One widget · cookie consent, AI disclosure, accessibility, privacy requests

Privacy Laws Have Deadlines. Prove You Met Them

Paste one line of code. One widget covers cookie consent, AI disclosure, accessibility, and privacy requests, and the dashboard behind it runs the response clock and records exactly how you answered, and when.

Start by seeing what your site does right now.

Free, no signup. Takes about 30 seconds.

Already know you want it? Start free trial

Sample reportexample.com

Worth a look

Tracking that starts before visitors make a choice

Worth a look

Meta Pixel and Google Ads loaded before any consent choice was recorded.

Technically: Tracking fired before consent — Fired before consent

Why this matters

A banner that records a choice but doesn't stop the scripts creates a written record that someone declined and the tracking ran anyway. Regulators have specifically pursued businesses whose opt-out mechanisms didn't work the way they were presented.

What to check

Open your site in a private window, decline the banner, and watch whether these same trackers still load.

This is what goes on your site.

That panel isn't a mockup — it's running on this page right now. Click the pill in the lower-left corner and you'll get exactly what your visitors get.

One widget covers cookie consent, AI disclosure, accessibility, and privacy requests. The dashboard behind it runs the response clock and records how you answered.

The DataRightsOS privacy widget open on a website, showing cookie consent choices, privacy rights request intake, accessibility reporting, and AI disclosure.
Trend Alert

20 States

Not Just California Anymore

Twenty U.S. states now have comprehensive consumer privacy laws, and the patchwork keeps expanding. Businesses need a clear way to publish privacy rights, opt-out instructions, and consumer request pathways.

Stay Ahead
New Law Alert

3 New Laws

Effective Jan 1, 2026

Indiana, Kentucky, and Rhode Island consumer privacy laws all became effective on January 1, 2026, adding new obligations around access, deletion, correction, opt-outs, and privacy notices.

Stay Ahead
New Law Alert

Maryland

Data Minimization Bar Raised

Maryland's Online Data Privacy Act took effect October 1, 2025, with strict limits on collecting unnecessary data and strong restrictions around sensitive data. Privacy notices can't be generic anymore.

Stay Ahead
New Law Alert

Minnesota

New Profiling Rights

Minnesota's Consumer Data Privacy Act took effect July 31, 2025, giving residents rights over how their personal data is collected, used, and applied in profiling or automated decision-making.

Stay Ahead
New Law Alert

Tennessee

Joins the Compliance Map

The Tennessee Information Protection Act took effect July 1, 2025, giving residents data rights and requiring covered businesses to publish clear privacy information and honor consumer requests.

Stay Ahead
Trend Alert

Aug 1, 2026

One-Click Broker Deletion

California's DROP system lets residents submit a single deletion request to registered data brokers. Data brokers must begin processing DROP requests on August 1, 2026.

Stay Ahead
New Rule Alert

COPPA

Children's Rules Got Tougher

The FTC's updated COPPA rule requires separate verifiable parental consent before children's personal information can be disclosed to third parties for targeted advertising or similar purposes.

Stay Ahead
Enforcement Alert

$630K

Honda Settlement

California's privacy regulator reached a settlement with Honda requiring business practice changes and a fine of more than $630,000 over alleged CCPA violations.

Stay Ahead
Enforcement Alert

$345K

Todd Snyder Opt-Out Failures

The California Privacy Protection Agency ordered retailer Todd Snyder to pay $345,178 and change its privacy practices, including opt-out mechanisms and employee training.

Stay Ahead
Enforcement Alert

$1.35M

Tractor Supply Fine

California's privacy agency issued a $1.35 million decision against Tractor Supply over alleged CCPA violations involving privacy notices, opt-out mechanisms, and service provider agreements.

Stay Ahead
Enforcement Alert

$1.375B

Google Texas Settlement

Texas announced a $1.375 billion settlement with Google involving claims tied to location data, Incognito mode, and biometric information. Privacy enforcement is getting bigger.

