This page explains what Tamaat Inc. does when a police service, a regulator, a court or another public authority asks us for information about a customer. It is for our customers, so that they know what to expect, and for the authorities who make such requests.
1. Our approach
Our customers' data belongs to them. We give it to an authority only when the law requires us to, and then only what the request covers.
We read every request before we answer it. We ask for clarification when a request is unclear, and we object when a request is too broad or does not meet the conditions below.
2. What we hold
- Account information
- What it isThe name and email address on an account, the organizations it belongs to, and its plan.
- Sign-in records
- What it isTimes of sign-in and the IP address and browser used.
- Customer content
- What it isThe datasets, maps, dashboards and files an organization has brought into Tamaat or made there.
We do not hold payment card details. Our payment provider does. The periods for which we keep each kind of information are in the Privacy Policy.
3. What a request must include
We answer a request only if it is:
- a valid legal instrument that binds Tamaat in Canada, such as a production order, a search warrant or a court order;
- in writing, on the authority's letterhead or from its official email domain, with the name and contact details of the person making it;
- specific about the account or organization concerned, identified by email address or organization name;
- specific about the information wanted and the period it covers.
A request for the content of a customer's data requires a warrant or a court order. We do not hand over information in response to an informal request, a phone call, or a request that names no account.
4. Requests from outside Canada
Tamaat is a Canadian company and stores its customers' data in Canada. An authority outside Canada should make its request through a mutual legal assistance treaty or another process recognized by Canadian law. We do not give customer data to a foreign authority on a direct request.
5. Telling the customer
When we receive a request about a customer, we tell the owners of that organization before we disclose anything, so that they can seek legal advice or challenge the request. We do not do so where the law or a court order forbids it, or where telling them would put someone in danger. If we were prevented from telling them, we tell them once we are free to.
6. Ask the customer first
In most cases the customer can provide what an authority is looking for. Where it would not harm an investigation, we ask the authority to request the information from the customer directly.
7. Emergencies
If we believe in good faith that disclosing information is needed to prevent death or serious physical harm to a person, we may give an authority the limited information needed to deal with the emergency, without waiting for a court order. Mark an emergency request "Emergency" in the subject line and describe the danger and the information needed.
8. Preservation requests
On a valid written request from an authority, we will keep a copy of the records it names for 90 days while it obtains a legal instrument, and for a further 90 days if it asks again. We do not disclose preserved records without the instrument.
9. How to send a request
Send requests by email to legal@tamaat.com. Tamaat Inc., 687 Arbour Lake Dr NW, Calgary, AB T3G 4T6, Canada. We do not accept requests by telephone.
Accepting a request by email does not mean we waive any objection to it, including to how it was served.