Law Enforcement Request Policy

1. Overview

xthAB Limited is committed to protecting the privacy of its customers while complying with lawful requests from law enforcement agencies. This policy outlines how we handle such requests.

2. Types of Requests

We respond to the following types of lawful requests:

• Court orders issued by courts of competent jurisdiction
• Search warrants
• Production orders under the Investigatory Powers Act 2016
• Mutual Legal Assistance Treaty (MLAT) requests routed through the UK Home Office
• Emergency disclosure requests where there is an imminent risk to life

3. Our Process

• All requests are reviewed by our legal team for validity and scope
• We narrow requests to the minimum data necessary to satisfy the legal requirement
• We notify the affected customer unless legally prohibited from doing so
• We do not provide law enforcement with direct access to our systems or infrastructure

4. Data We May Disclose

Subject to a valid legal request, we may disclose account registration data, API usage metadata (timestamps, IP addresses, message routing information), and billing records. We do not retain message content beyond delivery.

5. Submitting Requests

Law enforcement requests must be submitted in writing to hello@villip.xyz or by post to our registered address. Emergency requests may be made by telephone, followed by written confirmation within 24 hours.

6. Transparency

We publish an annual transparency report summarising the number and type of law enforcement requests received and our responses, subject to any legal restrictions on disclosure.