UnVaultHelp Center

Unvault Law Enforcement Guidelines

Effective: September 21, 2026 · Version 1.0

1. Who these Guidelines are for#

1.1 These Guidelines are for law-enforcement agencies, regulators, courts, and government bodies that want information from Unvault (BVI) Ltd (Unvault) or want Unvault to act. They explain what Unvault is, what records it holds and does not hold, how to make a request that Unvault can lawfully answer, and how quickly we respond. They are not legal advice, and they do not create rights for any person.

1.2 Private parties — including rights holders, victims of theft, and litigants — should not use this channel. Copyright and trademark complaints follow the Copyright Policy and Trademark Policy; stolen-item reports follow the Disputed Items Policy; civil subpoenas and discovery requests are addressed in Section 8.

2. What Unvault is, and why it matters for your request#

2.1 The entity. Unvault (BVI) Ltd is a company incorporated in the British Virgin Islands under the BVI Business Companies Act, 2004 (company number 2217283). Its registered office is Suite 5, Oleander Building, Port Purcell, Tortola, VG1110, British Virgin Islands, at the office of its registered agent, Leeward (BVI) Limited. Unvault has no office, subsidiary, or registered branch in the United States or the European Union.

2.2 What Unvault operates. Unvault operates a website and web application, APIs, indexers, an off-chain order book, signing services, and support channels through which people interact with public blockchains.

2.3 What Unvault does not operate or control. The smart contracts that settle trades, run liquidity pools, hold vaulted items, pay DIVIT rewards, and mint drops are owned and controlled by UV Tech Foundation, a Panama private interest foundation (Public Registry of Panama, Folio No. 25068308). Unvault does not hold the keys to those contracts. Neither Unvault nor the Foundation holds custody of any user's digital assets or private keys. Users hold their own assets in self-custodied wallets provided by third parties.

2.4 Consequences. Because of this structure:

  • (a) Unvault cannot freeze, seize, transfer, burn, or recover any digital asset, and cannot reverse a transaction. An order requiring Unvault to do so cannot be complied with, whatever its source.
  • (b) Unvault cannot identify the person behind a wallet address from its own records unless that person has given Unvault identifying information (see Section 3).
  • (c) The complete history of every transaction settled through the Protocol Contracts is already public on the relevant blockchain and can be read by anyone with a block explorer or node. Unvault's indexed copy adds convenience, not additional facts.
  • (d) Requests concerning the Foundation's contracts should be addressed to the Foundation at its Panama domicile; Unvault will pass on correspondence on request but cannot act for the Foundation.

3. Records Unvault holds#

3.1 Typically held, for a user who has connected a wallet and signed in:

  • wallet addresses that have signed in, with the time of each sign-in and the IP address and browser information recorded at the time;
  • profile data the user chose to supply: nickname, avatar, profile-visibility setting, and any linked X (Twitter) account handle;
  • an email address, only if the user supplied one (for example, for support, an early-access application, or notifications);
  • signed marketplace orders (listings and offers) created through the Services, whether or not they were filled;
  • indexed on-chain activity associated with the address (a copy of public blockchain data);
  • watchlists and interface preferences;
  • support correspondence, reports the user filed, and reports filed about the user;
  • records of Drop eligibility (allowlist membership and mint vouchers issued) and of DIVIT claim proofs generated;
  • records of promotional-campaign participation, including posts submitted for post-to-claim rewards; and
  • API keys and API usage logs, for developers.

3.2 Never held: private keys, seed phrases, wallet passwords, or custody of any asset; payment-card or bank details (Unvault takes no fiat payments); government identity documents (Unvault does not run identity verification at the effective date of these Guidelines).

3.3 Retention. Sign-in and access logs are retained for 12 months. Order, report, and support records are retained for 5 years. Profile data is retained until the user asks for deletion. Blockchain data is public and permanent.

3.4 Third parties. Wallet providers, the LayerZero messaging network, Particle Network (universal accounts used for cross-chain payments), RPC providers, and analytics providers hold their own records under their own policies; requests for those records must go to them.

4.1 Data protection law. Unvault is subject to the Data Protection Act, 2021 of the Virgin Islands. Unvault discloses personal data to public authorities only where a lawful basis applies — principally where disclosure is required by law or by a valid order of a court or authority with jurisdiction over Unvault, or where it is necessary to prevent, detect, or investigate crime and the disclosure is proportionate.

4.2 Foreign process has no direct effect. A subpoena, warrant, production order, or similar instrument issued by a court or authority outside the British Virgin Islands is not, by itself, binding on Unvault. Unvault will generally require that foreign requests be made through one of the routes in Section 5. Unvault may, at its discretion and where lawful, respond voluntarily to a foreign request for limited non-content records in the circumstances described in Section 5.4.

5. How to make a request#

5.1 British Virgin Islands authorities. Serve orders and requests on Unvault at its registered office (Section 2.1) or by email to lawenforcement@unvault.com. Requests should identify the issuing authority and officer, cite the legal power relied on, and describe the records sought with reference to wallet addresses, Unvault URLs, or on-chain transaction hashes.

