Law Enforcement Requests

AskBiz is committed to protecting the privacy and data of our users. We do not voluntarily disclose user data to law enforcement, government agencies, or regulatory bodies without a valid legal order.

We review all requests carefully, require valid legal process, and notify affected users where we are legally permitted to do so.

We require the following before disclosing any user data:

UK: A production order under the Police and Criminal Evidence Act 1984 (PACE), an order under the Investigatory Powers Act 2016, or equivalent legal compulsion. Informal requests, letters, or phone calls do not constitute sufficient legal basis.

EU: A court order or equivalent legal instrument from a court of competent jurisdiction in an EU member state. Requests must comply with applicable EU data protection law, including the requirement that data transfers to non-EU countries comply with GDPR Chapter V.

US: A valid subpoena, court order, or search warrant from a court of competent jurisdiction. Emergency requests (involving imminent risk to life) are assessed on the specific circumstances.

International requests: Must comply with applicable Mutual Legal Assistance Treaties (MLATs) or equivalent international legal instruments. We do not respond to requests from jurisdictions with which the UK has no extradition treaty or MLAT unless independently confirmed as legally valid.

We will disclose in response to valid legal orders:

• Account registration information (email address, account creation date, plan type)
• Billing information (billing name, address, last 4 digits of payment method)
• Login history and IP addresses
• Account activity logs
• Connected platform types (e.g. 'this account has Shopify connected')

We will not disclose without specific legal basis:

• Content of AI conversations
• Business data uploaded or synced by the user
• Connected platform data (Shopify sales, Amazon orders, etc.) — this data belongs to you and your platform provider, not us

We cannot disclose:

• Passwords (we store hashed passwords, not the originals)
• Full payment card numbers (we use Stripe — we never see card numbers)
• Data we do not hold

We will notify affected users of legal requests for their data, unless we are legally prohibited from doing so (e.g. by a non-disclosure order, a court gag order, or equivalent).

Notification will be made:

• By email to the account's primary address
• Before disclosure where possible, or as soon as permitted after disclosure
• Including the nature of the request (type of order, jurisdiction) where we are not prohibited from disclosing this

If you receive a notice from us about a legal request, you may wish to seek independent legal advice.

Law enforcement and government agencies should direct requests to:

Email: legal@askbiz.co

Subject line: Law Enforcement Request — [Jurisdiction] — [Request Type]

Requests should include:

• The requesting agency's name and contact details
• The legal instrument authorising the request (attach a copy)
• The specific account identifier (email address or account ID)
• The specific data categories requested
• The legal basis for the request
• The time period of data required
• Whether a user notification prohibition is requested (and the legal basis for it)

Requests submitted without complete information will be returned for completion before processing.