Authorized authorities may send legally valid requests to kisschou@gmail.com from an official government or agency email address. A request should identify the issuing authority and officer, applicable legal basis and jurisdiction, the relevant Ripple ID, login email, transaction identifier or other precise account identifier, the categories and date range sought, and any nondisclosure or emergency basis relied upon.
Ripple reviews authenticity, jurisdiction, legal sufficiency, scope and proportionality before disclosure. Ripple provides only data reasonably available and required by valid process, does not provide real-time interception or a standing backdoor, and may reject or narrow overbroad requests. Preservation requests must identify the account and requested period. Ripple may notify the affected user unless prohibited by law or doing so would create a documented risk of harm.
1. Purpose
This Law Enforcement Request Policy explains how the Platform handles requests from law enforcement agencies, courts, regulators, government authorities, and other authorized public bodies seeking information relating to Users, accounts, transactions, content, or activity associated with the Service.
The Platform seeks to cooperate with valid legal requests while protecting User privacy, maintaining appropriate security controls, and limiting disclosures to what is legally required or otherwise permitted.
Nothing in this Policy limits or excludes any legal obligation that applies to the Platform.
2. Scope
This Policy applies to requests concerning information associated with the Service, including requests relating to:
User accounts;
profile information;
communications;
uploaded content;
IP addresses;
device or security information;
payment records;
Coin transactions;
Gift transactions;
Subscription records;
Creator records;
payout records;
moderation records;
fraud and safety investigations;
account access;
account ownership;
other information held by the Platform.
The availability of particular information depends on what the Platform actually possesses at the time of the request.
3. Authorities Covered
This Policy may apply to requests from:
police authorities;
prosecutors;
courts;
judicial authorities;
government agencies;
regulatory authorities;
tax authorities;
customs authorities;
financial-crime authorities;
child-protection authorities;
other competent public authorities; and
other entities legally authorized to request information.
Private individuals and ordinary Users generally should not use this process to obtain another User's private information.
4. General Principle
The Platform will review government and law-enforcement requests according to:
applicable law;
the authority of the requesting entity;
the legal basis for the request;
the scope of the requested information;
the jurisdiction involved;
the seriousness and circumstances of the matter;
applicable privacy obligations;
security considerations; and
other relevant legal requirements.
The Platform does not voluntarily disclose User information merely because a person claims to represent a government authority.
5. Valid Legal Process
Where legally required, the Platform may require appropriate legal process before disclosing User information.
Depending on the jurisdiction and circumstances, this may include:
court orders;
warrants;
subpoenas;
production orders;
judicial orders;
statutory requests;
regulatory requests;
legally valid administrative orders; or
other legally recognized processes.
The exact requirement may differ depending on the type of information requested and the jurisdiction involved.
6. Request Submission
Law-enforcement and government requests should be submitted through the designated legal channel:
Legal Requests: kisschou@gmail.com
Law Enforcement Portal: https://rippleim.com/legal/law-enforcement.html
Operator legal contact: kisschou@gmail.com
Operator: Individual developer and operator of Ripple
Requests should preferably be submitted by an official institutional account or through an authorized government communication channel.
7. Required Information in a Request
Where applicable, a request should identify:
the requesting authority;
the authorized officer or official;
official contact information;
the legal basis for the request;
the relevant jurisdiction;
the User or account concerned;
the specific information requested;
the relevant date or time period;
the reason or legal purpose of the request where legally required;
the applicable deadline; and
the relevant court order, warrant, statutory authority, or other legal documentation.
Requests should be sufficiently specific to allow the Platform to identify the requested information.
8. Request Authentication
The Platform may take reasonable steps to verify that a request was genuinely issued by the stated authority.
Verification may include:
checking the official government domain;
confirming the identity of the requesting officer;
contacting the relevant agency through independently verified contact information;
verifying legal documents;
checking signatures or official seals where appropriate; and
other reasonable authentication measures.
The Platform may reject or delay action on requests that cannot reasonably be authenticated.
