Subpoena
Scope
Basic subscriber records — username, email, account creation date, last login IP.
What we require
A valid subpoena issued under applicable federal, state, or local law.
Law Enforcement
Law-enforcement guidelines
Procedures for U.S. and international law-enforcement officials, regulators, and civil litigants requesting user data or content preservation from bio.re. All requests are reviewed against our Terms of Service and applicable law; we challenge requests that are overbroad, lack legal basis, or violate user rights.
Submit all requests to hi@bio.re
Single point of contact. Faxed or mailed requests are accepted but slower. Phone requests are not accepted except for emergency disclosures.
Acceptable legal process
The type of legal process determines what data we may produce. We require requests to comply with applicable law and to be served via the appropriate authority.
Court order (18 U.S.C. § 2703(d))
Scope
Non-content transactional records — IP logs, payment metadata, message timestamps.
What we require
A court order showing specific and articulable facts that the records sought are relevant and material to an ongoing criminal investigation.
Search warrant
Scope
Content of communications — paid DMs, profile drafts, support tickets — held in storage.
What we require
A search warrant issued upon a showing of probable cause under Rule 41 of the Federal Rules of Criminal Procedure or equivalent.
Foreign / international
Scope
Any of the above, for accounts of non-U.S. users.
What we require
Requests must be issued through a Mutual Legal Assistance Treaty (MLAT) or letter rogatory, or otherwise comply with U.S. law. Direct requests from non-U.S. authorities are reviewed on a case-by-case basis.
Information your request must include
- Identifying information for the account(s) of interest — bio.re username, registered email, or account UUID. Display names alone are not sufficient.
- The specific records or content sought, with a clear date range.
- The legal authority under which the request is made (case number, court, statute).
- A return email address on official agency or law-firm letterhead for our response.
- Reimbursement of statutory costs where applicable (for example, under 18 U.S.C. § 2706 in the U.S.).
Emergency disclosure
Under 18 U.S.C. § 2702(b)(8) and equivalent international provisions, we may voluntarily disclose information without legal process when we believe in good faith that an emergency involving imminent danger of death or serious physical injury to a person requires it.
Submit emergency requests to hi@bio.re with the subject line EMERGENCY DISCLOSURE REQUEST. Include a sworn declaration of the emergency, the nature of the risk, and your agency contact for verification. We acknowledge within 1 hour during business days and within 4 hours otherwise.
Preservation requests (18 U.S.C. § 2703(f))
Law-enforcement may request preservation of records pending the issuance of legal process. We preserve for 90 days, renewable once for an additional 90 days. Submit preservation requests to hi@bio.re identifying the account(s) with sufficient specificity. Preservation does not equal disclosure — legal process is still required for the actual data.
Categories of data we may produce
Subscriber records
Email, display name, account creation date, IP at registration, payment method type (no card numbers).
Connection logs
IP addresses and timestamps for the most recent 90 days of logins.
Transaction metadata
Paid-DM purchase records (amount, timestamp, processor reference). We do not store card or bank details — Stripe holds them.
Message content
Paid-DM message text held in encrypted storage. Available only with a valid search warrant or equivalent.
We never store payment card numbers, banking details, or government-issued ID images — those are held by our payment processor (Stripe) and KYC vendor. Direct requests for those records to them.
Notice to users
Our policy is to notify users of legal requests for their information before disclosure, so they have an opportunity to object. We may withhold notice when prohibited by law (for example, under a non-disclosure order), in emergencies, or when we have a good-faith belief that notice would result in evidence destruction, witness intimidation, or risk to life.
Standard response timeline
Routine requests: 5–10 business days. Emergency disclosure: 1–4 hours. Court-ordered deadlines are honored — flag urgency in the subject line.
This page describes our general practices and does not create any additional obligations beyond those imposed by applicable law. Last updated 2026-05-17. Companion document: our Transparency Report.