Our approach
- We only hand over data when the law requires it and the request comes through valid legal process, such as a court order, warrant or a notice under the law that applies to us.
- Ikiform is run by an individual in India. Requests from other countries generally need to come through the legal channels that let them apply in India, such as a mutual legal assistance treaty.
- We check every request, and push back on requests that are unclear, too broad or not legally valid.
- We give only the data the request requires, and nothing more.
- Ikiform doesn't build backdoors and doesn't give any government direct access to its systems.
Telling customers
We tell the affected workspace owners before we hand over their data, so they can challenge the request, unless the law forbids it or a court order tells us not to. If we were told not to, we tell them once that restriction ends.
Data in customers' forms
Form submissions belong to our customers. Where we can, we ask the body making the request to go to the customer first, because the customer controls that data.
Emergencies
If we believe in good faith that there is a risk of death or serious physical harm, we may share the minimum data needed to prevent it, without waiting for legal process.
What we hold
Ikiform doesn't store visitors' IP addresses, only a hash of them, and deletes data on the schedules in our Privacy Policy. We can't provide data we don't have or have already deleted.
How to send a request
Send requests to hello@ikiform.com from an official government address. Include your name, agency, the legal basis for the request, and the specific account, form ID or data you need.