PRIVACY POLICY
Effective Date: October, 2026
Last Updated: October, 2026
This Privacy Policy explains how TPZ Cybersecurity, Inc. (“TPZ,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with our website, products, services, Design Partner program, and related business activities.
This Privacy Policy does not replace any agreement between TPZ and a customer or Design Partner. When TPZ processes information on behalf of an organization, that processing may also be governed by the applicable agreement with that organization.
1. Information We Collect
The information we collect depends on how you interact with TPZ.
Information You Provide
We may collect information you provide directly to us, including:
name;
business email address;
company;
job title or role;
phone number;
information submitted through Design Partner, contact, or other website forms;
communications with TPZ;
support or security inquiries; and
other information you choose to provide.
Account Information
When you use a TPZ product or service, we may collect information needed to create and administer your account, authenticate you, associate you with your organization, and manage access to the service.
Information From Connected Systems
When an organization authorizes TPZ to connect to a supported system, TPZ processes information from that system as necessary to provide the applicable service.
Today, TPZ's current product begins with supported Microsoft Entra and Azure identity and access information. Depending on configuration and permissions, this may include selected account, role, authentication, sign-in, policy, identity-risk, application, service-principal, and access information.
TPZ's current Microsoft Entra product access is read-only.
More information about the categories of information TPZ currently accesses, how that information is handled, and the capabilities being validated in the Design Partner Beta is available on our Security & Data page. Trust Player Zero
Technical and Usage Information
We may automatically collect technical information associated with use of our website or services, such as:
IP address;
browser and device information;
operating system;
timestamps;
pages or product features accessed; and
diagnostic, security, and performance information.
Information From Other Sources
We may receive business contact information from sources such as professional networks, referrals, events, publicly available information, and business-information providers.
2. How We Use Information
We may use personal information to:
provide, operate, maintain, and secure our website and services;
create and administer accounts;
authenticate users and manage authorized access;
connect to customer-authorized systems;
provide identity and access investigation and related product functionality;
operate and evaluate our Design Partner program;
respond to support, security, and general inquiries;
communicate with customers, Design Partners, applicants, and prospective customers;
monitor and improve product performance and security;
investigate misuse, fraud, or security incidents;
develop and improve our products and services;
enforce applicable agreements; and
comply with applicable legal obligations.
3. Customer Data
Organizations may provide information to TPZ or authorize TPZ to access information through connected systems.
As between TPZ and the applicable organization, ownership and permitted use of Customer Data are governed by the applicable customer, Design Partner, beta, or other written agreement.
When TPZ processes personal information on behalf of an organization, individuals seeking to exercise rights relating to that information may need to direct their request to the applicable organization.
TPZ may assist that organization in responding where required by applicable law or contract.
4. AI-Assisted Features
TPZ currently offers limited AI-assisted functionality.
When a user chooses to use the AI Assistant, chat messages and relevant product-page context may be transmitted to a third-party AI service provider to generate a response. TPZ currently uses Anthropic for this functionality. Trust Player Zero
TPZ does not automatically provide the AI Assistant with a customer's entire identity directory.
Use of AI-assisted functionality does not give an AI model independent authority to make changes to a customer's Microsoft Entra environment.
Additional information about current AI functionality and data handling is available on our Security & Data page.
5. How We Disclose Information
We may disclose personal information in the following circumstances:
Service providers. We may provide information to service providers that perform services on our behalf, including cloud infrastructure, hosting, authentication, security, communications, scheduling, analytics, and AI services.
Customer or user direction. We may disclose information when directed or authorized by the applicable customer or user.
Legal requirements. We may disclose information when required by applicable law, regulation, legal process, or governmental request, or when reasonably necessary to protect TPZ, our customers, users, or others.
Business transactions. Information may be transferred as part of a merger, acquisition, financing, reorganization, sale of assets, or similar transaction.
We do not describe third-party service providers as independent data recipients when they process information solely on TPZ's behalf.
6. Cookies and Similar Technologies
TPZ may use cookies and similar technologies to operate and secure the website, remember preferences, understand website usage, and support analytics or marketing functionality where enabled.
Where required by applicable law, TPZ will request consent before using non-essential cookies or similar technologies.
You may also control certain cookies through your browser settings.
7. Data Retention
TPZ retains personal information for as long as reasonably necessary for the purposes for which it was collected, including providing and securing services, maintaining business records, complying with legal or contractual obligations, resolving disputes, and enforcing agreements.
Retention periods vary based on the information involved, the applicable relationship, system configuration, and legal requirements.
For the current product, sign-in events are configured for 90-day retention. Other normalized identity and access information does not yet have one universal time-based retention period. More detail is available on our Security & Data page. Trust Player Zero
Customer-specific requirements may also be addressed through the applicable written agreement.
8. Data Security
TPZ maintains administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.
No method of transmission, processing, or storage can be guaranteed to be completely secure.
Additional information about TPZ's current security and data-handling practices is available on our Security & Data page.
9. Privacy Rights and Choices
Depending on where you live and the laws that apply, you may have rights relating to your personal information, including the ability to:
request access to certain personal information;
request correction of inaccurate personal information;
request deletion of certain personal information;
request a copy of certain personal information;
object to or request restriction of certain processing; or
exercise other rights provided by applicable law.
To submit a privacy request, contact:
We may request information reasonably necessary to verify your identity and process your request.
If TPZ processes the relevant information on behalf of a customer, we may refer your request to that customer or assist the customer in responding.
10. Marketing Communications
You may opt out of promotional emails using the unsubscribe link included in those communications or by contacting us.
You may continue receiving non-promotional communications relating to your account, service, security matters, transactions, or an existing business relationship.
11. Children's Privacy
TPZ's website and services are intended for business use and are not directed to children.
We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will take reasonable steps to delete it.
12. International Processing
TPZ and its service providers may process personal information in the United States and other jurisdictions in which they operate.
Where required by applicable law, TPZ will use appropriate safeguards for transfers of personal information between jurisdictions.
13. Third-Party Services
Our website and products may link to or integrate with services operated by third parties.
TPZ is not responsible for the privacy practices of third parties acting independently of TPZ. Their handling of information is governed by their own privacy policies and agreements.
14. Changes to This Privacy Policy
We may update this Privacy Policy as our products, practices, or legal obligations change.
When we do, we will revise the “Last Updated” date above and provide additional notice where required by applicable law.
15. Contact Us
Questions or requests regarding this Privacy Policy may be directed to:
TPZ Cybersecurity, Inc.
privacy@trustplayerzero.com