5.2 Foreign authorities — mutual legal assistance. Requests from outside the BVI for records held by Unvault should be made through mutual legal assistance. For United States authorities, the Mutual Legal Assistance (United States of America) Act, 1990 applies; for other states, the Criminal Justice (International Co-operation) Act and any applicable treaty apply. The central authority is the Attorney General's Chambers, Government of the Virgin Islands, P.O. Box 242, Road Town, Tortola, VG1110, British Virgin Islands, telephone +1 (284) 468-2960. Unvault complies with orders of the BVI courts made on such requests.

5.3 Letters of request in civil and regulatory matters. Foreign courts may seek evidence from Unvault through a letter of request to the BVI courts under the Evidence (Proceedings in Other Jurisdictions) Act. Unvault complies with the resulting BVI order.

5.4 Voluntary cooperation. Where a request comes from a recognised law-enforcement agency, is made on official letterhead by an identified officer using an official email address, concerns a serious crime (including theft of digital assets, fraud, child exploitation, terrorism financing, or sanctions evasion), and seeks only limited non-content records about identified wallet addresses (for example, whether an address has signed in and the dates and IP addresses of sign-ins), Unvault may provide those records voluntarily where it is satisfied that disclosure is lawful and proportionate. Unvault decides each such request individually and may decline or require formal process.

5.5 What to include in every request.

  • the requesting agency, the officer's name, rank, and official email address, and a telephone number for verification;
  • the legal authority for the request and a copy of any order;
  • the wallet addresses, Unvault URLs, transaction hashes, or nicknames concerned;
  • the specific records sought and the date range;
  • a short description of the investigation, sufficient for Unvault to assess proportionality; and
  • whether the requesting agency asks Unvault to delay notifying the user, and on what legal basis.

5.6 Format. Send requests in English, as PDF attachments, to lawenforcement@unvault.com. We respond from that address; check that replies come from the unvault.com domain. We do not accept requests through social media or through the in-app "Report" control.

6. Emergency requests#

6.1 Where there is an imminent risk of death or serious physical harm to a person, an identified officer may send an emergency request to lawenforcement@unvault.com with "EMERGENCY" in the subject line, describing the risk and the records needed to address it. Unvault reviews emergency requests as quickly as it can, including outside business hours, and may disclose limited records without formal process where it believes in good faith that doing so is necessary to prevent the harm. Unvault may ask the agency to follow up with formal process afterwards.

6.2 Financial loss, including theft of digital assets, is not by itself an emergency under this Section. Theft reports follow the Disputed Items Policy and Section 5.

7. Preservation requests#

7.1 An identified officer may ask Unvault to preserve records relating to specified wallet addresses or accounts pending formal process. Unvault preserves a snapshot of the records it holds for 90 days, renewable once on request for a further 90 days. Preservation does not disclose anything; disclosure requires a request under Section 5.

8. Civil subpoenas and private litigants#

8.1 Unvault does not respond to civil subpoenas or discovery requests issued outside the British Virgin Islands unless they are given effect by a BVI court under Section 5.3, or unless the requesting party obtains an order in the arbitration or court forum specified in the Unvault Terms of Service to which Unvault is a party. Litigants who want records about a wallet should first consult the public blockchain, which contains the complete transaction history.

9. Notice to users#

9.1 Unvault's practice is to tell affected users about requests for their records before disclosure, and to give them a copy of the request, unless the law prohibits notice, a court order requires delay, notice would create a risk to a person's safety, or the request concerns an emergency under Section 6 or the exploitation of minors. Where notice is delayed, Unvault gives it after the reason for delay ends.

10. Timing, costs, and format of responses#

10.1 Unvault acknowledges requests within 3 business days and aims to respond substantively to complete, valid requests within 15 business days. Emergency requests are handled under Section 6.

10.2 Unvault produces records electronically, as CSV or JSON exports and PDF copies of correspondence, with a signed statement describing how the records were produced. Unvault does not attend hearings or provide testimony except as ordered by a court with jurisdiction.

10.3 Unvault may seek reimbursement of reasonable costs for unusually burdensome requests, as the law allows.

11. What Unvault can do to help without an order#

11.1 Unvault will, on request from an identified law-enforcement officer and without disclosing personal data:

  • explain how the Services and the Protocol Contracts work and how to read the relevant on-chain records;
  • confirm which contract addresses on each network are Protocol Contracts and what they do;
  • apply a "reported" label to items identified as stolen under the Disputed Items Policy where a police report is supplied, and remove items or Collections from the Services that violate the Terms of Service; and
  • accept and act on reports of content sexualising minors, which Unvault also reports to the appropriate authorities on its own initiative.

12. Contact#

Law Enforcement Response, Unvault (BVI) Ltd Email: lawenforcement@unvault.com Registered office: c/o Leeward (BVI) Limited, Suite 5, Oleander Building, Port Purcell, Tortola, VG1110, British Virgin Islands

UV Tech Foundation (owner of the Protocol Contracts): Republic of Panama, Panama City, Betania, Vía Ricardo J. Alfaro, PH The Century Tower, office 317, suite 708; resident agent Pacífica Legal.