Privacy Rights

README

# privacy-rights-plugin

Exercise your CCPA/GDPR consumer privacy rights from your AI coding agent. Request data deletion, opt out of data sales, and export your data — across Claude Code, OpenCode, Codex, Cursor, and OpenClaw.

## What it does

Three primary rights:

- **Delete my data** — CCPA §1798.105 / GDPR Art. 17 deletion requests
- **Do not sell my data** — CCPA §1798.120 opt-out of sale/sharing
- **Export my data** — CCPA §1798.100 / GDPR Art. 20 data portability

Plus two supporting skills:

- **Discover** — Scan your email metadata to find long-tail companies that hold your data
- **Dashboard** — Track open requests and 45-day CCPA deadlines

## Install

This plugin is compiled with [jacq](https://github.com/jondwillis/jacq) to produce valid output for multiple agent harnesses:

```bash
# Build for all supported harnesses
jacq build /path/to/privacy-rights-plugin --output dist

# Install into Claude Code
cp -r dist/claude-code ~/.claude/plugins/privacy-rights

# Or install into OpenClaw
cp -r dist/openclaw ~/.openclaw/plugins/privacy-rights
```

## Usage

In Claude Code:

```
/delete-my-data Spokeo
/do-not-sell Meta
/export-my-data Google
/discover                    # scan email for additional companies
/dashboard                   # view open requests
```

## How it works

The plugin consults the [`privacy-registry`](https://github.com/jondwillis/privacy-registry) — a separate community-maintained database of companies and their privacy request methods — to determine how to contact each company. For each request:

1. Look up the company in the registry
2. Pick the best available contact method (web form > email > postal)
3. Render the appropriate email template or navigate the web form
4. Track the request in `~/.privacy-rights/requests.json` with the 45-day deadline
5. Pause for human-in-the-loop on CAPTCHAs and identity verification

## What this plugin is not

- **Not a legal service.** This plugin helps you exercise rights you already have. It does not provide legal advice.
- **Not an authorized agent service.** This plugin is for personal use. Acting as an authorized agent for other consumers requires additional legal compliance (consumer authorization verification, CA Secretary of State registration, etc.).
- **Not a CAPTCHA solver.** When automation hits a CAPTCHA, the plugin pauses and asks you to solve it.

## Legal references

- [CCPA / CPRA](https://oag.ca.gov/privacy/ccpa) — California
- [GDPR](https://gdpr-info.eu/) — EU
- [LGPD](https://www.gov.br/cidadania/pt-br/acesso-a-informacao/lgpd) — Brazil
- [PIPEDA](https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/) — Canada

## License

Apache-2.0. See [LICENSE](LICENSE).