Stay Ahead
Enforcement Alert

$7.8M

BetterHelp Health Data

BetterHelp agreed to pay $7.8 million after FTC allegations that it shared sensitive consumer health data with advertising platforms despite privacy promises.

Stay Ahead
Enforcement Alert

$1M

accessiBe Widget Order

The FTC finalized a $1 million order against accessiBe over claims that its AI-powered accessibility tool could make websites WCAG compliant. Accessibility messaging must be careful and accurate.

Stay Ahead
Enforcement Alert

$5.15M

Fashion Nova Accessibility

Fashion Nova agreed to a $5.15 million settlement involving claims that its website was inaccessible to legally blind users. Digital accessibility is now a real litigation risk.

Stay Ahead
Trend Alert

AI Rules

Disclosure Laws Arriving Fast

California's AI Transparency Act took effect in 2026, and AB 2013 now requires certain generative AI developers to publish training-data summaries. AI use statements are becoming part of modern website compliance.

Stay Ahead
Trend Alert

20 States

Not Just California Anymore

Twenty U.S. states now have comprehensive consumer privacy laws, and the patchwork keeps expanding. Businesses need a clear way to publish privacy rights, opt-out instructions, and consumer request pathways.

Stay Ahead
New Law Alert

3 New Laws

Effective Jan 1, 2026

Indiana, Kentucky, and Rhode Island consumer privacy laws all became effective on January 1, 2026, adding new obligations around access, deletion, correction, opt-outs, and privacy notices.

Stay Ahead
New Law Alert

Maryland

Data Minimization Bar Raised

Maryland's Online Data Privacy Act took effect October 1, 2025, with strict limits on collecting unnecessary data and strong restrictions around sensitive data. Privacy notices can't be generic anymore.

Stay Ahead
New Law Alert

Minnesota

New Profiling Rights

Minnesota's Consumer Data Privacy Act took effect July 31, 2025, giving residents rights over how their personal data is collected, used, and applied in profiling or automated decision-making.

Stay Ahead
New Law Alert

Tennessee

Joins the Compliance Map

The Tennessee Information Protection Act took effect July 1, 2025, giving residents data rights and requiring covered businesses to publish clear privacy information and honor consumer requests.

Stay Ahead
Trend Alert

Aug 1, 2026

One-Click Broker Deletion

California's DROP system lets residents submit a single deletion request to registered data brokers. Data brokers must begin processing DROP requests on August 1, 2026.

Stay Ahead
New Rule Alert

COPPA

Children's Rules Got Tougher

The FTC's updated COPPA rule requires separate verifiable parental consent before children's personal information can be disclosed to third parties for targeted advertising or similar purposes.

Stay Ahead
Enforcement Alert

$630K

Honda Settlement

California's privacy regulator reached a settlement with Honda requiring business practice changes and a fine of more than $630,000 over alleged CCPA violations.

Stay Ahead
Enforcement Alert

$345K

Todd Snyder Opt-Out Failures

The California Privacy Protection Agency ordered retailer Todd Snyder to pay $345,178 and change its privacy practices, including opt-out mechanisms and employee training.

Stay Ahead
Enforcement Alert

$1.35M

Tractor Supply Fine

California's privacy agency issued a $1.35 million decision against Tractor Supply over alleged CCPA violations involving privacy notices, opt-out mechanisms, and service provider agreements.

Stay Ahead
Enforcement Alert

$1.375B

Google Texas Settlement

Texas announced a $1.375 billion settlement with Google involving claims tied to location data, Incognito mode, and biometric information. Privacy enforcement is getting bigger.

Stay Ahead
Enforcement Alert

$7.8M

BetterHelp Health Data

BetterHelp agreed to pay $7.8 million after FTC allegations that it shared sensitive consumer health data with advertising platforms despite privacy promises.

