Privacy Policy

Last updated: July 16, 2026

This Privacy Policy describes how ZTPASS INC. and its affiliates ("ZTPass," "we," "us," or "our") collect, use, disclose, and protect personal information when you (i) visit or use our website at www.ztpass.com (the "Website"), (ii) install or use the ZTPass Key Manager mobile application (the "App"), (iii) purchase or use our smart cards, security keys, and related hardware and services, or (iv) communicate with us, including through our SMS/text messaging. This Privacy Policy applies across our Website, App, and other ZTPass products and services (collectively, the "Services"). By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Scope of This Policy

This Privacy Policy covers personal information collected through:

  • ZTPass Website — ztpass.com and related pages, including product, support, and contact pages;
  • ZTPass Key Manager App — available on iOS, Android, and macOS and Windows (Soon), used to manage and personalize ZTPass smart cards and security keys (FIDO2 and PIV applications);
  • ZTPass Products and Support — purchases, orders, shipping, warranty, and customer support interactions; and
  • ZTPass SMS/Text Messaging — text messages you receive from ZTPass after opting in, such as order updates, account notifications, or support communications.

2. Personal Information We Collect

2.1 Information You Provide to Us
  • Contact information: name, email address, mailing address, and phone number (including mobile number for SMS communications);
  • Order and billing information: shipping address, payment details, and order history when you purchase products through the Website;
  • Account and support information: information you submit through contact forms, support tickets, or when corresponding with our team;
  • App configuration data: settings and preferences you configure within the Key Manager App, such as device labels, PIN/PUK management actions, and stored certificate metadata associated with your own security key or smart card.
2.2 Information Collected Automatically by the App

The ZTPass Key Manager App is designed with privacy at its core:

  • Does not require user registration or account creation;
  • Does not connect to any external server or cloud service for App functionality;
  • Does not use analytics tools, tracking pixels, or advertising SDKs;
  • Does not store personal user information locally or remotely beyond device nicknames you choose to set (which are stored only on your device and removable via the App or by uninstalling).
2.3 App Permissions

The App requests the following device permissions, used solely for hardware communication:

  • NFC: Used exclusively for hardware communication with NFC-enabled security keys;
  • USB Host Access: Used exclusively for USB key communication;
  • Location (Android only): Required by the Android operating system for NFC/Bluetooth functionality — ZTPass does not access, collect, or process your location data;
  • Internet Permission: Declared in the app manifest but not actively used for data transmission.
2.4 Mobile Information and SMS Data
  • Mobile phone number provided when you opt in to receive text messages from ZTPass;
  • Consent status and timestamp, including the date, time, and method of your opt-in and any opt-out (STOP) requests;
  • Message content and delivery data related to the SMS (e.g., delivery confirmations).

No mobile information collected in connection with the SMS will not be shared with any third party or affiliate for their own marketing or promotional purposes.

3. How We Use Personal Information

We use the personal information described above to:

  • Provide, operate, and maintain the Website, the App, and our products and support services;
  • Process and fulfill orders, including shipping, billing, and returns;
  • Enable and support device management functions within the Key Manager App (e.g., FIDO2/PIV configuration, PIN/PUK resets, certificate viewing);
  • Send transactional and account-related communications, including SMS messages you have opted in to receive;
  • Respond to inquiries, provide customer support, and troubleshoot issues;
  • Maintain the security, integrity, and proper functioning of our Services and prevent fraud or abuse;
  • Improve our Website, App, and products, and develop aggregated or anonymized usage statistics;
  • Comply with applicable law, legal process, and carrier or regulatory requirements.

We do not use your mobile phone number or SMS opt-in information for any purpose other than delivering the messages you have agreed to receive and administering the SMS program.

4. SMS / Text Messaging Program Terms

  • Consent: By opting in through our Website, order forms, or in-store sign-up, you consent to receive SMS text messages from ZTPass related to orders, account notifications, and support. Consent to receive messages is not a condition of purchase.
  • Message frequency: Message frequency may vary based on your interactions with ZTPass (e.g., order and support activity).
  • Message and data rates: Message and data rates may apply, depending on your mobile carrier plan.
  • Opt-out: Reply STOP at any time to a ZTPass text message to opt out of future messages. You may also contact us using the details in Section 13.
  • Help: Reply HELP to a ZTPass text message, or contact us for assistance, at any time.
  • Carriers: Carriers are not liable for delayed or undelivered messages.

SMS consent is not shared with third parties or affiliates for marketing or promotional purposes. Your mobile opt-in status and phone number are used exclusively to deliver the ZTPass SMS program you signed up for and are not sold, rented, or shared with third parties for their own marketing purposes.

5. App Security Features

The ZTPass Key Manager App incorporates the following security enhancements to protect your hardware key interactions:

  • Screenshot prevention to block unauthorized capture of sensitive screens;
  • Screen recording protection to prevent recording of App sessions;
  • Hardware-level PIN verification to ensure only authorized users can manage security key functions.

6. Cookies and Similar Technologies

Our Website uses cookies and similar technologies to operate the site, remember preferences, understand how visitors use the Website, and improve our content. You can control cookies through your browser settings; disabling certain cookies may limit some Website functionality.

7. Data Security

We implement reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. For our hardware security key products, ZTPass applies additional security measures including:

  • Hardware-level PIN verification and lockout mechanisms;
  • FIDO2 and PIV standards compliance for cryptographic security;
  • In-App screenshot and screen recording prevention.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain personal information for as long as necessary to provide the Services, fulfill the purposes described in this Privacy Policy, and comply with our legal, tax, and accounting obligations. SMS opt-in and opt-out records are retained as needed to demonstrate consent and honor opt-out requests in accordance with carrier and regulatory requirements. App-side data (such as device nicknames) is stored solely on your device and can be deleted at any time via the App or by uninstalling it.

9. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal information, to receive a copy of your data, or to object to certain processing. You may also opt out of SMS messages at any time as described in Section 4. To exercise these rights, contact us using the details in Section 13. We will not discriminate against you for exercising your privacy rights.

  • Access: Request a copy of the personal information we hold about you;
  • Correction: Request correction of inaccurate or incomplete information;
  • Deletion: Request deletion of your personal information, subject to legal retention requirements;
  • Restriction: Request that we restrict processing of your information in certain circumstances;
  • Portability: Receive a copy of your information in a structured, machine-readable format;
  • Objection: Object to certain processing activities.

10. Children's Privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children. If we learn we have collected personal information from a child without verified parental consent, we will take steps to delete that information.

11. Third-Party Links

Our Website and App may contain links to third-party websites or services, including app store listings and payment processors. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, through additional notice. Please review this page periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, or to opt out of SMS messages, contact us at:

ZTPASS INC.

Email: connect@ztpass.com

Website: https://ztpass.com

Privacy Policy link: https://ztpass.com/pages/privacy-policy 

  • Trusted Worldwide
    Securing enterprise and government access worldwide
  • Rapid Deployment
    Delivering security at speed
  • Expert Support
    Available 7 days a week
  • Unmatched Value
    Enterprise - grade protection