Law Enforcement Request Policy

Last updated: August 2, 2026

This describes our general approach to legal requests for user information. It is not a substitute for legal advice, and the specific commitments here (notification practice, emergency-disclosure standard) are real legal decisions that should be reviewed by a licensed attorney before this is relied on as a finalized policy — see the placeholder below.

What we require

We disclose user information to law enforcement or other government agencies only in response to valid legal process — such as a subpoena, court order, or search warrant — issued by a court or authority with proper jurisdiction, or as otherwise required by law. We review every request for legal sufficiency before responding.

User notification

Where legally permitted, we notify the affected user before disclosing their information, so they have an opportunity to object through appropriate legal channels. We may delay or forgo notification where prohibited by law (for example, under a valid non-disclosure order) or where we believe notification would create a risk of harm.

Emergency disclosure

If we have a good-faith belief that an emergency involves the danger of death or serious physical injury to a person, we may voluntarily disclose information reasonably necessary to prevent that harm, without legal process, consistent with applicable law.

Preservation requests

Law enforcement may request that we preserve account data pending the issuance of formal legal process. We'll preserve data in response to a valid preservation request for the period required by law.

What we can actually provide

We can only produce what we have. See our Privacy Policy and Data Retention Policy for what data exists and for how long — for example, once an account is deleted, the underlying profile and login are removed and can't be retroactively produced.

How to submit a request

Send legal requests, on official letterhead with an official return address, to privacy@envvite.com. We may require the request to come through a recognized legal channel (e.g. an official agency email domain or mailed hard copy) before acting on it.

[A dedicated legal-request intake process (verification steps, response-time targets, whether a separate legal@ mailbox is warranted) should be finalized with counsel rather than left as an informal email address — see COMPLIANCE_PLAN.md.]

Costs

We may seek reimbursement for costs associated with responding to a request, where permitted by law.