Received a deletion request?

Yorba is a Public Benefit Corporation registered in the United States dedicated to helping consumers exercise their data rights globally. We are:

• Entirely self-funded ($0 in outside funding)

• Privacy-focused by design (we don't sell user data)

• Legally compliant across every state and country with DRPs in place 

• Founding member of the Data Rights Protocol for automated processing

We maintain the largest account deletion database in existence with 4K+ records and growing, processing over 200M emails through advanced AI/ML verification systems.

Proven Track Record

• 115+ countries with Yorba members

• 10K+ deletion records in our database

• 200M+ emails processed for verification

• $0 in outside funding - fully independent

For questions about specific requests, contact us at yo@yorba.co.

If you process personal data of individuals covered under applicable data protection laws, you are generally required to honor legitimate deletion requests. You received a deletion request because a Yorba Member requested deletion assistance through our authorized agents. We submit these requests on behalf of our members.

We operate as an authorized agent under data rights laws that grant consumers the right to designate representatives, including:

• GDPR Article 80 (European Union)

• CCPA Section 1798.135 (California)

• Similar provisions in 20+ U.S. state laws and international regulations

Yorba verifies account ownership before submitting any deletion requests via:

✅ Gmail and Microsoft (Outlook, Hotmail, etc..) through OAuth secure authentication
✅ Plaid connections to confirm ownership of financial accounts
✅ Email challenge/response verification
✅ Corroborating account metadata supplied by the user

Neither the CCPA nor the GDPR requires government-issued identification to verify a deletion request. CCPA §1798.130 limits verification to what is reasonable, tied to existing accounts, and associated with information already collected, with strict limits on retention and use. GDPR Article 12 requires controllers to facilitate rights requests and allows additional information only where reasonable doubts exist, while Article 5(1)(c) mandates data minimization.

Requiring ID uploads introduces new sensitive data, increases retention and breach risk, and raises the verification bar beyond the original relationship — creating more compliance risk, not less.

If your standard process requires additional verification (such as government-issued ID), you may request this from us. However, remember that we have already verified the user's identity and account ownership. Additional verification requests should be:

• Reasonable and necessary for your process

• Consistent with your standard practices for direct consumer requests

• Proportionate to the sensitivity of the data involved at time of sign up

To request additional verification, please reply to the thread with the agent who reached out to you, and we’ll loop the Member directly into the thread

Yorba’s dedicated deletion team acts as legal agents on behalf of our members.

Meet the heroes:

Omair Ahmed Raza, Waleed Khalid, Zaib Un Nisa, Sadaf Aqeel, Junaid Ahmed, Sarmad Afzal, Edwin Wylde, Arooj Kiran, Warda Saeed, Alisha Shahid, Ahmed Ali, Abdul Ghaffar, Arkam Baig, Tricia Francis, Aimen Yousaf, Sumbul Aftab, Sarfraz Bhatti, Abdul Rehman, Rida Fatima, Saif Ullah