1. Scope#

This policy explains how Zeus AI Labs, Inc. (“Hercules”) responds to requests from law enforcement, government authorities, and civil litigants for information about Users, Customers, Customer Applications, Customer Agents, and End Users. It does not cover requests by individuals to exercise their own privacy rights (see our Privacy Policy), abuse reports (contact abuse-reports@hercules.app), or intellectual property complaints (see our Takedown Policy). Capitalized terms have the meanings given in our Terms of Service.

This policy describes our general practices. It is not legal advice, does not form part of any contract, and does not create rights enforceable by third parties. We may depart from it where circumstances warrant, and we comply with applicable law in all cases.

2. Our approach#

We disclose information to government authorities only where legally required, or where voluntary disclosure is lawfully permitted and we determine it is appropriate, such as in a qualifying emergency. We do not give any government direct or unfettered access to our systems or to Customer Content or End User Content. We review every request for legal validity, authority, and scope; interpret requests narrowly; produce only responsive information; and may reject or seek to narrow requests that are overbroad, vague, or improperly served. We may publish transparency reports describing the requests we receive, to the extent permitted by law.

3. Information we hold#

Whether we hold responsive information depends on the account, the products used, and our retention practices; requesting parties should not assume we hold any particular information. In general, we hold three categories:

• Account information provided by Users, such as name, email address, billing details, Plan, and Organization Membership and Roles.

• Customer Usage Data and Application Usage Data, including logs generated by use of the Hercules Platform, Published Customer Applications, and Published Customer Agents, such as IP addresses, access timestamps, API activity, and security events. Log retention periods vary and are typically short.

• Customer Content and End User Content, which we host on behalf of Customers as their service provider or processor. Customers control this data and are usually best positioned to respond to requests about it. Where a request concerns Customer Content or End User Content, we will generally direct the requesting party to the Customer unless we are legally required to respond directly or the request is an emergency under section 5.

4. Legal process required#

United States requests. We comply with the Stored Communications Act, 18 U.S.C. § 2701 et seq., and require: a valid subpoena for basic subscriber information such as name, email address, and billing information; a court order under 18 U.S.C. § 2703(d) or a search warrant for non-content records such as IP logs and access times; and a search warrant issued on probable cause for content, including Customer Content and End User Content. We preserve records in response to a valid request under 18 U.S.C. § 2703(f) for 90 days, renewable once; preservation does not itself authorize disclosure.

Requests from outside the United States. Non-United States authorities must proceed through a mutual legal assistance treaty, a CLOUD Act executive agreement, or another mechanism recognized under United States law. We do not respond to requests submitted directly by foreign agencies except in an emergency under section 5.

Civil requests. We require a valid subpoena or court order before disclosing non-content account information to private litigants. Federal law generally prohibits us from disclosing content from Customer Content or End User Content in response to a civil subpoena; parties seeking that content should obtain it from the account holder. We notify the affected Customer or User of a civil request and allow a reasonable period for them to seek a protective order before responding.

5. Emergency requests#

Where we have a good-faith belief that an emergency involving imminent danger of death or serious physical injury requires disclosure without delay, we may voluntarily disclose information to law enforcement to the extent permitted by 18 U.S.C. § 2702. Emergency requests must come from a sworn law enforcement officer on official letterhead and must describe the nature of the emergency, the specific information sought and how it will help, why normal legal process is too slow, and the officer’s name, agency, identification number, and official contact details. We evaluate emergency requests case by case and may decline where the criteria are not met.

6. Submitting a request and notice#

How to submit. Send legal process to legal-requests@hercules.app. We accept service by email as a convenience only; doing so does not waive any objection, including to jurisdiction or manner of service. Requests must be addressed to Zeus AI Labs, Inc., identify the specific account by email address, Organization name, hercules.app subdomain, or custom domain (we cannot reliably identify accounts by a person’s name alone), specify the categories of information and date range sought, and identify the requesting agency, officer, and legal authority. We typically respond to valid requests within 10 business days, sooner for emergencies, and may seek reimbursement of reasonable costs where permitted by 18 U.S.C. § 2706, except for emergency and child-safety requests.

Notice to affected parties. Our practice is to notify affected Customers and Users before disclosing their information, and to provide a copy of the request where permitted, so they can seek a protective order or other relief. We will not give notice where we are prohibited by law or court order (including a non-disclosure order under 18 U.S.C. § 2705(b)), where the request is a qualifying emergency, or where we reasonably believe notice would endanger a person, risk destruction of evidence, or interfere with an investigation into child exploitation or a threat to life. Where notice is delayed by a legal restriction, we notify the affected party once the restriction lifts unless notice remains inappropriate. Where a request concerns Customer Content or End User Content, we notify the Customer, who is responsible for any notice to its End Users.

7. Contact and changes#

General legal inquiries that are not law enforcement requests may be sent to hello@hercules.app. Information about our security practices is available in our trust center. We may update this policy from time to time; published versions identify their effective dates.