Government Requests

Last updated: October 9, 2026

This policy explains how ListoChat handles any request from a government, judicial or law enforcement authority for data about the businesses that use the service or the customers who message them on WhatsApp. Our starting point: we only hand over data when the law requires it, and only the minimum.

1. Legality review

Every request from an authority is reviewed before we respond, with the help of a lawyer when needed. We confirm that it:

Comes from a competent authority and is genuine.
Is in writing, states its legal basis and reasons, and was properly served on us.
Rests on a law that applies to ListoChat and to the data requested.
Describes precisely which data it asks for and about which account or person.

We do not hand over data in response to informal requests, phone calls or emails that are not backed by a valid legal process.

2. Challenging requests

We question, ask to clarify or narrow, or challenge through the available legal channels any request that:

Is overly broad or vague.
Lacks a legal basis or comes from an authority without jurisdiction.
Arrives outside a valid legal process.
Comes from a foreign authority without going through the applicable international cooperation mechanisms.

3. Data minimization

When a request is valid, we disclose only the minimum data the law requires to comply with it: only for the accounts, numbers and period the request names. If we can comply by disclosing less (for example, confirming whether an account exists instead of handing over the content of its conversations), we disclose less.

The data of the customers who message a business belongs to that business, which is its controller. Where appropriate, we direct the authority to send the request to the business itself.

4. Notice to the affected business

Unless the law or an order from the authority prohibits it, we notify the affected business before disclosing its data, so it can defend its rights.

5. Record of requests

We keep a record of every request we receive, with:

The date it arrived.
The authority that sent it.
Which data it asked for and about which account.
Which data we disclosed, if any.
Why we decided to comply with, narrow or challenge the request.

The record is confidential and only the people who handle these requests have access to it.

6. How to submit a request

Authorities can send their request to hola@listochat.app with the subject “Solicitud de autoridad” (Authority request). Receiving a request this way does not mean we accept it as properly served.

More information

Details on how we handle data are in our privacy policy. Data controller: ListoChat, Mazatlán, Sinaloa, México.