Stay Ahead
Enforcement Alert

$1M

accessiBe Widget Order

The FTC finalized a $1 million order against accessiBe over claims that its AI-powered accessibility tool could make websites WCAG compliant. Accessibility messaging must be careful and accurate.

Stay Ahead
Enforcement Alert

$5.15M

Fashion Nova Accessibility

Fashion Nova agreed to a $5.15 million settlement involving claims that its website was inaccessible to legally blind users. Digital accessibility is now a real litigation risk.

Stay Ahead
Trend Alert

AI Rules

Disclosure Laws Arriving Fast

California's AI Transparency Act took effect in 2026, and AB 2013 now requires certain generative AI developers to publish training-data summaries. AI use statements are becoming part of modern website compliance.

Stay Ahead

Privacy enforcement is no longer theoretical.

Twenty US states now have comprehensive consumer privacy laws. Regulators are issuing seven- and eight-figure settlements. Demand letters from consumer rights organizations are rising fast. Most websites are dangerously exposed.

The tools your site needs. Nothing it doesn't.

Four focused modules, deployed with one embed snippet.

Cookie consent with GPC

Cookie consent with GPC

Branded widget handles strictly-necessary, functional, analytics, and advertising cookies. Automatically honors the Global Privacy Control signal — a legal requirement in California and growing states.

  • Accept / reject all or by category
  • GPC auto-opt-out with audit log entry
  • Custom brand color and logo
  • Per-visitor consent receipt IDs
Learn more
Data-rights request intake

Data-rights request intake

Consumers submit access, deletion, correction, and opt-out requests directly through the widget. Each request lands in your dashboard with a 45-day statutory clock running from the moment of receipt.

  • Access, delete, correct, opt-out flows
  • 45-day deadline auto-calculated
  • Identity verification workflow
  • Assignable to team members
Learn more
AI use disclosure

AI use disclosure

Tell visitors when and how you use artificial intelligence to interact with them. Required by the FTC's guidance against deceptive AI claims and California's AB 302 (Bolts Act, 2024), with similar bot-disclosure rules in California's B.O.T. Act (SB 1001) and the EU AI Act now in effect.

  • Plain-language AI use statement
  • Surfaced in the widget disclosure drawer
  • FTC & California AB 302 aligned
  • Versioned with effective dates
Learn more
Web accessibility

Web accessibility

Publish an accessibility statement referencing WCAG 2.1 Level AA — the standard courts and the DOJ actually use — and give visitors a built-in way to report barriers they hit. You track and respond to each report from your dashboard. No "fully compliant" overlay promises that invite the next ADA lawsuit.

  • References WCAG 2.1 Level AA
  • Accessibility statement in the widget
  • Visitor barrier reporting built in
  • Reports tracked in your dashboard
Learn more
Our value proposition

This is what sets us apart and protects your business

Immutable audit trail

Immutable audit trail

Every consent choice and every request event is written to a tamper-evident log. Export it as a timestamped CSV any time — your own record of what happened, for a regulatory inquiry or litigation hold.

  • Timestamped event log per request
  • Consent receipt archive
  • CSV and report export
  • Organization-level isolation

Built for the people who manage privacy,
not just the people who need it.

White-label and reseller friendly from day one.

Law firms

Law firms

Advise clients on state privacy law and hand them a fully functional compliance tool. Add your branding, hand off the dashboard, bill the management fee.

Digital agencies

Digital agencies

Add a privacy compliance offering to your web projects. White-label the widget with client branding. Manage dozens of sites from a single agency seat.

Resellers

Resellers

The Agency plan supports multi-tenant organizations. Set your own pricing, use your own product name, and give each client their own isolated dashboard.

The audit trail is the product

Other tools give you a banner.
We give you proof.

A cookie pop-up tells visitors about cookies. It does not prove you honored a deletion request within 45 days. It does not give you a timestamped record to hand a regulator. Data Rights OS writes every event to an immutable log the moment it happens — so when someone asks how you handled it, the evidence is already there.

