Government & Authority Data Request Policy

This policy applies to all requests from public authorities — including courts, law enforcement, regulators, and national-security bodies — for user personal data held by Signal Labs. This includes any Platform Data we receive from Meta through the Meta Marketing API.

Every request is reviewed for validity and legality before we provide any response. We check that the request is lawful, comes from a legitimate authority, is properly served, and is within the authority’s jurisdiction and powers. We do not disclose data in response to requests we cannot verify as valid and lawful.

Where a request appears unlawful, invalid, overbroad, or improperly served, we will seek to narrow, challenge, or reject it. This includes seeking legal advice and, where appropriate, formally objecting to or resisting the request through available legal channels before disclosing any data.

If disclosure is legally required, we disclose only the minimum personal data necessary to comply with the specific, valid request. We do not volunteer additional data beyond what the request lawfully compels.

We document each request we receive, including the requesting authority, the legal basis cited, the data requested, our legality assessment, any challenge we raised, our response, and the individuals involved in handling it. Records are retained in line with our legal obligations.

Where we are legally permitted to do so, we will endeavour to notify affected users of a request for their data before disclosing it, unless prohibited by law or a valid legal order.

Requests involving data we receive from Meta are handled under this same policy, consistent with the Meta Platform Terms and Developer Policies.

Requests and questions about this policy can be directed to harry.mcgovern@halfdome.com.au.