Why not just do it myself?
You can. Every right UltoPulto uses belongs to you, and you can exercise each one for free. Doing it yourself costs time: finding each exposure, working out which law applies, writing and sending each request, tracking deadlines, following up and checking again. UltoPulto does that work and keeps the record.
What doing it yourself involves
The steps are the same whoever does them.
- Find every exposureSearch people-search sites one by one, run your own face search, check breach databases, look for your images in dataset indexes.
- Work out which law appliesIt depends on where you live: GDPR, UK GDPR, the CCPA, Illinois BIPA, another state law, or only the site's own policy.
- Find the right contactEach organisation has its own form, email address or portal, and they change.
- Write and send each requestSay who you are, what you want removed and on what legal basis.
- Prove who you areSome organisations ask for verification. Give the minimum they need.
- Track deadlinesCommonly 30 days under the GDPR and 45 under the CCPA, per organisation.
- Follow up and escalateChase the ones that do not answer; complain to the right regulator if they still do not.
- Keep the evidenceCopies of requests, replies and dates, in case you need them later.
- Check againListings can reappear when a broker refreshes its data.
Our free tools cover the first steps: the privacy rights finder, the request letter generator and the data broker checklist. Californians can also use the state’s free DROP platform for registered brokers.
Where UltoPulto saves time, and where it does not
| Doing it yourself | With UltoPulto | |
|---|---|---|
| Cost | Free | From $79 a year (pre-launch pricing) |
| Finding exposures | Manual searches, site by site | One scan across the sources we check |
| Choosing the legal basis | You research it | Chosen from where you live |
| Writing and sending | You write each one | Written and sent as your agent, where the organisation accepts that |
| Steps only you can doID checks, face-search opt-outs, some portals | You do them | You still do them, with instructions and the text prepared |
| Deadlines and follow-ups | Your calendar | Tracked; follow-up and complaint draft prepared |
| Evidence | Your folder | A record per case |
| Checking again | When you remember | Scheduled re-scans |
| Control | Complete | You see every letter and can revoke the authorization |
Questions
Is it legal to send these requests myself?
Yes. The rights belong to you. A service such as UltoPulto only acts as your authorized agent.
What is the hardest part of doing it yourself?
Not any single request. It is finding every place that holds your information, keeping track of dozens of deadlines, and checking again later, because listings can reappear.
Can I start myself and switch later?
Yes. Keep copies of what you sent and when. Requests you already made still count, and their deadlines keep running.