Legal

Privacy Policy

Website Privacy Note

The privacy of users of the website is paramount for TZ APAC Pte Ltd, the operator of Keystone Lab, 36 Robinson Road, #07/05-06 City House, Singapore 068877 (“we” or “us”). We greatly appreciate the trust that you have placed in us and will do our best to protect your personal data.

By accessing and using this website you explicitly acknowledge and confirm that you have read and accepted this Privacy Note for the use of this website.

Personal data is any information that relates to an identifiable natural person and includes inter alia name, address, e-mail address, date of birth, nationality, gender, phone number, and technical information from the devices you use to access our website.

You herewith consent to the collection, use and disclosure (“processing”) of your personal data by us or any third-party recipient in accordance with the terms of this Privacy Note. You shall not access or use this website should you not understand or agree to be bound by this Privacy Note.

1. Our commitment to data protection principles

We are responsible for the processing of your personal data. In order to protect your personal data in connection with the usage of the website, we are committed to adhere to the principles below.

Every individual working for us must also adhere to these principles in performing his or her day-to-day duties. We will therefore make sure that your personal data is:

  • processed lawfully, fairly and in a transparent manner (lawfulness, fairness and transparency);
  • collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes (purpose limitation);
  • adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed (data minimisation);
  • accurate and, where necessary, kept up to date; every reasonable step will be taken to ensure that your personal data that is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay (accuracy);
  • kept in a form which permits your identification for no longer than is necessary for the purposes for which personal data is processed (storage limitation); and
  • processed in a manner that ensures appropriate security of your personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage using appropriate technical or organisational measures (integrity and confidentiality).

The controller of your personal data is TZ APAC Pte Ltd, the operator of Keystone Lab. If you have any questions, you can reach out to [email protected].

2. Disclosure and transfer of your personal data

We will not share any of your personal data with any government authorities, except in order to comply with legal or regulatory requirements. If we receive a request to disclose your personal data to a government authority, we will thoroughly assess the request and will in particular consider possible legal challenges against such request. We will only comply with any such request that is binding, enforceable and issued in full compliance with applicable law.

We disclose your personal data to IT and other third-party service providers in Singapore, the EU and the USA, which are under strict confidentiality obligations and are obliged to protect data privacy to the same extent as we ourselves.

3. Collecting of personal data when visiting our website

This website is a landing page showcasing Keystone Lab and the products we build across different categories. If you only browse the website and do not subscribe to our mailing list, we collect only the technical data automatically transmitted by your browser, including your IP address, browser type, operating system, referring URL, pages viewed, and time of access. This data is technically necessary to display our website and ensure its security and stability. It is not used to personally identify you.

We may evaluate IP addresses together with other data in cases of suspected attacks or unauthorised use of our website, for the purpose of infrastructure protection and, where appropriate, legal proceedings. This is our legitimate interest under applicable law.

Our website may contain links to third-party websites, including pages for individual Keystone Lab products, app stores, and social media platforms. This Privacy Note applies only to this website. We are not responsible for the privacy practices of any third-party websites and encourage you to review their respective privacy policies.

4. Collecting of personal data when using the “Subscribe” form

Our website includes an optional subscription form allowing you to receive updates about Keystone Lab and our products. When you use this form, we collect only your email address, provided voluntarily.

We use this data solely to send you communications you have opted in to receive. You may unsubscribe at any time using the unsubscribe link included in every email.

Your email address is processed on our behalf by our email service provider to deliver these communications, in accordance with their security and privacy practices.

5. Lawful basis for processing

We process your personal data on the following bases in accordance with the relevant laws:

  • Website hosting and security (technical data collected automatically): Legitimate interest — it is technically necessary to display our website and protect against unauthorised access.
  • Email communications (email address collected via the Subscribe form): Consent — you voluntarily provide your email address and opt in to receive our communications. You may withdraw your consent at any time.
  • Analytics (usage data collected via cookies): Consent — analytics cookies are only placed on your device after you provide consent through our cookie consent mechanism.
  • Compliance and enforcement (IP addresses in cases of suspected abuse): Legitimate interest — to protect our infrastructure and comply with applicable legal obligations.

6. Use of analytics

We use an analytics service to understand how visitors interact with our website and to improve it over time. The analytics provider collects anonymised usage data, which may include pages viewed, time spent, and general location (country level). No personally identifiable information is collected through analytics.

Analytics cookies are only placed on your device after you provide consent through our cookie banner. You may withdraw consent at any time by adjusting your browser or cookie settings.

7. Cookies

Our website uses cookies, which are small text files stored on your device. Cookies help us understand how visitors interact with our website and ensure it functions properly.

We use the following categories of cookies:

  • Strictly necessary cookies — required for the website to function properly. These cannot be disabled.
  • Analytics cookies — used to collect anonymised usage data to help us improve the website. These are only placed with your consent.

You can prevent cookies from being stored by adjusting your browser settings, though doing so may affect some website functionality.

8. Securing your data

We have implemented appropriate technical and organisational security measures to protect your personal data from unauthorised access or unlawful use. All third-party service providers are required under contract to implement equivalent security measures.

We impose strict confidentiality obligations on all staff and maintain internal data security policies to safeguard your personal data.

9. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Privacy Note.

Email addresses are retained for as long as you remain subscribed to our communications. Upon unsubscribing, your email address will be removed from our mailing list.

Technical and analytics data is retained in accordance with the retention settings of our analytics provider and is typically anonymised or aggregated.

Further, personal data may be retained where required by an act, law or other regulatory provision to which we are subject.

10. International data transfers

As our website is accessible globally, your personal data may be transferred to and processed in countries outside your country of residence, including Singapore and the United States. Where such transfers occur, we take reasonable steps to ensure your data is protected in accordance with applicable data protection laws.

11. Your rights in connection with your data

You may request access to the personal data we hold about you by contacting us at the details in Section 13. An administrative charge may apply in certain circumstances.

You have the right to object to our processing of your personal data, including where that processing is based on legitimate interests or involves solely automated decision-making that affects your rights.

Where you have consented to receive our communications, you may withdraw that consent at any time via the unsubscribe link in our emails or by contacting us directly.

You also have the right to file a complaint with your local data protection authority if you believe we have not complied with applicable law. We kindly ask that you first attempt to resolve any concerns with us directly.

12. Changes to this Privacy Note

We may update this Privacy Note from time to time to reflect changes in our practices or applicable laws. We will post the updated version on this page and revise the “Last Updated” date accordingly. We encourage you to review this Privacy Note periodically.

13. Contact

If you would like to exercise your rights listed in Section 11, have a question about this Privacy Policy, or have a concern about how we handle your personal data, please contact us:

TZ APAC Pte Ltd, the operator of Keystone Lab.
36 Robinson Road, #07/05-06 City House, Singapore 068877
Email: [email protected]

For data protection or privacy-specific requests — including requests relating to Voice Identity Data or biometric data — please include "Privacy Request" in the subject line of your email.

Where you are located in a jurisdiction with a designated data protection supervisory authority, you also have the right to lodge a complaint with that authority. In Singapore, complaints may be directed to the Personal Data Protection Commission (PDPC) at https://www.pdpc.gov.sg.

Last updated: 13/05/2026