Law Enforcement Request Policy

This policy explains how Builder.io, Inc. ("Builder") responds to requests from law enforcement and other government authorities for customer or end-user information. Builder is committed to protecting its customers' data and discloses information only when legally required. This policy is informational and does not create rights for any party or waive any objection Builder may raise.

1. Valid Legal Process Required

1.1. Builder discloses customer or end-user information only in response to valid, enforceable legal process appropriate to the type of information sought — for example, a subpoena for basic subscriber information, a court order for certain non-content records, or a warrant for content. Builder reviews each request for validity, scope, and authority, and will narrow or object to requests that are overbroad or legally deficient. Where a request concerns personal data protected by the EU or UK General Data Protection Regulation ("GDPR") or similar non-US comprehensive data protection law, Builder also assesses the request for compatibility with applicable data protection law. Valid legal process in the requesting jurisdiction is not by itself a lawful basis for disclosure of such data.

1.2. Requests must be submitted by an official government or law-enforcement email domain to legal@builder.io and must identify the requesting authority, the legal authority for the request, the specific records sought, and the relevant time period.

2. Requests from Non-U.S. Authorities

Builder responds to requests from government authorities outside the United States through applicable international legal cooperation mechanisms, such as a mutual legal assistance treaty (MLAT), and may direct requesting authorities to those channels.

Where a request seeks personal data protected by GDPR, Builder will assess the request under applicable data protection law, including the rules governing international data transfers, and will act consistently with its data processing agreements and any applicable standard contractual clauses.

3. Notice to Customers

Builder's policy is to notify the affected customer of a request for their information and to provide a reasonable opportunity to object before disclosing, unless prohibited by law, court order, or where Builder believes in good faith there is a risk of imminent harm.

Where a request is accompanied by a valid nondisclosure or gag order issued by a court, Builder will withhold notice for the period per the terms of the court order and will notify the customer when permitted by such order.

4. Hosted and End-User Data

All data processed through Customer Applications belongs to and is controlled by our customers. Where appropriate and lawful, Builder will redirect requests for such data to the relevant customer rather than producing it directly.

5. Emergency Requests

In emergencies involving a risk of death or serious physical harm, Builder may disclose limited information reasonably necessary to law enforcement without legal process where it believes in good faith that disclosure is necessary to prevent the harm. Emergency requests must come through legal@builder.io and describe the nature of the emergency.

6. What We Can Provide

The information available depends on the account and Services used, and may include basic account information (name, email, billing contact) and, subject to appropriate legal process, certain logs or content. Builder cannot provide information it does not retain.

7. Cost Reimbursement

Builder may seek reimbursement for the reasonable costs of responding to requests, where permitted by law or pursuant to the terms of the applicable customer agreement.