Law enforcement requests

This page is for agencies making a request, and for members who want to know what could ever be said about them. Both should be able to read it without asking us first.

What we can produce

• The email address on the account, and when it was created.
• When the account was last active.
• Profile text and photographs as they exist at the time of the request.
• Payment records held by our processor, which are theirs rather than ours — a request for card data goes to Stripe, not to us.
• The approximate market a member was associated with. Not a location history, and not coordinates. See below.

What we cannot produce, at any price

• Message content. Messages are encrypted with keys held on members’ own devices. We do not have a copy of those keys and cannot make one. A valid order compels us to hand over what we hold, and what we hold is ciphertext.
• Precise location, present or past. The system stores a coarse area cell, not a coordinate, and those cells expire in hours. There is no location history to produce because none is kept.
• Identity documents. Age verification is performed by a provider who keeps the evidence. We receive a result and a reference and nothing else, and the endpoint that receives it rejects any request carrying a document.
• Anything about a deleted account past its window. Deletion starts a 45-day recovery period, after which the data is gone and cannot be recovered by us for anyone.

How to ask

• Requests go to legal@ryzzup.com from an official address.
• Include the legal basis, the account identifier, and the precise records sought. A request for “all data” will be answered with this page.
• We require valid legal process appropriate to the record sought. Non-content records and content are not the same request.
• Emergencies involving a risk of death or serious physical injury are handled immediately and out of order. Say so in the subject line.

Preservation

We will preserve records on request while process is obtained. Where United States federal law requires us to preserve material relating to child sexual exploitation, we do so for one year, in isolated storage with access logged.

Telling the member

We notify a member that their data has been requested, unless we are legally barred from doing so or there is a genuine risk to someone’s life. Being a member of this service can itself put a person at risk in some jurisdictions, which is exactly why the default is to tell them.

Requests from jurisdictions that criminalise our members

Some countries criminalise the people who use this service. We will not assist an investigation whose subject is a member’s sexuality or gender, and we do not treat an order from such a jurisdiction as one we are obliged to honour. Discovery is withheld entirely in the markets where we judge that risk highest.