Law Enforcement Guidelines

1) What Data We Have

• Account data: name, email, signup IP, plan tier, billing identifiers (limited).
• Link metadata: destination URLs, titles, tags, slugs, creation timestamps.
• Event logs: link views/clicks (timestamp, short link key, IP address, user‑agent, referrer, coarse geo), WAF/CDN request IDs.
• Hosted pages (if used): page content and settings.

We do not have: full payment card numbers, message content from third‑party platforms, or destination site server logs we do not control.

2) Legal Process Required

• U.S.: valid subpoena for basic subscriber records; court order for non‑content records beyond basic; search warrant (18 U.S.C. §2703) for content we host.
• Non‑U.S.: use MLAT or letters rogatory. We respond to requests issued by competent courts in our governing jurisdiction(s).
• Preservation requests: accepted under 18 U.S.C. §2703(f) or analogous laws for 90 days (extendable once).

3) Emergency Disclosure

Where we reasonably believe there is imminent risk of death or serious physical harm, we may disclose limited information to law enforcement consistent with applicable law. Use emergency@shortnd.com with: agency, officer contact, basis for emergency, and specific data sought.

4) Notice to Users

We notify users of requests unless prohibited by law, court order, or if notice would create risk of harm or compromise an investigation. We may delay notice where appropriate.

5) Format & Service

Submit requests on agency letterhead, signed by an authorized official, and include:

• the legal basis (statute, rule),
• precise identifiers (short link(s), account email, time ranges with timezone),
• your contact details, and
• a return date.

Service via legal@shortnd.com or PO Box 5863-00100 Nairobi, Kenya. We may seek reimbursement of costs where allowed.

6) Data Retention

Standard retention: security logs 90–180 days; analytics 18–24 months; billing per statute. Exact periods are in our Privacy Policy and may change.