Government & Law Enforcement Requests Policy

1. Purpose and Scope

Hexel Studio provides enterprise infrastructure for autonomous AI agents. We do not operate consumer services, public communication platforms, or social networks.

This Policy applies to:

• Requests for customer data
• Requests for platform logs or audit records
• Requests for account information
• Requests for assistance or access related to investigations

2. Customer Ownership of Data

Hexel recognizes that:

• Customers own and control their data
• Hexel acts primarily as a data processor
• Customer data is processed only to provide the Services

Hexel does not voluntarily provide customer data to governments or law enforcement.

3. Validity of Requests

Hexel responds only to Government Requests that are:

• Legally valid
• Properly issued under applicable law
• Served through appropriate legal channels

Requests that are overly broad, vague, or legally defective may be rejected or challenged.

4. Notification to Customers

Unless prohibited by law, court order, or binding legal process:

• Hexel will notify the affected customer before disclosing customer data
• Notification will include sufficient information to allow the customer to seek legal remedies
• Where delayed notice is required, Hexel will notify the customer once the restriction is lifted

Hexel does not provide "silent" disclosures where notification is legally permitted.

5. Scope and Minimization

Where disclosure is legally required, Hexel will:

• Limit disclosure to the minimum data legally required
• Apply data minimization principles
• Avoid providing access beyond the scope of the request

Hexel does not provide unrestricted or direct system access to authorities.

6. Emergency Requests

In limited emergency circumstances involving imminent risk of death or serious bodily harm, Hexel may disclose information without prior customer notice where permitted by law.

Such disclosures are:

• Limited in scope
• Documented internally
• Subject to post-disclosure review

7. Challenging Requests

Where appropriate, Hexel may:

• Seek clarification
• Narrow overly broad requests
• Challenge requests that conflict with applicable law or customer rights

Hexel is not obligated to challenge every request but evaluates each on a case-by-case basis.

8. Preservation Requests

Hexel may preserve data in response to valid legal preservation requests.

Preserved data:

• Is not disclosed unless legally required
• Is retained only for the legally required period
• Is deleted once the obligation expires

9. Transparency and Records

Hexel maintains internal records of Government Requests, including:

• Requesting authority
• Legal basis
• Data categories requested
• Disclosure actions taken

Hexel may publish aggregate transparency information where permitted by law.

10. No Backdoors or Bulk Access

Hexel:

• Does not create backdoors
• Does not provide bulk data access
• Does not allow ongoing surveillance
• Does not weaken security controls to facilitate access

All disclosures require formal legal process.

11. International Requests

Requests from authorities outside the customer's jurisdiction are evaluated under:

• Applicable international law
• Mutual legal assistance treaties (where applicable)
• Data protection requirements

Hexel does not voluntarily comply with extraterritorial requests lacking legal authority.

12. Customer Responsibilities

Customers are responsible for:

• Responding to legal requests directed to them
• Seeking legal advice regarding compliance
• Ensuring lawful use of the Services

Hexel does not provide legal representation for customers.

13. Policy Updates

Hexel may update this Policy from time to time. Continued use of the Services constitutes acceptance of the updated Policy.