Law Enforcement Guide

1. Who we are

JoyR1der is a live-entertainment app operated by Conesworth Limited, a company incorporated in New Zealand (company number 1862936), registered office 16 Rautawhiri Road, Helensville 0800, New Zealand. We have no offices or staff outside New Zealand. Our data is hosted on Google Cloud in the United States (see section 6 of our Privacy Policy).

2. How to send a request

• Email legal@joyr1der.com from an official government or agency email address. We don’t act on requests sent from personal email accounts, and we have no phone line for requests.
• Please write in English and include: the requesting authority and officer, with contact details; the legal basis and a copy of any order or warrant; the account concerned (its @username or a link to the profile, event or post); the records you need and the date range; and any deadline or non-disclosure requirement.
• We review every request individually and may ask for more information, narrow an over-broad request, or decline one that is not valid.

3. Legal process we require

• New Zealand authorities: valid New Zealand legal process, such as a production order or search warrant under the Search and Surveillance Act 2012, or a request we may lawfully answer under the Privacy Act 2020.
• Authorities outside New Zealand: we are a New Zealand company, so we generally need the request to come through New Zealand’s mutual assistance process (the Mutual Assistance in Criminal Matters Act 1992), or another route that New Zealand law recognises.
• United States: if a US authority serves legal process on us directly, including under the CLOUD Act, we will consider whether it applies to us and whether answering it is consistent with New Zealand law, and we may ask for the request to come through mutual assistance instead.

4. Emergency requests

If you believe someone faces an imminent risk of death or serious physical harm, email legal@joyr1der.com with “EMERGENCY” in the subject line. Tell us what the emergency is, why it is urgent, and what information would help. We may disclose information without legal process where we believe in good faith that it is necessary to prevent or lessen a serious threat to someone’s life, health or safety, as the Privacy Act 2020 allows. We may ask for legal process to follow.

5. Preservation requests

While you obtain legal process, you can ask us to preserve specific records. Send the same details as in section 2. We will take reasonable steps to preserve the records we still hold for 90 days, and for a further 90 days if you renew the request before then. We can only preserve what still exists: see section 7.

6. Notifying the user

Our policy is to tell users about requests for their information before we disclose it, so they can seek their own advice. We won’t notify a user where the law or a court order prohibits it, in an emergency, where notice could put a child or anyone else at risk, or where the request concerns child sexual exploitation. If you need us not to notify, say so in the request and give the legal basis.

7. What we hold, and what we don’t

• Our Privacy Policy lists the information we collect. For an account, this is broadly the same information a user receives when they download a copy of their own data from the app, together with records we keep for payments, safety and moderation.
• We don’t record every live event. An event is recorded only if its host or a moderator chooses to, or if our staff record it for safety reasons. Live event chat is deleted when the event ends unless a safety report is open, and images sent in chats are deleted about 24 hours after they are sent.
• We don’t keep face images, with one exception. Age-check selfies and camera frames are analysed and discarded; we keep only the result. The exception is a frame flagged as possibly showing a child, which we keep privately as safety evidence until our staff close the review (see Privacy Policy section 10). We delete it if it turns out to be benign, and keep it as the law requires if it is reported to the authorities.
• Some records are held by our providers, not us: government-ID checks by Stripe, card details by Stripe, Apple or Google, and payout details by Trolley. Requests for those records should go to the provider.
• When a user deletes their account, most of their data is removed or de-identified, as our Privacy Policy describes. We may not hold anything for an account that has been deleted.

8. Child safety

JoyR1der is for adults only and has zero tolerance for child sexual abuse and exploitation. When we find apparent child sexual abuse material or exploitation we remove it, preserve the evidence, and report it to the appropriate authorities, including New Zealand’s Department of Internal Affairs and, where a report has a US nexus, the National Center for Missing & Exploited Children (NCMEC). Our Child-Safety Standards explain more. Child-safety reports can also be sent to safety@joyr1der.com.

9. Other requests

Copyright notices go to our designated copyright agent (see our Copyright & Digital Rights page). Civil requests, such as subpoenas in private lawsuits, need valid New Zealand legal process.