HeyZiThis page explains how HeyZi Live handles a request from the police, a court, a regulator or another public authority for the personal data of our users. It applies to all user data, including data we receive when you sign in with Google or Facebook.
How we handle a request
- One contact point. Requests are accepted only at support@heyzilive.com. No one else on our team or among our partners answers them or hands over data.
- We check that it is lawful. We ask for a written request on the authority's letterhead or from an official email, naming the law relied on, the account (the HeyZi ID) and the data wanted. Court orders and warrants are checked for validity. A phone or chat request alone is not enough, and where we are unsure we take legal advice before replying.
- We challenge requests that are unlawful or too broad. If a request has no legal basis or asks for more than it needs, we reply in writing asking for the legal basis or a narrower request, and we do not disclose until that is resolved.
- We share the minimum. Only the data items the order names, never more. We never disclose wallet, bank or payment details, or other users' data, unless the order specifically requires it, and we never disclose sign-in tokens or secrets.
- We keep a record. For each request we record the date, the authority, the reference, the law cited, the accounts concerned, what we provided or why we refused, who approved it and when we answered.
- We tell the user concerned, unless the law or the order forbids it.
We have received no national-security requests for user data to date.