Law Enforcement & Government Requests Policy

1. Overview & Legal Principles

ZoraGram cooperates with law enforcement, judicial authorities, and national security agencies in accordance with applicable laws while rigorously safeguarding user privacy and procedural due process.

We review each legal request individually and evaluate its statutory basis, jurisdiction, and proportionality. We disclose non-public account information only in response to valid, legally binding requests served by authorized investigative officers.

2. Requirements for Valid Legal Process

To be processed, law enforcement requests must meet the following criteria:

• Statutory Authority: Must cite the specific statutory provision authorizing the request (such as Section 91 of the Code of Criminal Procedure / Section 94 of Bharatiya Nagarik Suraksha Sanhita, or Section 69 / 79(3)(b) of the Information Technology Act in India).
• Official Communication: Requests must be transmitted from an official government email domain (e.g. ending in .gov.in, .nic.in, or equivalent international government agency domains) or served on official agency letterhead signed by an authorized officer with rank and badge number.
• Specific Identifiers: Must specify exact platform identifiers such as @username, registered email address, or permanent post/reel URL. We cannot execute broad, speculative, or open-ended inquiries.

3. Emergency Requests Involving Imminent Danger

In situations involving imminent risk of death, serious physical injury, kidnapping, active acts of terrorism, or credible threats against minors:

• Law enforcement officers may mark the communication subject with "EMERGENCY DISCLOSURE REQUEST".
• The request must describe the nature of the emergency and explain why statutory process cannot be obtained prior to data disclosure.
• Emergency disclosures are evaluated immediately by designated compliance officers on a 24/7 basis.

4. Data Preservation Requests (Section 67C IT Act)

Authorized law enforcement agencies may submit requests to preserve specific account records pending the issuance of formal legal process:

• In accordance with Rule 3(1)(h) of the IT Intermediary Rules and Section 67C of the IT Act, ZoraGram will preserve designated account records for up to 180 days or as specified by lawful order.
• Preserved data is retained securely in offline archives and will not be disclosed until valid statutory process is served.

5. Available Records & Technical Limitations

Data available for disclosure is limited strictly to records that are collected and actively retained in the ordinary course of business, subject to our Data Retention Policy:

• Basic Subscriber Information: Registration timestamp, display name, username, verified email address, and profile status.
• Access & Security Logs: IP addresses and timestamps associated with account logins or password reset events (retained up to 90 days).
• User Content: Publicly visible posts, reels, comments, and profile media, unless permanently purged following user deletion.
• End-to-End Encrypted or Unretained Data: We cannot provide data that has been permanently wiped or records we do not possess.

6. Submission Channels & Nodal Contact