9. Legal Review
Requests may be reviewed by authorized legal, privacy, security, or compliance personnel.
The review may consider:
whether the request is legally valid;
whether the requesting authority has jurisdiction;
whether the requested information is within the Platform's possession or control;
whether the request is sufficiently specific;
whether the requested disclosure is proportionate;
whether additional legal process is required;
whether the request conflicts with applicable law; and
whether the Platform should seek clarification.
10. Scope of Disclosure
Where disclosure is legally required, the Platform seeks to provide only information that falls within the scope of the valid request.
The Platform may limit disclosure based on:
the specific account;
the specified time period;
the specific data categories;
the legal authority provided; and
applicable legal restrictions.
The Platform does not ordinarily provide unrelated User information merely because it is technically accessible.
11. Data Minimization
The Platform seeks to apply reasonable data-minimization principles when responding to legal requests.
Where a request seeks a broad category of information, the Platform may request clarification or narrowing where appropriate.
The Platform may seek to avoid unnecessary disclosure of:
unrelated Users' information;
unrelated communications;
unnecessary financial information;
unnecessary authentication information; and
other information outside the lawful scope of the request.
12. Types of Information That May Be Available
Depending on the Service and the relevant retention period, information may include:
Account Information
account ID;
registration information;
email address;
phone number, where collected;
profile information;
account status;
account creation information.
Technical Information
IP address;
login records;
device information;
operating-system information;
security information;
access timestamps;
relevant account-security records.
Service Activity
profile activity;
matching or discovery activity;
interaction records;
report records;
moderation records;
account actions.
Communication Information
Where legally available and retained:
message-related information;
media-related information;
communication metadata;
voice or video service records.
The exact availability of communications depends on the Platform's architecture, retention practices, applicable law, and the specific request.
13. Payment and Transaction Information
Where legally required and available, the Platform may provide information concerning:
payment orders;
transaction IDs;
Coins purchased;
Coin transactions;
Gifts;
Subscriptions;
refunds;
chargebacks;
payment status;
Creator earnings;
payout records; and
other relevant transaction information.
The Platform may not possess complete payment-card information where payments are processed by third-party payment providers.
14. Creator Information
Where legally required, the Platform may provide relevant Creator information, which may include:
Creator account information;
verification status;
KYC-related records;
payout information;
earnings records;
withdrawal records;
relevant tax information; and
Creator activity records.
Disclosure remains subject to applicable law and the scope of the valid request.
15. Safety and Moderation Records
Where legally required, the Platform may provide relevant records concerning:
User reports;
safety investigations;
moderation decisions;
account restrictions;
anti-fraud investigations;
scam-related reports;
account-security incidents; and
related records.
Such information may be particularly relevant to investigations involving fraud, exploitation, threats, or serious abuse.
16. Content Requests
Where legally valid and applicable, a request may seek:
User-generated content;
photographs;
videos;
profile content;
messages;
other uploaded materials.
The Platform will assess whether the requested content is actually stored and available.
The Platform does not guarantee that deleted, expired, unavailable, or technically inaccessible content can be recovered.
17. Metadata and Technical Records
Some investigations may concern metadata rather than the content of communications.
Depending on availability and applicable law, this may include:
account creation timestamps;
login timestamps;
IP addresses;
device identifiers or security identifiers;
session information;
transaction timestamps;
report timestamps; and
other technical records.
The Platform will disclose such information only where appropriate under applicable legal requirements.
18. Preservation Requests
A competent authority may request preservation of potentially relevant information.
Where legally valid and technically feasible, the Platform may preserve relevant records pending receipt of appropriate legal process.
A preservation request does not necessarily authorize disclosure of the preserved information.
The Platform may require separate legal authority before producing preserved information.
19. Preservation Scope
Where appropriate, a preservation action may identify:
relevant account;
relevant content;
relevant transaction;
relevant date range;
relevant technical records; and
expiration or review date.
The Platform may preserve only information reasonably connected to the request.
20. Preservation and Retention
Preserved information may be retained for the period required by applicable law or the relevant legal process.
