Say what is actually live
A feature that is built but switched off is labelled Coming soon, on the pricing page and everywhere else. We would rather lose a sale than sell something that does not run yet.
About
MyDefense is a small product built in Istanbul, Türkiye, around a simple observation: everyone has the right to have their data erased, and almost nobody has the time to exercise it.
Most people now have a genuinely strong right to erasure — KVKK in Türkiye, the GDPR in Europe and the UK, the CCPA in California. In practice, using it means finding out who holds your data, writing to each of them, tracking the statutory deadline, and following up when nobody replies. Doing that across a dozen platforms and a long tail of data brokers is a project, not an afternoon.
So we built the thing we wanted to exist: connect your accounts, get one honest list of what is exposed, and remove it — directly through the platform where that is possible, and through a formal erasure request where it is not. Today that covers 7 platforms, breach checks on your email addresses, and erasure requests to data brokers.
We are early, and we would rather be plain about it than pretend otherwise. Some of what is on the roadmap is written and waiting on an external approval or subscription; where that is the case, it says so on the page rather than in a footnote.
Principles
These are the ones we would notice breaking.
A feature that is built but switched off is labelled Coming soon, on the pricing page and everywhere else. We would rather lose a sale than sell something that does not run yet.
Platforms connect over OAuth, so we never see a social password. The tokens we do hold are encrypted at rest, scoped to your account, and destroyed when you disconnect.
Where we cannot delete data ourselves, we file the erasure request your own law entitles you to. No scraping other people, no grey-area automation against platforms.
Questions about how something works, a platform you want covered, or a data request under a legal request — all of it reaches a person, not a queue.
The fastest way to judge whether this is worth your time is to run one scan.