KeyPal Hardware Wallet

KeyPal Announces a 15-Day Personal Data Cleanup Policy to Strengthen User Privacy and Data Security Recent incidents involving user information leaks and supply chain security risks in the hardware wallet industry have once again highlighted the importance of personal privacy protection and data security management. As TokenPocket’s hardware wallet brand, KeyPal’s commitment to user security extends beyond devices and private keys to the protection of personal information generated throughout the purchasing, delivery, and service process. The security boundary of a hardware wallet should not be limited to private key storage and transaction signing. Personal information generated during device purchases, logistics delivery, and after-sales services is also an essential part of the overall security framework. If such data is unlawfully obtained, it may be used for targeted phishing, identity impersonation, and other forms of social engineering attacks. As of the date of this announcement, KeyPal has not identified any exploited security vulnerabilities in its systems or any incidents involving customer data leakage. These adjustments are part of a proactive security governance initiative in response to evolving industry risks and are not remedial measures taken in response to any specific security incident. KeyPal has long maintained internal data security management standards covering customer information protection, access control, and data deletion. As the industry security environment continues to evolve, we have decided to further strengthen our data governance standards, conduct a dedicated review of our existing systems and third-party services, and implement the following measures. Comprehensive Review of Historical Data and Access Permissions We will reassess historical order data stored in Shopify and related business systems, reviewing the storage status of personal information, deletion records, and access permissions. We will also examine third-party applications, exported data files, and other locations where redundant customer data may exist. For customer information that no longer has a reasonable need to be retained, we will proceed with deletion in accordance with applicable regulations and system capabilities, reducing potential security risks associated with the unnecessary accumulation of historical data. Reducing the Retention Period for Non-Essential Personal Information to 15 Days For orders where delivery has been confirmed, fulfillment has been completed, and there are no unresolved after-sales disputes or other lawful retention requirements, KeyPal will aim to delete or de-identify non-essential customer personal information within 15 days after order completion. To better balance user privacy with after-sales service rights, we will also explore more independent warranty and device verification mechanisms. Service eligibility may be verified through information such as order numbers or device serial numbers, reducing reliance on complete historical customer records. For financial, transaction, and after-sales records that must be retained by law, we will implement appropriate access restrictions and security protections and delete such information promptly once the applicable retention requirement no longer exists. Tightening Data Access Boundaries for Third-Party Services We will continue reviewing data interaction mechanisms across e-commerce, payment, logistics, and related service systems. Following the principle of data minimization, we will limit unnecessary information sharing and promptly revoke system permissions that are no longer required. It should be noted that logistics carriers and other independent service providers may retain certain information in accordance with their own business policies and legal obligations. Their data retention periods are not fully under KeyPal’s control. Therefore, the 15-day deletion target primarily applies to personal information that falls within KeyPal’s direct control and meets the conditions for deletion. For third-party services, we will continue to promote stronger data protection practices, but we cannot guarantee that all service providers will adopt identical retention periods. Separating Subscription Information from Transaction Data For users who voluntarily subscribe to official KeyPal communications, we may retain necessary email address information separately, subject to appropriate user authorization. Where possible, this information will be separated from historical order data, shipping addresses, and other identifying information. It will only be used for communications that users have agreed to receive, including product updates, firmware upgrades, security fixes, and important service notifications. Users will also retain the ability to unsubscribe. Continuing to Improve Control Over Our Data Infrastructure At present, part of KeyPal’s e-commerce operations rely on third-party platforms such as Shopify. We will continue evaluating the capabilities of our existing architecture in areas including data lifecycle management, access control, and security auditing, while exploring technical solutions that provide greater levels of independent control. Any architectural changes will be implemented with security, regulatory compliance, and business continuity as core considerations. We will also take into account practical requirements such as payment processing, order fulfillment, after-sales services, and fraud prevention to ensure that privacy protection measures remain balanced with the quality and reliability of user services. For KeyPal, user privacy is not an additional issue separate from product security. It is an important component of the broader digital asset security framework. Our long-term direction is to reduce the unnecessary generation and movement of personal data, shorten the period during which sensitive information remains exposed, and reduce potential risks through clearly defined data management boundaries. No system can provide an absolute guarantee of security. KeyPal will continue improving its user privacy protection framework through ongoing review, prudent governance, and practical, enforceable security measures. KeyPal — Your Secure Crypto Hardware Wallet. keypal.pro

Switch to #KeyPal 2 and get 50% off for a limited time. Pair it with TokenPocket’s @TokenPocket_TP native multisig and cold wallet for layered protection. 👉 keypal.pro

Exclusive Upgrade Offer for Ledger / Trezor Users

【KeyPal Official Purchase Reminder】 When purchasing a hardware wallet, use official channels and carefully verify the seller’s identity and the product’s source to help protect your assets. KeyPal has no partnership with the reseller mentioned in the recent incident. To purchase KeyPal products, please visit our official website: keypal.pro Thank you for your trust and support.

🎉 Giveaway Winners Are Here! Thank you so much for joining our giveaway! 💙 Congratulations to all the lucky winners! 🎁 🎉 Winners: @Ajmeer181565 @EluuPaul84179 @ounbear 📧 Coupons have been sent to the email addresses provided by the winners. Please check your inbox to make sure you don't miss your coupon. ⏰ Coupon Validity: September 25 – October 8, 2026 Coupons will automatically expire after the validity period, so please make sure to use them before the deadline. ⚠️ Important Eligibility Notice: To be eligible for this giveaway, participants must follow @KeyPalWallet and provide a valid X (Twitter) username in the giveaway entry form. The following cases will be considered invalid entries: · Providing an email address but not actually following @KeyPalWallet · Failing to provide an X (Twitter) username in the giveaway entry form · Providing an X (Twitter) username that cannot be verified Didn't win this time? Don't worry! 👀 More exciting events and rewards are on the way. Stay tuned! Follow KeyPal — you could be our next lucky winner! 🎃✨

KeyPal Card Multi-Layer Security Features Guide