Government Requests Policy

This policy covers how AR Web & Development LLC responds when a government body, law enforcement agency or other public authority asks us to disclose data about a person who uses Kollage. It applies to every request, from any country.

To date we have received no such requests.We hold very little: an anonymous device identifier, an Instagram access token, the connected account’s handle, and posts published through the app. Photos and projects stay on the person’s device and are not ours to hand over.

We do not disclose data on request alone. Before responding to anything we check that the request comes from a body with authority to make it, that it is validly issued under the law it cites, that it identifies specific data rather than asking broadly, and that it is served on the right entity.

We are a small company without in-house counsel. Where a request is not plainly routine, we obtain legal advice before responding rather than guessing.

Where a request appears to exceed the authority it claims, to be overbroad, or to be defective in form, we say so and ask for it to be narrowed or properly issued. Where a request appears unlawful and cannot be resolved that way, we will resist it through the appropriate legal channel.

If we are required to disclose, we produce only the specific data the request compels and nothing beyond it. We do not volunteer additional records, adjacent accounts, or anything outside the stated scope.

The app is built so that this is a short list. Data we do not collect cannot be demanded from us, which is the most reliable protection we can offer.

Every request is documented: who made it, what legal basis it cited, what it asked for, what advice we took, what we disclosed or refused, and when. Those records are kept so that our handling of any request can be reviewed afterwards.

Where we are permitted to notify the person whose data has been requested, we will, and in good time for them to seek their own advice. Where a court order or statute forbids notice, we comply with that, and we will notify once the restriction lapses if we are able to.

Where an authority states there is an immediate risk of death or serious physical harm, we may disclose the information necessary to address that emergency without the usual process. Those requests are documented in the same way and reviewed afterwards.

Requests should be sent to [email protected] and must identify the requesting authority, the legal basis, and the specific data sought. We do not accept service through the app, through support channels, or by telephone.