Find Your Data. Delete It.

DataTrail scans your email to find out which companies are holding your personal data, then helps you send them official requests to delete it. It also helps you unsubscribe from unwanted mailing lists and tracks how each company responds.

Every time you sign up for a service, make a purchase, or create an account online, a company stores your personal information: your name, email, address, sometimes payment details, and more. Over years, this adds up to dozens or even hundreds of companies holding pieces of your personal data, often long after you've stopped using their service. The more places your data sits, the more places it can be lost in a breach, sold to advertisers, or used without your knowledge.

Yes. Laws like the GDPR (Europe) and the CCPA (California) already give you the legal right to request that a company delete the personal data it holds on you. The problem is knowing which companies have your data in the first place, and then writing and sending a proper deletion request to each one. DataTrail automates both steps.

No. While GDPR and CCPA are the most well known privacy laws, many companies apply the same deletion process to all customers regardless of location, since it's often simpler for them to offer one policy rather than different rules per region. DataTrail is useful anywhere you want more control over your personal data.

• Your name and email address, for your account and the mailbox you connect
• Encrypted mailbox access (a Gmail/Outlook token or an IMAP app password), stored encrypted and never shown to your device
• Sender domains and counts derived from your inbox, for example "amazon.com, 12 emails"
• Your purchase history, handled by our payments provider (RevenueCat) to manage your subscription

• The content, subjects, or bodies of your emails
• The individual addresses of people who email you (only the sender's domain is kept)
• Your contacts, photos, files, location, or browsing history
• Advertising identifiers. We show no ads and don't track you across apps.

No. We never sell your data or share it for advertising. The only third party that receives any data is RevenueCat, which processes your subscription purchase on our behalf. Breach checks use a public, domain-level list, and your email address is never sent to any breach-lookup service. You can delete everything anytime from the Profile tab.

Not exactly. DataTrail writes the request and opens it in your email app, already addressed and ready to go. You review it and hit send yourself. We never send anything from our own servers or touch your inbox to send on your behalf.

DataTrail checks each company in a few steps. First, we look for a known request form or privacy portal the company already uses. If we can't find one, we look for their official privacy page and a contact listed on it. If neither of those turns anything up, we use the most common industry-standard address for privacy requests, based on the company's own domain.

Most companies that are required to accept privacy requests use a small number of standard addresses, most commonly privacy@ followed by the company's website domain. When DataTrail can't find or confirm a more specific contact, it uses this standard format as a starting point. A best-guess contact is marked differently from one we've directly confirmed, so you always know how certain we are.

If a request sent to a best-guess address doesn't go through, most email providers send back a bounce message. DataTrail can detect this and will let you know the request didn't reach anyone. Over time, we also use this to build a more accurate, verified contact for that company, so future requests go to the right place the first time.

Many large companies don't treat a general privacy inbox as a way to file individual deletion requests. Instead they offer self-service tools, like a privacy dashboard or account setting where you can view and delete your own data directly. That's usually faster and more reliable, so when DataTrail finds one it points you straight there instead of drafting a letter.

For some companies, DataTrail can't find a specific email address or request form, but it does find their official privacy page. Rather than guess at a contact that might not work, DataTrail shows you the actual page so you can see what options that company offers. Nothing has been sent on your behalf, and no deadline is running.

DataTrail located and confirmed a real privacy page for that company, but couldn't find a specific email address or request form on it. You can visit the page directly to see what options are available.