Public Authority Data Request Policy

This policy explains how AutoBikri handles requests from public authorities (governments, law enforcement, regulators, or courts) for the personal data of users, including data we receive from Meta platforms (WhatsApp Business, Facebook Page/Messenger) when a business connects a channel. It applies to every such request, whether it relates to a business that uses AutoBikri or an end customer whose messages pass through it.

1. Required review of legality

We review every request for its legality before disclosing any data. We confirm that the request comes from a competent authority, cites a valid legal basis, is properly served, and is within the authority's jurisdiction. We do not act on informal, unverified, or improperly issued requests.

2. Challenging unlawful requests

Where a request is unlawful, overbroad, vague, or otherwise improper, we will challenge, narrow, or refuse it — and, where appropriate, seek clarification or legal advice before responding. We comply only to the extent we are legally obligated to.

3. Data minimization

When we are legally required to respond, we disclose only the minimum information necessary to satisfy the specific, valid scope of the request. We do not provide data beyond what is compelled, and we prefer the narrowest interpretation of any request.

4. Documentation

We keep a record of each request we receive, including the requesting authority, the data requested, our response, the legal reasoning applied, and the people involved in handling it. These records let us account for our decisions and detect any pattern of improper requests.

5. National security requests

National security requests are handled under the same principles — legality review, challenge where unlawful, minimization, and documentation — subject to any legal restrictions that may apply to such requests.

6. Contact

Public authorities and users with questions about this policy can contact info@autobikri.com. AutoBikri is operated by Auto Bikri, a sole proprietorship registered in Bangladesh, which is the data controller for the personal data described here. See also our Privacy Policy.