Law Enforcement Guidelines

Send legal requests for user data to [email protected]. AccoMee holds business financial records, so we disclose only what a request legally compels, we refuse requests that are overly broad or cite no legal authority, and we notify the affected business unless we are barred from doing so.

Where to send a request

All requests from law enforcement, tax authorities and other government bodies must be sent to [email protected]. This is the only channel we accept.

Requests sent to support, grievance or any individual address are redirected here, and our response time runs from the moment they arrive at the legal address.

AccoMee is operated by Mee Group, which also operates SocioMee AI and SlayMee. A request about a different service should name that service.

Jurisdiction

Mee Group is a sole proprietorship registered in Maharashtra, India.

Indian authorities should cite the provision they are acting under. For AccoMee that is commonly the Central Goods and Services Tax Act 2017 or the Income Tax Act 1961 where the request concerns a business's records, or the Information Technology Act 2000 and the Bharatiya Nagarik Suraksha Sanhita where it concerns an account.

Authorities outside India should proceed through a Mutual Legal Assistance Treaty request or a letter rogatory. We are not subject to direct compulsion from foreign jurisdictions and cannot act on a request that arrives without that process.

What a valid request must include

A request that does not include the following will be returned with an explanation of what is missing. We do not disclose data while a request is unresolved.

• The issuing authority, on official letterhead and from an official domain.
• The specific legal provision the request is made under.
• The account or business identified precisely, by email address, business name or GSTIN.
• The specific records sought, and the period they cover. A request for all data on an account will be refused and returned for narrowing.
• The date by which a response is required.
• A named contact and a direct telephone number, so we can verify the request.

What we hold, and what we disclose

We disclose the minimum the request legally compels and nothing beyond it. Where a request is broader than its stated purpose requires, we disclose the narrower set and say so in our response.

Depending on the account, we may hold: account details such as name, email address and sign in provider; business details such as business name, GSTIN, state and address; uploaded receipt and invoice images and the data read from them; ledger and journal entries and the GST summaries generated from them; transcripts of voice entries; AI Coach conversations; uploaded bank statement files and the transactions read from them where a business uses bank reconciliation; subscription and payment status; and technical data such as the IP address at sign in.

We do not hold payment card numbers, which sit with our payment processors, and we do not hold passwords in readable form. Voice recordings are not kept after processing. We cannot produce data we never collected.

Notice to users

Our default is to notify the account whose data has been requested before we disclose anything, so they have an opportunity to respond.

We will not notify where the request carries a valid non disclosure order, where notifying would create a risk of harm to a person, or where the law otherwise prohibits it. Where a non disclosure order carries an expiry date, we notify the account once it lapses.

Any user may write to [email protected] to ask whether their data has been the subject of a request. We answer unless we are barred from doing so.

Emergency requests

Where an authority states there is an imminent risk of death or serious physical injury, we may disclose without the usual verification steps.

The request must still arrive in writing at [email protected], state the nature of the emergency, and identify the person at risk. We disclose only what is needed to address that specific risk.

Every emergency disclosure is reviewed afterwards. If the stated emergency did not exist, we notify the affected account.

Preservation requests

We will preserve a specified account's records for 90 days pending service of valid legal process, on written request to [email protected].

A preservation request is not a disclosure request. Preserved data is not released until a valid request for it is received and assessed.

Records

We log every request we receive, whether or not we comply, including the authority, the provision cited, what was sought, what was disclosed or why it was refused, and whether the account was notified.

These records exist so that we can answer a user, a regulator or a customer asking what has been requested of us.