Privacy Policy

1. Introduction

Welcome to PKIFactor by ZetaCert ("Company", "we", "our", "us"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice or our practices with regard to your personal information, please contact us.

This privacy notice describes how we might use your information if you:

• Visit our website
• Use our PKI management platform
• Engage with us in other related ways, including any sales, marketing, or events

2. What information do we collect?

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include:

• Names
• Phone numbers
• Email addresses
• Job titles
• Contact preferences
• Billing addresses

3. How do we use your information?

We use personal information collected via our Services for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations.

• To facilitate account creation and logon process
• To post testimonials
• To request feedback
• To manage user accounts
• To send administrative information to you
• To protect our Services
• To enforce our terms, conditions, and policies

4. Will your information be shared with anyone?

We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations. We may process or share your data that we hold based on the following legal basis:

• Consent: We may process your data if you have given us specific consent to use your personal information for a specific purpose.
• Legitimate Interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests.
• Performance of a Contract: Where we have entered into a contract with you, we may process your personal information to fulfill the terms of our contract.
• Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.

5. How long do we keep your information?

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

6. Lookalike Audiences

We may use your personal information to create lookalike audiences for targeted advertising purposes. This allows us to reach potential customers who share similar characteristics with our existing users. We do this by securely hashing your email address or phone number and sharing it with advertising platforms like Facebook, Google, or LinkedIn. These platforms match the hashed data with their own user database to find similar profiles. We delete the hashed data promptly after the matching process is complete. If you wish to opt out of this processing, please contact us.

7. Subprocessors

We rely on the following processors to operate the site and respond to your inquiries. Each is contractually bound to GDPR-grade data protection and processes data only on our instructions:

• Vercel Inc. (United States) — website hosting and edge delivery. Personal data is stored in EU regions when available; cross-border transfers are governed by Standard Contractual Clauses (SCCs).
• Neon Inc. (EU, Frankfurt / Ireland) — managed PostgreSQL database that stores contact form submissions and admin accounts.
• Resend Inc. (United States) — transactional email delivery for contact form notifications. Cross-border transfers governed by SCCs.
• Calendly LLC (United States) — demo booking widget loaded only after explicit cookie consent. Cross-border transfers governed by SCCs.

We do not sell your data and do not engage processors outside the list above without prior notice on this page.

8. How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at support@zetacert.com.