharing personal information.

14. Children’s Privacy

Our website and Services are intended for professional and business use. We do not knowingly collect information from individuals under 16 years of age. If we become aware that such information has been collected, we will promptly delete it.

15. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in laws, technology, or business operations. The most recent version will always be available at www.magmadevs.com/privacy. Continued use of our Services after an update constitutes acceptance of the revised policy.

16. Contact Us

If you have any questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact:

Lava Protocol Inc. DBA Magma Devs

Email: privacy@magmadevs.com

Address: 300 N END AVE, New York, NY 10282