KeyPal, the hardware wallet brand under TokenPocket, announced it will delete or de-identify non-essential customer personal information within 15 days after order completion. The move addresses growing concerns over user data leaks and supply chain security risks in the hardware wallet industry. The company stated that no security breaches or customer data leaks have been detected in its systems, characterizing the policy as a proactive preventive measure in response to evolving industry risks. Orders eligible for data cleanup are those confirmed as received, fully fulfilled, and free of after-sales disputes or other legal retention requirements. KeyPal emphasized that hardware wallet security extends beyond private key protection and transaction signing to include safeguarding personal data generated during purchase, delivery, and after-sales service processes.