Timestamped audit export

Timestamped CSV of every consent and request event.

45-day deadline tracking

Auto-calculated from request receipt; visible to the whole team.

Organization-level isolation

Each tenant's data is logically separated. No cross-contamination.

Sephora storefront

Sephora pays $1.2 million to settle a California suit.

SACRAMENTO — Sephora Inc., one of the world's largest cosmetics retailers, has settled a lawsuit claiming that the company sold customer information without proper notice in violation of California's landmark consumer privacy law, state Atty. Gen. Rob Bonta said Wednesday.

Sephora failed to tell customers that it was selling their personal information, failed to allow customers to opt out of that sale, and didn't fix the problem within 30 days as required by the law even after it was notified of the violation, state officials said.

Simple, transparent pricing.

No per-request fees. No surprise overages. Cancel any time.

Try it free for 7 days

Create your account and explore every feature. No credit card required — upgrade any time before your trial ends.

Start free trial
Free
Free

Cookie consent for one site, free forever. No credit card.

  • 1 site / 1 domain
  • Cookie consent with full GPC enforcement
  • Both widget layouts
  • Up to 10,000 consent records/month
  • 7 days of consent log history
  • Community docs support
  • "Powered by DataRightsOS" badge

Trials that don’t upgrade roll into the free plan automatically — your widget keeps working.

Notice
$39/mo

or $390/year — save $78

Publish your statements, capture and enforce cookie choices, and give visitors a way to report barriers and submit requests.

  • Everything in Free, plus:
  • 1 site / 1 domain
  • 1 team member
  • Cookie consent with full GPC enforcement
  • Accessibility statement + barrier reports
  • AI use statement (incl. Spanish)
  • All four legal statements in-widget
  • Consent log (90 days of history)
  • Privacy requests forwarded by email
Core
$99/mo

For a single site that needs to track privacy requests and deadlines.

  • Everything in Notice, plus:
  • Data-rights request intake with identity verification
  • 45-day deadline tracking + alerts
  • Per-request fulfillment checklists
  • Audit trail (1-year retention)
  • CSV export of your own records
  • 2 team members
ProofMost popular
$299/mo

For firms and agencies running multiple client sites.

  • Up to 10 sites
  • Everything in Core
  • Unlimited audit trail retention
  • Bulk & scheduled CSV export
  • 10 team members
  • Priority support
Agency
Custom

Resellers and large agencies with dozens of client organizations.

  • Unlimited sites & organizations
  • Everything in Proof
  • Multi-tenant isolation
  • Your own product name
  • Full white-label — remove DataRightsOS branding
  • Dedicated onboarding
  • Unlimited team members
  • SLA & MSA available
Contact us

Who this isn't for

If your site has no contact form, no analytics, and no customer data, you don't need us — a static brochure site has little to manage. If you want a widget that promises to make you compliant or to fix your accessibility automatically, we're the wrong vendor: no tool can do that, and the ones that say they can have been fined for it. And if you want someone else to take on your legal obligation, that isn't a product any company can sell you.

Frequently asked questions

Questions, answered straight.

Bizooma Creative Agency
Why we built this

Built by Bizooma, for the web that needs protecting

While building and managing websites for clients across every industry, the team at Bizooma, LLC kept running into the same uncomfortable truth: the overwhelming majority of websites are quietly exposed to litigation. Most have no real mechanism to honor data and privacy laws, no accessible way for visitors to exercise their rights, and no audit trail to prove compliance when it matters.

As privacy regulations, accessibility requirements, and AI disclosure rules spread across US states, that gap became a serious risk for the businesses we serve. So we created DataRightsOS — a single, installable layer that gives any website the consent management, data-rights workflows, and audit logging it needs to stay on the right side of the law.

Subscribe to the Bizooma newsletter

Get compliance updates, product news, and web tips straight to your inbox.