Once the applicable preservation obligation expires, the Platform may return the information to its ordinary retention lifecycle unless another lawful basis requires continued retention.
21. Emergency Requests
The Platform may consider emergency requests involving an imminent threat of:
death;
serious physical harm;
child exploitation;
kidnapping;
human trafficking;
serious violence; or
another urgent threat recognized under applicable law.
Emergency requests should clearly explain:
the nature of the emergency;
the person or persons at risk;
the information requested;
why the information is necessary immediately; and
the official authority making the request.
22. Emergency Disclosure
Where applicable law permits or requires emergency disclosure, the Platform may disclose limited information without waiting for ordinary legal process where reasonably necessary to address an imminent threat.
Any emergency disclosure should be limited to information reasonably necessary to address the emergency.
The Platform may subsequently request formal legal process where appropriate.
23. Child Safety Emergencies
Requests involving credible threats to the safety or exploitation of a child may receive heightened priority.
The Platform may take appropriate measures, including:
preservation of relevant records;
account restrictions;
content restrictions;
emergency disclosure where legally permitted;
escalation to appropriate authorities; and
other protective measures required or permitted by law.
24. Cross-Border Requests
The Platform may receive requests from authorities outside the country where the relevant company or data-processing operation is located.
Cross-border requests may require additional assessment concerning:
jurisdiction;
applicable law;
international legal-assistance mechanisms;
data-protection requirements;
conflicts of law;
treaty obligations; and
the legal authority of the requesting body.
The Platform may require an appropriate international legal process where applicable.
25. Conflicting Legal Requirements
If the Platform identifies a potential conflict between:
the law of the requesting jurisdiction;
the law applicable to the Platform;
privacy obligations;
contractual obligations; or
another applicable legal requirement,
the Platform may seek additional legal advice or clarification before responding, where legally permitted.
The Platform may also seek to narrow or modify the request where appropriate.
26. Requests for User Notification
Where legally permitted, the Platform may notify an affected User that a government or law-enforcement authority has requested information concerning their account.
Notification may include:
the general nature of the request;
the requesting authority;
the categories of information requested; and
other information that may lawfully be disclosed.
The Platform may not provide notice where:
prohibited by law;
prohibited by a valid legal order;
necessary to protect an investigation;
necessary to protect a person;
necessary to prevent destruction or alteration of evidence; or
another lawful exception applies.
27. Delayed Notification
Where immediate notification is prohibited but later notification becomes legally permissible, the Platform may provide notice after the relevant restriction expires.
The timing and content of any notice will depend on applicable law and the circumstances.
28. No Advance Notice Guarantee
The Platform does not guarantee that a User will always receive advance notice of a government or law-enforcement request.
Certain legal processes may prohibit notification.
29. User Privacy
The Platform will handle information disclosed in response to legal requests in accordance with applicable privacy law to the extent required.
The Privacy Policy describes the Platform's general practices concerning:
collection;
use;
disclosure;
retention;
international transfers;
security; and
User privacy rights.
30. Requests for Private User Information by Other Individuals
The Platform generally will not provide one User with another User's private information merely because the requesting person claims to have a personal, financial, romantic, or contractual dispute with that User.
Individuals seeking another person's information should use appropriate legal procedures where available.
31. Civil and Private Legal Disputes
Requests relating to private disputes may require appropriate legal process.
Examples may include disputes involving:
contracts;
financial transactions;
relationships;
intellectual property;
defamation;
account ownership; or
other civil matters.
The Platform may distinguish between requests made by public authorities and requests made by private parties.
32. Fraud and Financial Crime Investigations
The Platform may cooperate with valid investigations concerning:
fraud;
payment fraud;
money laundering;
financial exploitation;
cryptocurrency-related fraud;
identity theft;
chargeback abuse;
Creator payout fraud;
organized scam activity; and
other financial crimes.
Relevant records may include transaction, account, security, and moderation information where legally requested and available.
