These guidelines describe how Colours Global, Inc. responds to requests from law enforcement for information about Connected members. These guidelines are informational in nature and are not a waiver of any right or objection, nor consent to any jurisdiction.
Where to Send a Request
Requests by law enforcement should be sent to:
Colours Global, Inc.
1421 Buchanan St., N.W., Washington, DC 20011
lawenforcement@coloursglobal.com
Requests must be on agency letterhead, identify the requesting officer and a return contact, and identify the account of the member whose information is being sought precisely, by their handle or by the email address on the account.
Except for preservation requests and emergency requests (see below), we require a valid subpoena, court order, or search warrant before disclosing any non-public user data.
What Information We May Hold
The following is an indicative list of data categories that may be retained by Colours Global, Inc. The availability of this data is subject to our standard data retention policies and may not always be available.
- Basic user information: email address, account creation date, subscription tier, and, for subscriptions bought in the apps, App Store or Google Play purchase records.
- Profile content: display name, age, photographs, bio, interests, stated city.
- Activity: matches, message content, event RSVPs, reports filed and received, moderation decisions.
- Identity verification data: Verification selfies and ID photos are deleted once the verification decision is made and are not available afterwards. We keep the result and its date, the verified date of birth, and a one-way coded (hashed) form of the ID number and of the name and date of birth, which cannot be turned back into the original. The exception is an account under a legal hold, in which case the data is kept until the hold ends.
- Location: An area of approx. 11 km for members who set a location, and an area of approx. 1 km when users turn on the “Nearby” feature. We do not hold location history.
- Fraud-ban notice records: copies of the safety notices sent to members who received messages from a member banned for fraud, with the time each was delivered, kept for two years.
Preservation Requests
We will act on a valid preservation request from a law enforcement agency to preserve covered account records for up to 90 days, pending the issuance of formal legal process. While a hold is in place a member’s request to delete their account is delayed until the hold ends.
Members may delete their account at any moment, and it is removed from the service immediately. We keep a private copy for 90 days (two years if the member was banned or reported), so a preservation request received within that period can still be met; after it, the copy is deleted and the request cannot be met. A legal hold stops that deletion.
Emergency Requests
When we receive a request asserting an emergency involving an imminent risk of death or serious physical injury, we will review it promptly. The requesting officer must provide a written description detailing the nature of the emergency and why immediate disclosure is necessary. We may disclose information where we believe in good faith that the emergency requires it.
Notice to Members
Our policy is that we may notify a member when their information is requested, so they may object, unless we are legally prohibited from doing so (e.g., by a court order issued under 18 U.S.C. § 2705(b)), or we believe, in our sole discretion, that notice would create an immediate risk of harm, death, or physical injury.
Fraud-Ban Notices
When a member is banned for fraud, Connected notifies every member who received a message from them, in the app and by email, within 24 hours of the ban. If a law-enforcement official asks Connected to delay these notices because of an ongoing investigation, we record the request (agency, reference, and the end of the delay) before or after the ban, and no notice is sent until the delay ends. The notices are then sent automatically, within 3 days of its end. Connected does not need to inform law enforcement, or ask permission, before sending fraud-ban notices.