DÆTRAX

They keep records about you.
Now you keep records about them.

Track the companies you've handed your data to, get help writing your requests to them, and keep a record of whether they replied.

Data you leave with some companies keeps a window into your life.

Close the ones you’re done with.

Every company you've used still has a file on you.
You gave them your data to get something done.

You've scanned your face to prove your age. A job asked for a recorded video interview, which the hiring platform shares with the employer and its vendors. A dating or matrimony app has your private messages. The accounts are closed, and every one of those companies still has the file.

Those files can be sold or "shared", used to train AI, or kept under broad terms in a legal word salad. DÆTRAX keeps a record of what you asked each company, when, and whether it answered. If one of them turns up in a breach, or you find out it was doing something it shouldn't, you can show you asked it to stop. It stops being your word against theirs and becomes their word against their own.

How it works.
Four steps, from adding a company to logging their answer.

  1. Track a company on your record Add the companies you gave your data to. Pick their industry, and the record fills in what those companies usually keep, like ID documents, facial scans, financial details, personal profiles, DMs, etc.
  2. Draft the letter, written for you Privacy laws give you three main requests: see what they hold, limit how they use it, or delete what they don't need. We help you write a plain, realistic letter you can edit, grounded in the realities of retention.
  3. Send from your own inbox Copy it into your own email and send it. Mark it as sent here, and we count down to their legal deadline.
  4. Log whether they answered Mark whether they replied before the deadline. Your record keeps it either way.And remember, what they say is a claim. DÆTRAX operates on a zero-trust basis, and you should too.
Tracking is private You don't have to send anything to start. Adding a company contacts nobody. It's a private note for you, and one more in an anonymous count that shows which companies people most want to keep records about.

Why send a request at all?
The less a company keeps, the less it can get wrong.

A breach is one common risk, and you can find many such cases on our news blog. But you'll often also find human error: poor judgement, staff mistakes, staff tricked into giving access to records a company has kept for years.

Compliance reasons force companies to keep your data, and loose laws around sharing and sale let them use it. For some, data they're forced to keep becomes another revenue stream: it can be sold to AI companies or used in other ways, because you opted into something you were unaware of. Even "de-identified" data can be matched back to you by AI in seconds.

And their terms are broad and loose. "Legitimate interest" is supposed to weigh your rights against theirs, but the company does the weighing, and no independent third party assesses each case.

You're at the mercy of their judgement. Will you leave it there? Or send a formal request that, at the very least, makes them answer you directly instead of pointing you to a privacy policy you don't understand.

What you'll see.
Your companies, and where each request stands.

You send every request from your own inbox. The record shows who you asked, what you asked for, when their deadline runs out, and whether they answered. The reply itself stays in your inbox, where we can't read it.

Companies tracked
4
2 sensitive
Open requests
3
1 past deadline
Outcomes logged
2
1 responded · 1 no reply
Next deadline
18 Jul
in 6 days
Cypress Match cypressmatch.com · 6 categories See done Limit asked Delete not started asked
Stride Mobility stride.app · 4 categories See not started Limit asked Delete not started no reply
Halton & Vance haltonvance.co.uk · 9 categories See asked Limit not started Delete not started asked
Northgate Credit northgate.credit · 7 categories See done Limit not started Delete done deletion claimed

Privacy law gives you rights.
It also gives companies reasons to keep your data anyway.

The same laws list reasons a company can keep your data, such as tax records, fraud checks and legal claims, and those reasons apply to every request, whether you send it or a deletion service does. The company still has to answer you in writing by a deadline, and you keep the reply.

What you can ask for
  • See what they hold
  • Limit how they use it
  • Delete what they don't need to keep
  • Ask what remains after you leave
Why they can keep it
  • Legitimate interest, the catch-all
  • Kept "as long as necessary", with no end date
  • Fraud and criminal investigation
  • Tax, ID checks and accounting
  • Safety, abuse and moderation logs
  • Legal holds and do-not-contact lists

Each of these laws gives you the same core rights, with its own details and deadlines.

🇬🇧 UK GDPR🇪🇺 EU GDPR🇺🇸 US CCPA/CPRA🇨🇦 Canada PIPEDA🇦🇺 Australia Privacy Act🇧🇷 Brazil LGPD🇿🇦 South Africa POPIA🇮🇳 India DPDP Act🇦🇪 UAE PDPL🇸🇦 Saudi Arabia PDPL🇸🇬 Singapore PDPA🇯🇵 Japan APPI🇰🇷 South Korea PIPA🇨🇭 Switzerland nFADP🇲🇽 Mexico LFPDPPP🇶🇦 Qatar PDPPL🇧🇭 Bahrain PDPL🇴🇲 Oman EPDPL🇯🇴 Jordan PDPL🇮🇱 Israel PPL🇪🇬 Egypt PDPL🇰🇪 Kenya DPA🇳🇬 Nigeria NDPA🇲🇦 Morocco Law 09-08🇹🇷 Turkey KVKK🇲🇾 Malaysia PDPA🇹🇭 Thailand PDPA🇵🇭 Philippines DPA🇮🇩 Indonesia PDP Law🇻🇳 Vietnam PDP Law🇳🇿 NZ Privacy Act🇦🇷 Argentina Law 25,326🇨🇱 Chile Law 19,628🇨🇴 Colombia Law 1581

34 laws, covering roughly half the world's population

Deckard reads the Fine Print.
So you know what an industry keeps before you ask.

Privacy policies are long, and almost nobody reads them. Deckard, our agent, reads them industry by industry and notes what companies collect and how long they say they keep it.

In almost every industry, the companies' own terms allow them to keep your data by default, share it and train AI on it. Each company's page in your record shows what its industry usually holds.

The Fine Print Browse by industry 38 industries covered, each one reviewed

From the Blog.
Our articles, news about companies, and industry research.

ISSUE No. 03

Post 23 Sept 2026

What dating apps keep, and how the way you write can name you

A dating or matrimony profile holds your face, your faith, who you're drawn to and years of private messages. Some of that has already been shared, sold, scraped, handed to an AI company and leaked. Taking your name off doesn't hide you, because AI can now work out who wrote a text from the way it's written. Here's what these apps hold, where it has gone, and what to ask for.

Dating & Matrimony

ISSUE No. 02

Post 16 Jun 2026

De-identified does not mean what it used to

Every privacy policy lets a company pass on what it holds once your name is off it. The law allowed that because putting a name back took an expert, days and money. It now takes an AI model and a few seconds, and years of messages and profiles went out under the old assumption.

Identity verification

Research

Identity and age verification

A scan of your passport and face, taken and kept by a separate verification company, in one of seven countries.

Common questions.

Deleting Can I get my data completely removed?
Objecting What stops them using my data?
Removal services Isn't that what data removal services are for?
Where it helps Where does DÆTRAX help, and where doesn't it?
The law Do I need to understand privacy law?
Sending it yourself Why do I send the request myself?
Push-back What if the company pushes back?
After sending What happens after I send a request?
Your data with us Is my data safe with DÆTRAX?

Most people lose track of which companies have their data.
Your record keeps it all in one place.