33. Account Restrictions During Investigations
Where permitted by law and reasonably necessary, the Platform may temporarily:
restrict an account;
suspend messaging;
restrict purchases;
restrict Gifts;
restrict withdrawals;
preserve records; or
take other security measures
while responding to a valid legal or safety matter.
Such action does not necessarily establish that the User committed an offense.
34. Evidence Preservation and Account Actions
The Platform may take reasonable measures to prevent the destruction or alteration of relevant records where legally permitted.
Such measures may include:
preserving account records;
restricting deletion of relevant information;
securing relevant content;
preserving transaction records; and
maintaining internal investigation records.
The Platform will seek to balance evidence preservation with applicable privacy and data-retention requirements.
35. Production of Records
Where a request has been approved for disclosure, the Platform may prepare relevant information in an appropriate format.
The format may depend on:
the nature of the information;
the requesting authority's requirements;
security considerations;
technical availability; and
applicable law.
The Platform may provide explanatory information where necessary to help the authority understand the records.
36. Secure Transfer
Information disclosed to an authorized authority may be transmitted through a secure method where reasonably available.
Depending on the circumstances, this may include:
an official government portal;
encrypted transmission;
secure file transfer;
authenticated legal-request portal; or
another appropriate secure method.
37. Disclosure Records
The Platform may maintain an internal record of disclosures made in response to legal requests.
The record may include:
request ID;
requesting authority;
legal basis;
date received;
date reviewed;
information requested;
information disclosed;
reviewer;
approval;
disclosure method;
User-notification status; and
other relevant audit information.
38. Internal Access Controls
Access to legal requests and related records should be limited to personnel with an appropriate business or legal need.
The Platform may use:
role-based access controls;
administrator authentication;
multi-factor authentication;
audit logging;
restricted document access; and
other security measures.
39. Legal Review and Approval
Where appropriate, disclosure may require approval from authorized legal, privacy, compliance, or security personnel.
The Platform may establish internal approval thresholds based on:
request type;
data sensitivity;
number of Users affected;
emergency status;
jurisdiction;
legal complexity; and
potential risk.
40. Requests That Are Insufficient
The Platform may request clarification or reject a request where:
the requesting authority cannot be authenticated;
the legal basis is unclear;
the request lacks sufficient specificity;
the requesting authority lacks apparent jurisdiction;
the legal document is incomplete;
the requested information cannot reasonably be identified; or
additional legal process is required.
Where appropriate, the Platform may explain what additional information is required.
41. Overbroad Requests
Where legally permitted, the Platform may request that an overly broad request be narrowed.
The Platform may seek clarification concerning:
specific accounts;
specific information;
specific dates;
specific transactions; or
specific investigative purposes.
The Platform seeks to avoid unnecessary disclosure while complying with valid legal obligations.
42. Data Not in the Platform's Possession
The Platform cannot disclose information that it does not possess or control.
For example, information held exclusively by:
a bank;
card issuer;
external payment provider;
telecommunications provider;
another application;
another website; or
another independent service
may need to be requested directly from the relevant provider.
43. Third-Party Service Providers
The Platform may rely on third-party service providers for certain functions, including:
payment processing;
cloud infrastructure;
communications;
content storage;
identity verification;
fraud prevention; and
security.
Where relevant information is controlled by a third party, the Platform may direct an authority to the appropriate provider or coordinate with that provider as permitted by law.
44. Legal Holds
Where necessary, the Platform may place a legal hold on relevant information.
A legal hold may override ordinary deletion schedules for information covered by the hold, to the extent permitted or required by law.
The hold may remain active until the relevant legal or investigative need has ended.
45. Confidentiality
The Platform may treat certain legal requests and investigations as confidential where appropriate.
Personnel handling such requests should not disclose information about the request except to authorized persons or where legally required.
46. Cooperation Does Not Mean General Access
Cooperation with law enforcement does not mean that authorities receive unrestricted access to Platform systems.
The Platform does not ordinarily provide:
unrestricted database access;
unrestricted administrative access;
User passwords;
private encryption keys;
unrestricted account access; or
other access beyond what is legally required and appropriately authorized.
