xVio Platform — Government & Public Authority Data Requests

Government & Public Authority Data Requests

This policy applies across ExonPro Innovations LLP ("ExonPro", "we", "us") — the xVio platform and every App we provide.

1. What this policy covers

From time to time a government body, court, regulator or law-enforcement agency may ask us to hand over personal data. This policy explains how we handle such requests. It covers all personal data we control or process, including:

• data our users create in our Apps;
• data we receive through connected platforms our users authorise — including Meta (Facebook and Instagram) and Google (Google Sign-In, Gmail and Google Calendar); and
• data stored on our behalf by our hosting provider, Microsoft Azure.

It binds everyone at ExonPro, and anyone who processes data on our behalf.

2. We check every request is lawful

Before we share anything, we review the request itself: who is asking, whether they have the authority and jurisdiction to ask, and what legal instrument backs it — a valid warrant, a court order, or a specific statutory power. A request that is invalid, too broad, or not properly served does not get actioned.

3. We push back on unlawful requests

If a request is unlawful, defective, or goes beyond the authority's powers, we do not simply comply. We seek legal advice, ask for the request to be narrowed, and where appropriate formally contest it — before any data is disclosed.

4. We share the minimum

When a request is lawful and we must respond, we disclose only the minimum data strictly necessary to satisfy its precise scope — nothing more. Our Apps are also local-first by design: most user data lives on the user's own device rather than on our servers, which structurally limits what we hold and could ever be asked to disclose.

5. We keep a record

Every request, and how we responded, is documented: who asked, when, on what legal basis, what (if anything) we disclosed, the reasoning behind the decision, and who at ExonPro was involved. These records are retained so our handling can be reviewed and audited.

6. Who is responsible

These requests are handled by our Grievance Officer, who is accountable for making sure this policy is followed:

Kusaldip Das, Grievance Officer
Email: grievance@exonpro.in

If you believe your data has been affected by a request covered by this policy, you can write to the same address.