Take your data back

Find out who has your data, then take it back.

We find the companies holding your data from your inbox, send the deletion requests on solid legal footing, and track every reply. You never have to write a single email.

See how it works ↓

GDPR Article 17
CCPA
Metadata-only access
Crypto-shred on exit
No third-party trackers

How it works

From inbox to deletion requests in motion

Five honest steps. You connect your inbox, and we take it through to tracked deletion requests in motion.

Discover

Connect Gmail. We read metadata only (sender, subject, date), never the messages themselves, and surface who has your data.

Select

Look through the companies we found and choose which ones to send deletion requests to. The list is yours to control.

E-sign

Sign one authorization mandate. Every request goes out under your tamper-evident signature, which anyone can verify independently. We never forge a send.

Send

We write the statutory, region-aware request (GDPR Art.17 or CCPA) and send it for you. You never have to draft an email.

Track

Watch every response and we chase the follow-ups for you. We can't force a company to comply, so we don't pretend deletion is guaranteed.

Why Data Destroy

Built to actually get it done

The hard parts — finding who has your data, wording each request, and chasing replies — are the parts we handle for you.

The long tail of brokers

Your data sits with a long tail of sites and data brokers. We read your Gmail metadata and show you who actually has it, so you skip the manual hunting.

No email writing

We write the statutory, region-aware deletion requests for you. You never have to draft or word a single email yourself.

Automated tracking + follow-up

We track every response and handle the follow-up for you, so your requests don't stall in someone's inbox.

Privacy by design

Concrete commitments, not marketing promises

Everything below is something we can actually keep, stated honestly — including what we can't guarantee.

Metadata only, never your email content: We use the gmail.metadata scope, so we only see headers: sender, subject, and date. We never read message bodies or attachments, and there is no full-text search of your mailbox.
Encrypted at rest: Your data is stored encrypted, one key per user. We use envelope encryption, where each account gets its own wrapped data-encryption key.
Stopping is a crypto-shred purge: Stop using us and we destroy your per-user key. That crypto-shred leaves everything we stored permanently unreadable.
A real legal basis, honestly stated: Every request rests on GDPR Article 17 (the right to erasure) and CCPA, and we tailor it to your region. We follow up for you, but we can't force a company to comply, so we won't promise guaranteed deletion.

Every request carries a verifiable mandate

We never fake or forge a send. Each request goes out under an authorization mandate you e-signed, not a forgeable PDF. The mandate is tamper-evident, it cryptographically proves you authorized the request, and anyone can verify it independently. See the FAQ for how the signed mandate works.

What we'll never do

Never sell or share your data
We never sell your information. The only thing that ever leaves our systems is a deletion request you authorized yourself, sent to a company you picked.
Never read your email content
We use the gmail.metadata scope, so we only ever see headers: sender, subject, and date. We never read the body of a message or open an attachment.
Never fake or forge a send
Every request is real and goes out on your behalf, under an authorization mandate you signed and anyone can verify. We never fabricate or forge a send.
Never use third-party trackers
No third-party analytics, no outside scripts, no hosted fonts. The site and the app are same-origin only, so nothing about you gets shipped off to a tracker.

Pricing

Pay once. No subscription.

One-time plans, no recurring bill. Every plan begins with a Google sign-in.

Cleanup

$10one-time

Connect one Gmail account, discover who has your data, and send up to 25 deletion requests you track yourself.

Complete

$29one-time

Everything in Cleanup, plus unlimited deletion requests and automated follow-up on non-responders.

Compare all plans →

See it in action

The dashboard you'll track every request from

A preview of the dashboard you'll use to track every request. The numbers here are sample data for illustration, not a real account.

Your requests, at a glance

Sample data — illustration only

84
Requests tracked: 38
Completed: 45%
Coverage

How requests end

Lawful refusal
The company said no and pointed to a lawful exemption that lets them keep the data.
Rejected
The company turned the request down without naming any exemption.
System error
Something broke on our side during delivery. This one is on us, not the company.
No response
The legal window closed with no reply, so we stopped chasing.

Awaiting your verification

Sample Retailer Co.Confirm it's you directly with the controller.
Example Telecom Ltd.Submit via the controller's required form.
Demo Analytics Inc.Choose how to proceed with this request.

We never collect your ID. If a company needs to confirm it's really you, you verify with them directly, not with us.

Ready to find out who has your data?

Connect your inbox and see the companies holding your data in minutes. No email writing, no checkout — just a Google sign-in.