Question 1

Who is Yorba?

Accepted Answer

Yorba is a Public Benefit Corporation registered in the United States dedicated to helping consumers exercise their data rights globally. We are:

Entirely self-funded ($0 in outside

Privacy-focused by design (we don't sell user data)

Legally compliant across every state and country with DRPs in place

Founding member of the Data Rights Protocol for automated processing

We maintain the largest account deletion database in existence with 4K+ records and growing, processing over 200M emails through advanced AI/ML verification systems.
Proven Track Record

30K+ members

146 countries with Yorba members

250K+ cleanup actions completed

$0 in outside funding - fully independent

For questions about specific requests, contact us at yo@yorba.co.

Question 2

Why did I receive a deletion request?

Accepted Answer

If you process personal data of individuals covered under applicable data protection laws, you are generally required to honor legitimate deletion requests. You received a deletion request because a Yorba Member requested deletion assistance through our authorized agents. We submit these requests on behalf of our members.

Question 3

Do you have legal authority to request a deletion?

Accepted Answer

We operate as an authorized agent under data rights laws that grant consumers the right to designate representatives, including:

GDPR Article 80 (European Union)

CCPA Section 1798.135 (California)

Similar provisions in 20+ U.S. state laws and international regulations

Question 4

How do you verify users?

Accepted Answer

Yorba verifies account ownership before submitting any deletion requests via:

✅ Gmail and Microsoft (Outlook, Hotmail, etc..) through OAuth secure authentication
✅ Plaid connections to confirm ownership of financial accounts
✅ Email challenge/response verification
✅ Corroborating account metadata supplied by the user

Question 5

Why doesn't Yorba require government-issued IDs?

Accepted Answer

Neither the CCPA nor the GDPR requires government-issued identification to verify a deletion request. CCPA §1798.130 limits verification to what is reasonable, tied to existing accounts, and associated with information already collected, with strict limits on retention and use. GDPR Article 12 requires controllers to facilitate rights requests and allows additional information only where reasonable doubts exist, while Article 5(1)(c) mandates data minimization.

Requiring ID uploads introduces new sensitive data, increases retention and breach risk, and raises the verification bar beyond the original relationship — creating more compliance risk, not less.

Question 6

Can you provide additional verification?

Accepted Answer

If your standard process requires additional verification (such as government-issued ID), you may request this from us. However, remember that we have already verified the user's identity and account ownership. Additional verification requests should be:

Reasonable and necessary for your process

Consistent with your standard practices for direct consumer requests

Proportionate to the sensitivity of the data involved at the time of sign-up.

To request additional verification, please reply to the thread with the agent who reached out to you, and we’ll loop the Member directly into the thread

Question 7

Who's on your dedicated deletion team?

Accepted Answer

Yorba’s dedicated deletion team acts as legal agents on behalf of our members. Check out About page to see all the team members.

Received a deletion request?

All user information has been verified before we submit requests:

If you’re receiving a deletion request, here is what you need to do:

Frequently Asked Questions

US State Privacy Legislation Tracker 2026