Public authority requests policy

A. Scope

This policy applies when Agrovio ("we", "us") receives demands from public authorities (law enforcement, regulators, courts, or other government bodies) for personal data or personal information about users of our Services, including subpoenas, court orders, warrants, regulatory demands, preservation requests, and emergency disclosure requests.

B. Required review of legality (core commitment)

We do not disclose user data to public authorities without a mandatory review of legality and appropriateness. That review includes, where applicable:

• Authority and authenticity — confirming the request appears to originate from the stated body and uses an appropriate channel for sensitive demands.
• Legal basis and scope — assessing whether the instrument is valid on its face, whether it compels disclosure under applicable law, and whether the demand is narrowly scoped; we seek clarification or narrowing of overbroad requests where practicable.
• Jurisdiction — considering governing law and cross-border recognition, including foreign demands relating to users in other countries.
• Proportionality — weighing privacy and related rights against the stated public interest, except where the law leaves no lawful room to object.
• Documentation — internal records of requests, review outcomes, and disclosures (where not prohibited by law or court order).

If, after review, a request is unlawful, invalid, or not binding on us, we refuse or challenge it to the extent permitted by law.

C. Process

1. Intake — designated legal/compliance and technical leads handle inbound demands; we do not bypass review for informal pressure.
2. Preservation / production — limited technical steps or disclosure only after review and only the minimum necessary information, using secure channels.
3. User notice — where not legally or judicially prohibited, we notify affected users of disclosure after the fact or in advance when feasible.
4. Emergencies — alleged imminent-harm requests receive a documented short-form legality and proportionality check; we do not treat "emergency" as a blanket exception for routine surveillance.

D. Providers

Subprocessors (for example authentication or database infrastructure) may receive legal process directly. We seek to be informed and to align responses with this policy where we have standing to do so.

E. Contact for authorities

Official inquiries: admin@wayystartechnologies.online. Include legal basis, jurisdiction, account identifiers, and secure follow-up details where appropriate.

F. Changes

We may update this policy. When we do, we revise the "Last updated" date at the top of the Privacy Policy and may summarize material changes in section 12 (Changes).