Version 1.0 · Effective date: October 15, 2026 · Mailbari LLC
Last Updated: October 15, 2026
Mailbari holds other businesses' email and files, and we treat a government request for them very seriously. We ask authorities to go to the customer organisation first. When they come to us, we need valid legal process: for the content of emails and files, that normally means a search warrant under US law. We check every request, give no more than it requires, tell the customer unless the law forbids it, and publish a yearly count of requests. In a real emergency involving risk of death or serious injury, we can act faster. Every request is checked by Mailbari's legal team; invalid or overbroad requests are refused or narrowed, and valid ones get only the data they require.
These guidelines are for police, courts, regulators and other government bodies anywhere in the world that want information about a Mailbari customer or User. They also tell our customers what to expect. They are not legal advice and do not create any rights.
Most Mailbari accounts belong to businesses that control their own data. Their Admins can search, export and hand over their own email and files. Wherever possible, please send your request to the customer organisation directly. If you ask us, we may tell you how to contact it.
• Basic subscriber information: - Examples: Organisation name, Admin names and emails, domains, sign-up date, billing details, sign-in IP addresses • Other non-content records: - Examples: Mail delivery logs (sender, recipient, time, not content), audit logs, sign-in history • Content: - Examples: Email messages and attachments, files, documents, notes, calendars, contacts, chats, recordings What we have depends on our retention periods in the Privacy Policy. Deleted content may no longer exist. Messages a User sent with end-to-end encryption cannot be read by us.
Under the Stored Communications Act (18 U.S.C. 2701 to 2713), we require: • Basic subscriber information: - Requirement: A subpoena, or a court order or warrant • Other non-content records: - Requirement: A court order under 18 U.S.C. 2703(d), or a warrant • Content: - Requirement: A search warrant issued under the procedures of the Federal Rules of Criminal Procedure or equivalent state procedures, by a court of competent jurisdiction Civil litigants must get content from the customer or the User, not from us; we do not disclose content in response to civil subpoenas.
5.1 Mailbari LLC is a US company, so US law limits what it can disclose to foreign governments. Authorities outside the US should normally use a mutual legal assistance treaty (MLAT), letters rogatory, or an agreement under the US CLOUD Act where one exists. 5.2 Mailbari has an office in Bangladesh, which does not hold customers' email or files. Requests from Bangladeshi authorities about customers or Users are reviewed by Mailbari LLC under these guidelines and the laws of Bangladesh and the United States. We may provide basic subscriber information in response to valid Bangladeshi legal process where US law permits it. We disclose content only through legal process that US law recognises. 5.3 We consider requests from other countries case by case, checking that they are lawful where issued, consistent with international human rights standards, and specific.
If you believe there is an emergency involving danger of death or serious physical injury to someone, email [email protected] with "EMERGENCY" in the subject, explain the emergency, why it needs disclosure without the usual process, and exactly what information you need. We may disclose information voluntarily when the law allows it in such cases (18 U.S.C. 2702(b)(8) and (c)(4)). We may ask for legal process afterwards.
We will preserve specified records for 90 days on a valid request from a government entity under 18 U.S.C. 2703(f), extendable once by 90 days on renewed request, while you obtain legal process. Preservation does not mean disclosure.
1. Every request is reviewed by Mailbari's legal team, with outside counsel when needed. 2. We check it comes from a real authority with power over the matter, cites the right law, and identifies specific accounts (by email address or domain). 3. We push back on requests that are too broad, unclear or unlawful, and we give the least data needed to comply. 4. We do not give any government direct access to our systems, encryption keys or bulk data.
We tell the customer's Admins about a request for their data before we disclose, so they can seek legal advice or challenge it, unless: the law or a court order forbids it (for example an order under 18 U.S.C. 2705(b)); it is an emergency; or telling them would put someone at risk or be counterproductive, such as an account taken over by an attacker. When a gag order expires, we tell the customer then.
When we find apparent child sexual abuse material, US law (18 U.S.C. 2258A) requires us to report it to the National Center for Missing & Exploited Children (NCMEC) and to preserve the reported content for 1 year. NCMEC makes reports available to law enforcement in the US and around the world.
We publish a yearly report on mailbari.com with the number of requests we received by country and type, and how many we complied with, in whole or in part, to the extent the law allows.
Email [email protected] from an official government address, or send it by post to Mailbari LLC, Attn: Legal, 104 Quigley Blvd, Ste 1013, New Castle, DE 19720, USA. Legal process may also be served on our registered agent, A Registered Agent, Inc., 8 The Green, Ste A, Dover, DE 19901, USA. Please include the account identifiers, the information you need, the legal basis, a deadline, and a contact we can reach.
• Mailbari LLC · 104 Quigley Blvd, Ste 1013, New Castle, DE 19720, USA · +1 302 580 8514 • Bangladesh office · Rafiq Place, Level 1A, BM College Mosque Gate, Barisal-8200, Bangladesh · +880 1805 459129 • Government requests: [email protected]