Storycraft Lab Inc. ( “Storycraft”, “Storycraft Lab”, “SCL”) strongly believes its users should be in control of their personal information. Storycraft Lab Inc. will only disclose user data in response to valid legal processes, unless we think the information could prevent serious harm. Storycraft Lab Inc. will not voluntarily give its user’s data to governments for surveillance purposes. Trust is important to us, so we’ll always be as transparent as laws will allow in relation to requests we receive for user data.

1. Introduction

1.1 This Authority Request Policy sets out Storycraft Lab Inc. procedures for responding to a request received from a law enforcement or other government authority (together the “Requesting Authority“) to disclose User Data that is processed by Storycraft Lab Inc. (“Authority Request“).

1.2 In this policy, “User Data” means any information we hold on users of Storycraft Lab’s websites and dashboards, collectively known as “the Site” (see Storycraft Lab Inc. Website Terms & Conditions) including customer account records, content in the account, activity, correspondence and associated metadata and personal information about an SCL user as set out Storycraft Lab Inc. Privacy and Data Protection Policy

1.3 Where Storycraft Lab receives an Authority Request, we will handle that Authority Request in accordance with this policy. If applicable data protection law(s) require a higher standard of protection for User Data than is required by this policy, SCL will comply with the relevant requirements of those applicable data protection law(s).

2. Which Authority Requests will be approved?

2.1 SCL does not disclose User Data in response to an Authority Request unless either:

• 2.1.1 it is under a compelling legal obligation to make such disclosure; or
• 2.1.2 there is an emergency due to an imminent risk of serious harm that the information SCL holds could help prevent and therefore merits compliance with the Authority Request (especially harm to children), taking into account the nature, context, purposes, scope and urgency of the Authority Request and the privacy rights and freedoms of any affected individuals.

3. What must a valid Authority Request include?

3.1 In order to respond to an Authority Request, SCL will require evidence of a valid and enforceable legal process issued by a court of competent jurisdiction such as:

• 3.1.1 a search warrant;
• 3.1.2 a court order;
• 3.1.3 a subpoena;
• 3.1.4 a preservation order; or
• 3.1.5 the equivalent legal process to any of the above in the applicable jurisdiction.

3.2 All Authority Requests under clause 2.1.1 (compelling legal obligation) must include: