Government and law-enforcement requests

1.Our principles

• We disclose customer data only when the law requires it, through valid legal process from a body with jurisdiction.
• We ask the requester to go to the customer first where that is appropriate.
• We review each request for validity and scope, object to requests that are overbroad or unlawful, and disclose the minimum needed.
• We tell the affected customer before disclosure unless the law or a court order prevents it, or there is a risk of harm.

2.Where requests come from

Because we are an Indian company and the service is hosted in India, requests will mostly come under Indian law, for example under the Bharatiya Nagarik Suraksha Sanhita, 2023, the Information Technology Act, 2000, or the Telecommunications Act, 2023. Requests for call records and interception for voice service in a country are usually directed to the licensed carrier. Foreign requests are expected to arrive through legal channels such as mutual legal assistance.

3.What we can and cannot provide

We can usually provide account information and logs we hold. Customer content in a workspace (such as recordings and messages) belongs to the customer, and we ask the requester to seek it from the customer. We have no means of listening to a live call.

4.Emergencies

In a genuine emergency involving danger of death or serious injury, we may disclose limited information to the authorities without waiting for formal process, and we will document why.

5.Where to send a request

Authorities should send requests in writing to Vedatra Scalable Stacks Private Limited, Bengaluru, Karnataka, India, to support@callfora.com. Include the legal basis, the account or number concerned, the data sought, and a point of contact. We do not accept requests through social media or phone calls.

6.Transparency

We plan to publish a summary of the requests we receive and how we handled them once there is enough activity to be meaningful.