your data · their servers · one request away

They have your data. Open a pull request.

DoorDash knows your address history. Uber has every trip. Spotify logs your 2 a.m. spirals. Under California law they have to hand it over when you ask — most people just never ask. We ask. Formally, legally, on your behalf. Then we pull what comes back out of their silos and into a file you own.

Open my pull request → It's $10. Seriously.

CAL. CIV. CODE §1798.110 · 11 C.C.R. §7063 (AUTHORIZED AGENT) · 45-DAY STATUTORY RESPONSE

privacy desk — session 001
$ pr open --all --right-to-know # acting as your authorized agent (11 CCR §7063) → doordash request sent · day 0 → uber request sent · day 0 → spotify request sent · day 0 ⏱ statutory clock started — response due day 45 # we chase. you get the file. $

How it works

Like a pull request, but the repo is you.

You could send these requests yourself — the law lets anyone, and our templates are public. It also lets you appoint an authorized agent to run the whole thing. That's the service.

git config
1

Sign once

E-sign a single authorization. Under 11 C.C.R. §7063 that designates us your agent — no notary, no power of attorney, no lawyers. Revoke anytime.

pr open --all
2

Pick your targets

Choose the companies in your life. Each one gets a formal Right-to-Know request from our privacy desk — the categories, the specific pieces, the sources, and who they sold it to.

merge
3

Merge the responses

Companies have 10 days to acknowledge, 45 to answer. We track deadlines, nudge the slow, escalate the silent — and parse every response into one clean file you can actually read. And keep.

$10
per pull · no subscription
  • One pull = requests to every company you pick
  • 45 days of deadline-chasing included
  • Responses parsed into your file — yours to export
  • Escalation letter drafted free if they stonewall

Why so cheap

Because it's your data.
We're just the crowbar.

The privacy industry loves a $15/month forever-subscription. We think that's backwards — the law does the heavy lifting here, and we're honest about it. Ten bucks covers the desk: sending clean requests, chasing the clock, parsing the mess that comes back. Run one pull out of curiosity or run one a year as hygiene. No lock-in, no upsell, and everything we learn about how companies respond goes back into the public playbooks.

Open source

The playbooks are public. PRs welcome — obviously.

Every company's privacy contact, request template, verification quirks, and actual response behavior — maintained in the open like an awesome-list. Self-hosters: take the templates and send your own requests, genuinely. Pay us only if you want the desk, the tracking, and the parsing.

playbooks/doordash.md
# DoorDash — Right-to-Know playbook method: email contact: [email protected] subject: "Authorized Agent Request" requires: signed authorization attached, consumer status (User/Dasher), right being exercised verify: emails the consumer directly sla: ack day ~3 · response day ~31 last-conf: 2026-07-19 ← PRs keep this fresh

The law is on your side

This isn't a loophole. It's a right — written into statute.

CAL. CIV. CODE §1798.110

The Right to Know

California residents can demand any covered business disclose the categories and specific pieces of personal information collected, its sources, the purpose, and every third party it was shared with.

11 C.C.R. §7063

The Authorized Agent

The regulations expressly let a consumer appoint a business to submit requests on their behalf with simple signed permission. Companies may not demand a power of attorney.

§1798.130 · §1798.145

The Deadline

Acknowledgment within 10 days. A full response within 45. Companies that stall or stonewall face enforcement by the California AG and the Privacy Protection Agency.

600+

data brokers registered in California alone — companies whose entire business is your information.

45 days

the statutory clock a company is on from the moment our request lands in its privacy inbox.

19 states

now grant access rights like California's — and most national brands honor requests from anyone, anywhere.

merge when ready

Your data has been
upstream long enough.

Try the interactive demo — sign the authorization, pick your companies, and watch the 45-day clock do its work.

Open my pull request →