CallMeChat Law Enforcement Policy
Effective date: September 25, 2026
This Law Enforcement Policy (the "Policy") explains our intake process for official government and law enforcement inquiries relating to the CallMeChat platform https://callmechat.com (the "Website") operated by Cortox LTD (Cyprus registration HE 427842, registered office at Pavlou Nirvana, 4 ALPHA TOWER, 1st floor, Flat/Office 13, 3021, Limassol, Cyprus) ("we", the "Company").
The Policy is written for police, regulators, and comparable law enforcement authorities. It is not a source of rights for individual members of the public, and nothing here overrides our Terms of Use, Privacy Policy, or Acceptable Use Policy. We may change this Policy at any time. Please see the final section for how updates work.
1. Our Principles in Cooperation with Law Enforcement Authorities
1.1. We aim to work proactively with law enforcement authorities and anti-trafficking task forces on investigations and prosecutions relating to trafficking, exploitation, or related crimes.
1.2. We may partner with law enforcement and child-protection agencies on child-exploitation matters, including referrals to the National Center for Missing & Exploited Children (NCMEC) CyberTipline or the equivalent body in the relevant country.
1.3. We aim to preserve and, where legally required, disclose account records, content, and other evidence under valid legal process.
1.4. Where required or otherwise permitted under applicable law, we may report confirmed or reasonably suspected trafficking, exploitation, or CSAM to the relevant authorities.
1.5. Where notifying an affected user about a data request is legally permitted, we may do so. However, we will not do so where prohibited by law or court order, or where notification could reasonably interfere with an active investigation.
2. Inquiries from law enforcement authorities
We handle two kinds of requests from authorities. Each has its own requirements, described below.
2.1. Requests Backed by Legal Process
Requests backed by legal process include requests seeking account data, content, or other user information, supported by a subpoena, court order, search warrant, European Production Order, European Preservation Order, mutual legal assistance treaty (MLAT) request, or another applicable legal instrument.
For requests from agencies outside the EU/EEA, any judgment, decision, or other request from a third-country authority must be assessed in accordance with Article 48 of the GDPR and the applicable provisions of Chapter V of the GDPR. Article 48 provides specific rules concerning judgments and decisions of third-country authorities, including the role of applicable international agreements such as mutual legal assistance treaties. We assess such requests on a case-by-case basis and may require additional information or documentation to determine whether disclosure is lawful.
We generally aim to respond to such requests within 30 calendar days of receiving the request, although complex requests may require additional time.
2.2. Preservation Requests
Preservation requests are used to preserve existing account records while formal legal process is being obtained. A preservation request does not by itself entitle you to the underlying data - you will still need a Legal Process request, described above, to actually obtain it.
We generally preserve the specific records identified in a valid preservation request for 90 days, subject to any different period required by applicable law or a valid preservation order.
3. Contact Channels
3.1. Law enforcement requests should be submitted through the following channel: [email protected]. Please put "LAW ENFORCEMENT REQUEST" in the subject line so that it can be routed appropriately.
3.2. Additionally, formal legal service can also be directed to our registered office: Cortox LTD (HE 427842), Pavlou Nirvana, 4 ALPHA TOWER, 1st floor, Flat/Office 13, 3021, Limassol, Cyprus.
3.3. We generally process requests sent from a verifiable official government or law enforcement domain and may request additional verification where necessary.
4. What Must Be Included in a Request
4.1. Requests must arrive on official agency letterhead and include the following:
- full name, title, and agency, plus a direct government email and phone number;
- a case/file number and the legal instrument relied on (warrant, subpoena, court order, treaty provision, etc.);
- username, profile link, registered email, or transaction ID sufficient to locate the account;
- a precise description of the specific records or data being sought.
4.2. Beyond the paperwork itself, Legal Process requests need to satisfy the legal standards that actually apply - Cypriot law at minimum, and, for agencies outside Cyprus, any applicable MLAT or other recognized cooperation framework. We may insist on a legal process that is valid in Cyprus before releasing message content.
4.3. For agencies outside the EU/EEA: routing your request through an MLAT or diplomatic channel involving the competent Cypriot authority is strongly preferred. If you submit directly instead, include enough detail on legal basis, necessity, and proportionality for us to complete the GDPR assessment described above.
5. Data Preservation and Retention
5.1. Account, usage, and transaction data is kept for the periods described in our Privacy Policy. Full detail on what we collect, why, and for how long is set out in our Privacy Policy.
6. General Provisions
6.1. Standard requests are handled without charge. If a request is exceptionally large, complex, or resource-intensive to fulfill, we may seek reasonable cost reimbursement from the requesting agency.
6.2. This Policy and our request-handling practices generally are governed by the laws of the Republic of Cyprus, without limiting the effect of any applicable international assistance treaty or mandatory law in a requesting agency's own jurisdiction.
6.3. We may revise this Policy at any time. Changes take effect when posted.
Our Contact
Cortox LTD, HE 427842, Pavlou Nirvana, 4 ALPHA TOWER, 1st floor, Flat/Office 13, 3021, Limassol, Cyprus