This policy explains how ReelRise ("we", "our", or "us") handles requests from public authorities for the personal data of our users. It applies to every such request we receive, and it governs how we review, challenge, respond to, and record them.
Scope
A "public authority" means any government entity or other public administration — including law enforcement, regulators, and public advisory bodies — at national, regional or local level, as well as any natural or legal person carrying out public responsibilities or functions, or providing public services.
1. We review the legality of every request
Every request is reviewed for legal validity before any data is disclosed. We require valid legal process — such as a court order, subpoena, warrant, or an equivalent instrument under the applicable law — and we verify that the request is properly issued by an authority with jurisdiction over us.
We do not disclose user data on the basis of an informal or voluntary request, and we do not provide any public authority with direct, automated, or bulk access to our systems or databases.
2. We challenge requests we consider unlawful
Where a request appears to be unlawful, overly broad, vague, disproportionate, or improperly issued, we will push back: we will ask for it to be narrowed or withdrawn, and we will challenge it through the available legal channels, seeking outside legal counsel where appropriate. We do not comply with a request simply because it has been made.
3. We disclose the minimum necessary
If we are legally required to respond, we disclose only the minimum data necessary to satisfy the specific, valid request. We interpret requests narrowly, we do not volunteer data that has not been asked for, and we do not disclose data about users who are not covered by the request.
4. We document every request
We keep an internal record of every request from a public authority, including:
- the requesting authority and the date of the request;
- the legal basis cited, and the data requested;
- our legal reasoning and the decision we reached;
- the people involved in reviewing and deciding on the request;
- what data, if any, was ultimately disclosed.
Notifying our users
We will notify affected users before disclosing their data, so that they have an opportunity to seek their own legal remedy — unless we are prohibited by law from doing so, or in an emergency where notice would create a risk of serious harm.
Emergency requests
Where there is a genuine emergency involving an imminent risk of death or serious physical injury, we may disclose the minimum information necessary to address that risk. Such disclosures are documented in the same way as any other request and are reviewed after the fact.
Contact
Public authorities should direct requests to:
Email: support@reelrise.app