Legal Requests and Disclosures

1. In short

• We comply with valid court orders, warrants, production orders and subpoenas, and with legal duties to report, to the extent the law applies to us.
• Without a court order we disclose only in narrow emergencies, and only the minimum needed.
• We can only produce what we hold, which is little.
• We do not promise that we will never disclose information, and we do not promise to tell you about a request when a court forbids it.
• To send a legal request, email contact@tnaado.ca with "Legal request" in the subject.

2. Who and what this covers

This is published by TNAADO Inc., 1050 King Street West, Toronto, Ontario M6K 0C7, for tools.tnaado.ca, answers.tnaado.ca, travel.tnaado.ca, dispatch.tnaado.ca (website), mrbuff.ca, cinematicaddict.com and tnaado.ca. It does not describe what Cloudflare, Vercel, Google or other providers do with data they hold; their policies govern that. The Dispatch apps and accounts and service.tnaado.ca have their own privacy policies and may hold more.

3. When the law requires disclosure

3.1 Orders and demands

We comply with valid legal process: a court order, search warrant, production order or subpoena from a court or authority with jurisdiction over us, and lawful preservation demands or orders. In Canada these include Criminal Code production orders (s. 487.014) and preservation demands and orders (s. 487.012). In the United States they include warrants, court orders and subpoenas under the Stored Communications Act (18 U.S.C. 2703). PIPEDA s. 7(3) lists disclosure to comply with a subpoena, warrant or court order among the cases where an organization may disclose without consent.

3.2 Which country's law can reach the data

TNAADO is an Ontario company, so Canadian process can reach data we hold. Our hosting, delivery and analytics providers are mostly United States companies, so United States process can reach data they hold, including under the CLOUD Act (18 U.S.C. 2713). We cannot promise that data about you stays in Canada.

3.3 Duties to report

Some laws require a report without a request. Canada's Act respecting the mandatory reporting of Internet child sexual abuse and exploitation material and 18 U.S.C. 2258A in the United States may require a provider to report and preserve data. We say "to the extent the law applies to us" because it is not settled that our sites are providers under either law.

4. What we expect from an authority

We expect a warrant or court order for anything that reveals what a person did or created, and valid legal process such as a subpoena or production order for basic information such as the IP address of a visit. An informal request alone is not enough, except in the emergencies below.

5. Disclosure without a court order

We may disclose limited information without a court order only if we reasonably believe, in good faith, that:

• there is an imminent risk of death or serious physical harm and disclosure could help prevent it;
• child sexual abuse or exploitation material is involved and the law requires or permits a report; or
• disclosing the minimum necessary is needed to stop fraud or abuse aimed at our systems or to protect our legal rights, and the recipient has a real need.

We may apply the law's wider limits if legally required. We do not volunteer information about lawful activity.

6. What we can produce

Held by TNAADO: email you send us and our replies. The content sites have no accounts, comments, uploads or visitor database of our own. What you type into tools stays in your browser (except IP lookup requests on tools.tnaado.ca). Held by others: request logs at Vercel and Cloudflare, and data received by Google Analytics and Google AdSense, under those companies' policies. Those providers may receive legal process directly. See Service providers. We have not verified how long providers keep logs; treat them as kept until stated otherwise.

7. What we do when we get a request

1. Check that it is genuine and from an authority with jurisdiction. 2. Read what it requires, and ask for it to be narrowed if too broad or unrelated to what we hold. 3. Tell the person affected before disclosing, where the law allows and we can reach them. 4. Challenge an order we believe is unlawful or overbroad, within the time the law gives. 5. Disclose only what is required, and keep a record of each request.

8. When we cannot tell you

A court can order us not to disclose a request (in Canada, Criminal Code s. 487.0191). We do not say that we always notify the people affected. We publish no transparency report today.

9. What we do not promise

• That we will never disclose information to authorities.
• That data held by Cloudflare, Vercel, Google or other providers cannot be obtained from them.
• That deleting something removes it from backups, provider logs or a copy preserved under a legal order.
• That this page lists every law that could apply. It is not legal advice.

10. How to send a request

Authorities and lawyers: email contact@tnaado.ca with "Legal request" in the subject, and give the legal basis, the issuing authority, the specific data, the deadline, and a way for us to verify you independently, such as a call-back to an official number. Or write to Privacy Officer, TNAADO Inc., 1050 King Street West, Toronto, Ontario M6K 0C7. We do not accept legal process through social media or chat. Individuals asking about their own information should use Privacy rights.