Government and law-enforcement request policy

This policy is directed exclusively to law-enforcement agencies and official representatives of government authorities seeking information about Relam users or business customers. It does not govern civil discovery, private-party subpoenas, or consumer data-access requests. Those matters must follow the procedures in our Privacy Policy, GDPR page, or applicable enterprise agreement.

Skytells operates Relam. References to "we," "us," or "Skytells" mean Skytells, Inc. and its affiliates responsible for the service.

We treat user and business-customer data as confidential. We do not provide voluntary access to governments. We disclose information only where we are compelled by valid legal process that satisfies the requirements of this policy, or where a narrowly defined emergency exception applies as described below.

When we receive a government request, we interpret it restrictively, require strict compliance with applicable law, reject or narrow overbroad or defective demands, and disclose the minimum information necessary to comply with a lawful obligation after any required challenge period has expired or been resolved.

The category of information sought determines the legal process we require before disclosure. Unless a higher standard applies under applicable law, we apply the following framework:

• Non-content records (such as basic account identifiers, subscription status, or transactional metadata) may require a subpoena, court order, or equivalent compulsory process issued under applicable law.
• Content (such as prompts, files, messages, generated output, or workspace materials) requires a search warrant, equivalent judicial order, or other process meeting the highest standard applicable in the relevant jurisdiction.
• Business-customer data processed on behalf of an organization may require process directed to the organization, notice to the organization, or additional requirements under a Data Processing Addendum or signed enterprise agreement.

Informal requests, letters, emails without proper legal authority, oral demands, or requests from non-government entities purporting to act for a government will not be honored. We do not accept service of legal process through consumer support channels, social media, or in-product messaging.

Before producing any information, we review whether the request:

• Is issued by an entity with apparent legal authority and is signed or certified as required.
• Identifies the account or customer with sufficient specificity to avoid disclosing the wrong person's data.
• Describes the categories of information sought and the relevant time period with adequate particularity.
• Complies with applicable constitutional, statutory, and regulatory requirements, including international human-rights norms where relevant.
• Is not overbroad, vague, duplicative, or issued for an improper purpose such as monitoring protected speech or conducting a fishing expedition.

We may reject, quash, seek modification of, or delay compliance with requests that fail these standards. We may require agencies to obtain new or clarified process before any production occurs.

We may disclose limited information without prior legal process only if we have a good-faith belief that an emergency involves imminent danger of death or serious physical injury to a person and that the information requested is necessary to prevent that harm. Emergency requests must be documented in writing, explain the nature of the emergency with specificity, and identify the data sought and why it is necessary.

Emergency disclosure is an exception, not a substitute for legal process. We may require follow-up process, limit the scope of production, and log all emergency disclosures for accountability.

Agencies may request preservation of specified records while legal process is obtained. A preservation request does not authorize disclosure. We preserve records only as required by applicable law and only for the period and categories described in the request. We may notify affected users of preservation requests where permitted by law.

Protecting notice is central to this policy. Unless we are legally prohibited from doing so, we provide advance notice to affected users and, where applicable, business customers before disclosing their information, so they may seek judicial review or other remedies.

We may delay notice only when a valid nondisclosure order prohibits it, when notice would create a genuine emergency risk of serious harm, or when applicable law expressly permits delayed notice. Where permitted, we challenge gag orders and seek permission to notify affected parties at the earliest lawful opportunity.

We encourage government agencies to direct requests to the account holder or business customer whenever feasible rather than to Skytells.

Where Skytells processes personal data on behalf of an organization under a Data Processing Addendum or enterprise agreement, government requests for that data are handled in accordance with the DPA, this policy, and applicable law. We will notify the organization and, where required, redirect agencies to the organization as controller unless prohibited by law.

Organizations may have designated legal contacts, data-protection addenda, or objection rights. We do not bypass contractual protections merely because a request is labeled urgent or routine.

Requests from authorities outside the user's or customer's home jurisdiction must comply with applicable international legal frameworks, including mutual legal assistance treaties and equivalent mechanisms where required. We do not bypass those frameworks through informal cross-border demands. We may reject requests that appear to conflict with blocking statutes, sovereignty rules, or fundamental rights protections.

Certain national-security demands may be subject to separate statutory regimes and nondisclosure obligations. Where the law permits public reporting, we disclose those requests only in aggregated or ranged form through our Transparency reports, not as itemized entries tied to identifiable accounts.

• Provide "about all users" or bulk surveillance access.
• Decrypt or provide encryption keys except where we are lawfully compelled after exhausting available legal objections.
• Modify, delete, or alter customer content in response to informal government pressure.
• Grant governments standing access, direct database connectivity, or real-time monitoring interfaces.
• Disclose data in response to political pressure, media inquiries, or non-government demands.

We maintain internal records of government requests received, our responses, legal challenges filed, and disclosures made, consistent with legal retention requirements and our accountability obligations. Summaries may be published in periodic transparency reports where the law allows.

Law-enforcement and government agencies must submit requests through our contact form.

Use the subject line "Government request" and include signed legal process, agency identification, case reference numbers, and all information required by this policy. Unsigned, incomplete, or improperly routed requests will not be processed.

• Transparency overview
• Transparency reports
• Privacy Policy
• Data Processing Addendum
• Security