For registered California data brokers
We run each round start to finish and keep written proof of every step.
In 2023, California passed the Delete Act. One request from any Californian now goes to every registered data broker at once. There are 581 on the list. If you paid the state's registration fee, you're one of them.
The work never ends: check the state's delete list every 45 days, delete everyone who matches, tell your vendors, report back. And starting January 1, 2028, an independent auditor checks that you really did.
Nobody's asking whether you like the law. The only question left is who does the work.
Most firms got through August's first deadline by improvising: someone downloaded the list, ran a script, and hoped. That works once. It doesn't work eight times a year.
And every round leaves a record of how well you handled it. When the auditors arrive in 2028, what you filed this year is what they'll read.
The question isn't whether you got through August. It's whether you can prove it.
Each round, we pull the state's list, match it against your records, and hand your team a simple to-do list of what to delete. The state gets its report on time. You get about twenty minutes of review. Then you go back to running your business.
Book a 20-minute callOur tooling matches the state's list right in your browser, where your data lives. What comes back to us is match results and the state's request numbers. Never a name, an email, or a phone number.
See it work in your browserDeleting someone from your own systems is only half the law. You also have to tell every company you've shared their data with to delete it too, in writing. We write each one, send it in your name, log the replies, and file dated proof it went out. Your file will show you did what the law asks.
Book a 20-minute call
Starting January 1, 2028, California audits registered brokers, and your records are due within five business days of the ask. Records like that can't be recreated later. So every round files its own paper trail as it runs. When the auditor asks, the answer is already in the file, where it stays for six years.
See what it costsReady in five business days if the state ever asks.
Twenty minutes. We look at how your first round went and which systems hold customer data.
One short policy: every match gets deleted unless another law makes you keep it. Your lawyer lists those keep-laws for your business and signs off. After that, the rounds don't need them. No privacy lawyer? We'll introduce you to one; they work for you, not us.
You list every system that holds data you sell; our tooling installs where that data already lives. Nothing for your team to build, and your customer file stays put. Each round starts by confirming nothing new was added.
We run it, your team clears a short to-do list, you review for about twenty minutes, and everything goes on file. Curious what the matching step looks like? See it run in your browser.
From the public record and the press. Facts you can check for yourself.
You already pay California $6,000 a year just to stay registered. The law prices mistakes at $200 per person, per day. No one has been fined over a deletion round yet; the fines so far, $34,000 to $63,000, were all registration slip-ups. Our core plan costs about what a privacy lawyer bills for two to three hours. The lawyer advises. We do the work.
$500 /mo, billed yearly
Self-serve. 14-day money-back, no deposit.
Book a 20-minute callfrom $750 /mo
Prefer to hand everything off? Full custody adds 30-50%. Five founding slots at a locked rate.
Book a 20-minute callfrom $1,500 /mo
Prices cover up to 100,000 customer records. Bigger list? Add $200 a month per additional 100,000. Past a million records, we scope it on the call.
Only need your state paperwork, and running the deletion rounds yourself? Registration Desk covers state registration filings and renewals only, without the deletion work, at $1,500-3,000 a year + state fees. Ask about it on the call.
Your deposit is refundable in full until your first cycle runs. After that, month to month, with a 60-day out.
What we never do:
If we ever miss a deadline, the fix is already in the contract: we redo the work and credit the fee.
True, so far. All 11 fines to date were for registration problems, not missed deletion rounds. But the state has a dedicated enforcement team, the law sets $200 per person per day with no grace period, and the audits that start in 2028 will read the records you're building right now. What you're buying is a file that can't be recreated later, not fine-panic.
The matching script is the easy part, and we'll say so on the call. Ask your IT person about the rest: the same customer spelled three different ways across five systems, the six separate lists the state publishes, the notices you're required to send every vendor, and where the proof lives so it's still findable in six years. We'd rather be their backup than their replacement.
Matching software is fine. We sell it ourselves: that's Match Engine, $500 a month. What no software does: delete anything from your systems, write and send the vendor notices the law requires, handle the judgment calls that need your lawyer, or leave a record of who did what when. The higher plans are the work and the paper trail, not the software.
Compare it to the alternatives. A privacy lawyer bills $400-600 an hour, so $750 buys under two hours of advice a month, and most owners burn more than that just reading the rules. The $6,000 you send the state each year buys you nothing but permission to operate. This is the work itself, done and documented.
For 3-40 person firms that resell consumer data and have no privacy staff. Not for background-check companies covered by the federal FCRA (this law exempts them), not for enterprises with an in-house privacy team, and not for very small shops. If you're under about $500k in revenue, a cheap self-serve tool is honestly the right answer, and we'll tell you so.
Your lawyer (or a privacy attorney we can introduce, who stays your lawyer, not ours) approves the policy once: whether you're covered, and which records other laws force you to keep, like tax or fraud rules. For everything else the default is simple: when in doubt, delete. One exception can't be pre-approved: if a lawsuit puts records on legal hold, tell us the moment it happens and we pause those records. We carry out the policy exactly as written and send anything new back to them. We never give legal advice.
We redo the work and credit the fee, and that remedy is spelled out in the contract before you pay anything. We don't cover fines; nobody legitimate does, and anyone who offers to should worry you.
For the service plans, your deposit is fully refundable until your first cycle runs. After that it's month to month, with a 60-day out. Match Engine is billed yearly and comes with a 14-day money-back window instead.
No. OptOutReady does compliance operations, not law. Nothing we produce is legal advice, and legal decisions belong to your lawyer. That split is deliberate. It's also why we cost a fraction of what a law firm bills.
By default, no. Matching runs in your browser using one-way codes (hashes), and what we see is match results and the state's request numbers, never names or emails. If you'd rather hand the whole thing off, that's a priced option under a signed data agreement.
No. Matching never uses a name alone. The state's list matches exact identifiers: an email, a phone number, or first name, last name, birthday, and ZIP code all together. Two people collide only if all four line up. On the rare day that happens, the state's own rules say to opt them all out, so you lose one sellable record, not every John Smith on your list.
Bring your questions. In twenty minutes we'll walk through what the state expects, look at how your first round actually went, and tell you straight if a cheap tool is all you need. It's a working session, not a pitch.
We're taking five founding clients at a locked rate. Five, because that's how many we can set up properly before the deadline.
Book a 20-minute callNot ready? Get the free checklist or email hello@optoutready.com.