PRIVACY POLICY
Effective Date: [August, 2026]
Last Updated: [August, 2026]
This Privacy Policy describes how TPZ Cybersecurity, Inc. (“TPZ,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with our website, products, services, and related business activities.
This Privacy Policy does not supersede any agreement between TPZ and a customer. Where TPZ processes personal information on behalf of a customer, that processing is also governed by the applicable customer agreement.
1. Information We Collect
The information we collect depends on how you interact with TPZ.
Information You Provide
We may collect information you provide directly to us, including:
name;
business email address;
company and job title;
phone number;
information submitted through forms;
communications with TPZ;
support requests; and
other information you choose to provide.
Account Information
When you use the TPZ service, we may collect information necessary to create and administer your account, authenticate you, associate you with your organization, and manage access to the service.
Information From Connected Systems
When a customer connects a supported system to TPZ, we process information from that system as necessary to provide the service.
For Microsoft Entra, this may include selected identity, account, role, authentication, sign-in, policy, risk, security posture, application, and service-account information.
Additional information regarding the data TPZ accesses and does not access is available on our Security & Data page.
Technical and Usage Information
We may automatically collect technical information relating to the use of our website and services, including IP address, browser and device information, operating system, timestamps, pages or features accessed, and diagnostic, security, and performance information.
Information From Other Sources
We may receive business contact information from publicly available sources, professional networks, referrals, events, and business-information providers.
2. How We Use Information
We may use personal information to:
provide, operate, maintain, and secure our services;
create and administer accounts;
authenticate users and manage access;
connect to customer-authorized systems;
provide security, identity, risk, and posture analysis;
generate findings and recommendations;
provide support and respond to inquiries;
communicate with customers and prospective customers;
monitor and improve the performance and security of our services;
investigate misuse, fraud, or security incidents;
improve our products and services;
enforce our agreements; and
comply with applicable law.
3. Customer Data
Customers may provide information to TPZ or authorize TPZ to access information from connected systems.
As between TPZ and the applicable customer, the customer retains its rights in Customer Data, subject to the applicable customer agreement. TPZ processes Customer Data to provide, maintain, support, and secure the service and for other purposes permitted by the applicable agreement. Your existing Beta Agreement similarly provides that the customer retains ownership of Customer Data.
Where TPZ processes personal information on behalf of a customer, individuals seeking to exercise rights with respect to that information should generally direct their request to the applicable customer.
4. AI-Assisted Features
TPZ may offer optional features that use third-party artificial intelligence services.
When a user uses an AI-assisted feature, the user's prompt or conversation and limited product context may be transmitted to the applicable AI service provider to generate a response.
TPZ does not automatically provide the AI Assistant with a customer's full identity directory.
Additional information regarding providers used by TPZ is available on our Security & Data page.
5. How We Disclose Information
We may disclose personal information:
Service Providers. We may disclose information to service providers that perform functions on our behalf, including cloud infrastructure, authentication, security, communications, scheduling, analytics, and AI services.
Customer Direction. We may disclose information at the direction or with the authorization of the applicable customer or user.
Legal Requirements. We may disclose information where required by law, regulation, legal process, or governmental request, or where reasonably necessary to protect the rights, property, or safety of TPZ, our customers, users, or others.
Business Transactions. Information may be transferred in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction.
6. Cookies and Similar Technologies
We may use cookies and similar technologies to operate and secure our website, remember preferences, understand website usage, and, where enabled, support analytics or marketing activities.
Where required by applicable law, we will obtain consent before using non-essential cookies or similar technologies.
Users may also control certain cookies through their browser settings.
7. Data Retention
We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to provide our services, maintain business and security records, comply with legal and contractual obligations, resolve disputes, and enforce our agreements.
Retention periods may vary based on the type of information, the applicable customer relationship, and legal requirements.
Customer-specific retention requirements may be addressed in the applicable customer agreement.
8. Data Security
TPZ maintains administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.
No method of transmission or storage is completely secure, and TPZ cannot guarantee absolute security.
Additional information regarding TPZ's security and data-handling practices is available on our Security & Data page.
9. Privacy Rights and Choices
Depending on your jurisdiction and applicable law, you may have the right to:
request access to personal information about you;
request correction of inaccurate personal information;
request deletion of certain personal information;
request a copy of certain personal information;
object to or restrict certain processing; or
exercise other rights provided by applicable law.
To submit a privacy request, contact us at privacy@trustplayerzero.com.
We may request information reasonably necessary to verify your identity and process your request.
Where TPZ processes personal information on behalf of a customer, we may refer the request to that customer or assist the customer in responding.
10. Marketing Communications
You may opt out of promotional email communications by using the unsubscribe link included in the message or by contacting us.
You may continue to receive non-promotional communications relating to an account, service, transaction, security matter, or existing business relationship.
11. Children's Privacy
Our website and services are intended for business use and are not directed to children under 13.
We do not knowingly collect personal information from children under 13. If we become aware that we have done so, we will take reasonable steps to delete the information.
12. International Data Processing
TPZ and its service providers may process personal information in the United States and other jurisdictions in which they operate.
Where required by applicable law, TPZ will use appropriate safeguards for transfers of personal information between jurisdictions.
13. Third-Party Services
Our website and services may contain links to or integrations with third-party services.
TPZ is not responsible for the privacy practices of third parties acting independently of TPZ. Their processing of personal information is governed by their respective privacy policies.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
When we do, we will revise the “Last Updated” date above. Where required by law, we will provide additional notice of material changes.
15. Contact Us
Questions or requests regarding this Privacy Policy may be directed to:
TPZ Cybersecurity, Inc.
Email: privacy@trustplayerzero.com