47. Security Credentials
The Platform will not ordinarily disclose a User's password, authentication secret, private key, wallet seed phrase, or equivalent credential merely in response to a general request for account information.
Where legally required, the Platform will assess the request according to applicable law and security requirements.
48. Requests for Real-Time Monitoring
Requests seeking prospective or real-time monitoring may require additional legal authority depending on the jurisdiction.
The Platform will review such requests according to applicable law and technical capability.
The Platform does not guarantee that all requested monitoring capabilities are technically available.
49. Transparency
Where legally permissible, the Platform may publish aggregate information concerning government and law-enforcement requests.
Such transparency reporting may include:
number of requests;
general categories of requests;
jurisdictions;
broad response statistics; and
other aggregated information.
The Platform will not publish information where doing so would violate law or compromise an investigation.
50. Relationship With Privacy Rights
A valid law-enforcement request may affect an individual's ability to exercise certain privacy rights concerning the requested information.
For example, information may be retained or withheld from deletion where necessary for:
legal obligations;
investigations;
evidence preservation;
legal claims;
fraud prevention; or
other lawful purposes.
The Platform will apply the requirements of applicable privacy law.
51. Relationship With Data Request Procedure
The Data Request Procedure governs User requests for access, deletion, correction, portability, restriction, objection, and other applicable privacy rights.
This Policy governs requests received from law-enforcement and government authorities.
A law-enforcement request and a User data request may therefore be processed separately.
52. Relationship With Safety and Anti-Scam Policy
Where a legal request concerns:
fraud;
scams;
financial exploitation;
threats;
blackmail;
child safety;
trafficking;
account compromise; or
other serious safety matters,
the Platform may apply the Safety and Anti-Scam Policy together with this Policy.
53. Relationship With Data Retention
The Platform's ability to respond to a legal request depends partly on applicable retention periods.
The Platform does not retain every piece of information indefinitely.
Information may be deleted, anonymized, or otherwise removed according to:
the Privacy Policy;
applicable retention requirements;
technical lifecycle procedures;
legal obligations; and
legitimate operational requirements.
54. Accuracy of Disclosed Information
The Platform seeks to provide records that are reasonably accurate and responsive to a valid legal request.
The Platform may identify:
system-generated information;
approximate information;
incomplete records;
information supplied by Users; or
information obtained from third parties
where such distinctions are relevant.
55. No Guarantee of Investigative Outcome
The Platform provides information where legally required or permitted.
The Platform does not guarantee that disclosed information will:
establish criminal liability;
prove identity;
prove ownership;
establish fraud;
result in prosecution; or
resolve a dispute.
The requesting authority remains responsible for evaluating the information.
56. Changes to This Policy
We may update this Policy from time to time to reflect:
changes in applicable law;
changes in the Service;
changes in data architecture;
changes in law-enforcement procedures;
changes in international legal requirements; or
improvements to privacy and security practices.
Where required by law, appropriate notice will be provided.
57. Contact Information
Law-enforcement and government authorities should use:
Legal Requests: kisschou@gmail.com
Law Enforcement Portal: https://rippleim.com/legal/law-enforcement.html
Operator legal contact: kisschou@gmail.com
Operator: Individual developer and operator of Ripple
Formal notices: kisschou@gmail.com
Operator status: Individual developer and operator of Ripple
58. Final Principle
The Platform seeks to cooperate with legitimate legal and law-enforcement requests while protecting User privacy, maintaining appropriate security controls, and limiting unnecessary disclosure.
The Platform will:
verify requests where reasonably possible;
assess applicable legal authority;
seek clarification where necessary;
limit disclosure to the appropriate scope;
preserve information where legally appropriate;
protect confidential investigations where required;
maintain appropriate disclosure records; and
comply with mandatory legal obligations.
Nothing in this Policy is intended to prevent the Platform from complying with a valid legal obligation or from taking appropriate action to protect Users and the public from serious harm.
End of Law Enforcement Request Policy