DoNotPay
DoNotPay is a US consumer-rights AI that automates everyday disputes: appealing tickets, cancelling subscriptions, claiming refunds and filing government paperwork. It runs on a subscription, publishes no prices, and is not a law firm.
What is DoNotPay?
DoNotPay is a consumer-rights service that uses AI to automate the persistence, paperwork and phone calls normally needed to challenge a fine, recover money or get past an administration. It began in 2015, when founder Joshua Browder contested his first parking ticket in London, and the company presents it as the world's first AI robot for consumers. It reached the United States in 2017, helping hundreds of thousands of people contest tickets, and added a mobile app alongside the web service.
It is best understood as a catalogue rather than a single feature. The site claims 100+ products, grouped into six families: Protect Your Money, Fight Spam, Customer Service Issue, Find Hidden Money, Beat Bureaucracy, and Travel & Transportation. Concretely, that spans appealing parking and toll tickets, cancelling subscriptions, chasing chargebacks and warranty claims, generating burner phone numbers and virtual cards, claiming flight compensation, finding unclaimed money and scholarships, sending mail and online faxes, notarising documents, filing FOIA requests, booking DMV appointments and contacting elected officials or consulates.
Several milestones show the direction of travel. The 2019 Free Trial Card, a virtual card that automatically declines once a trial period ends, went viral. A 12 million dollar Series A followed in 2020, led by Coatue with a16z and Founders Fund. In 2022 the company launched a chatbot that speaks directly to customer service representatives to cancel subscriptions or negotiate bills. In 2024 it paid its first dividend. The About page displays more than 8.7 million users, and the American Bar Association gave DoNotPay its 2020 Louis M. Brown Award for widening access to legal services.
Two limits are stated by DoNotPay itself and matter more than any feature. It is not a law firm: it supplies legal information and self-help, does not review submissions for legal accuracy, and communications carry no attorney-client privilege. And it is sold by subscription alongside per-use services, with no price published anywhere on the site.
What it does
- Appeal parking tickets, toll fines and other administrative penalties
- Cancel subscriptions and free trials, and dispute charges or chargebacks with merchants
- Issue a virtual Free Trial Card that auto-declines once a trial ends
- Negotiate bills and wait in phone queues with customer service on the user's behalf
- Claim refunds and compensation for delayed flights, late deliveries and faulty goods
- Find unclaimed money, scholarships, college fee waivers and financial aid appeals
- File FOIA requests, book DMV appointments, notarise documents and send mail or online faxes
When to use DoNotPay / When not to
A quick filter to help you decide if DoNotPay is the right fit.
When to use DoNotPay
- US consumers facing a parking ticket, a toll fine, a bank fee or a merchant who will not refund them
- People who cannot afford a lawyer and need structured legal information and self-help documents
- Subscription-heavy households wanting to cancel services, dispute charges and stop unwanted renewals
- Students and their advisers chasing scholarships, college fee waivers and financial aid appeal letters
- Anyone drowning in robocalls, spam texts and marketing emails who wants to fight back rather than ignore it
When not to use DoNotPay
- Businesses and professionals: the terms restrict use to strictly personal, non-commercial purposes
- Anyone acting on someone else's behalf, since users must certify the dispute is an authentic problem of their own
- People who need actual legal advice or attorney-client privilege, which DoNotPay explicitly does not provide
- Developers and teams looking to automate claims through an API, as no developer documentation exists
- Users outside the United States, whose procedures (DMV, FOIA, small claims) the current catalogue does not cover
How to use DoNotPay
A typical end-to-end flow, from setup to results.
- Open the site and choose Start Now or Sign Up, which leads to the account creation flow
- Check the entry requirements first: you must be at least 18, with a valid email address and a valid credit card
- Accept the terms and the privacy policy, which also means consenting to operational and marketing messages
- Pick the product you need from the catalogue rather than describing a generic problem
- For services that inspect purchase history, link a personal email account so DoNotPay can read receipts and correspondence
- Connect a bank account or debit card so money recovered can be paid back to you and fees can be handled
- Approve in writing any external fee DoNotPay advances on your behalf, such as paying a ticket
- Expect an identity check before certain services, which may extend to a tax identification number or a credit report
- Follow progress and cumulative savings in the My Tasks area of the account
- Cancel in one click in the app, or by emailing support, at least 48 hours before the renewal date
Pros & Cons
Pros
- Unusually wide catalogue for one subscription, with 100+ products from parking fines to FOIA requests
- Rare longevity in the AI market: operating since 2015, with a public ten-year track record
- Institutional recognition through the American Bar Association's 2020 Louis M. Brown Award
- Dated, checkable press coverage in BBC, Wired, The Verge, TechCrunch, Forbes, Bloomberg and Fast Company
- Cancellation advertised as one click, with an email address and a phone number as alternatives
- Written undertaking in the terms never to sell or rent anonymised user data
- Identifiable company, published postal address, and terms and privacy policy that are both accessible and dated
Cons
- No price is published anywhere: no pricing page, no amount, no tier, nothing before you sign up
- A valid credit card is required simply to access the service, before any cost is disclosed
- Very broad access requested: DoNotPay reads linked email accounts and connects to your bank account
- Automatic renewal with a narrow 48-hour cancellation window before each renewal date
- Mandatory arbitration and class action waiver for US residents
- No GDPR framework at all, no data processing agreement, no named sub-processors, no EU representative
- Customer support is described in the terms as neither required nor guaranteed
Pricing & Plans
DoNotPay does not publish its prices. The terms describe two categories of paid services, recurring Subscription Services and per-use A La Carte Services, and state that the subscription fee is the one set out in the user's account settings, which means it only becomes visible after registration. No permanent free plan is advertised, and a valid credit card is required to enrol. Subscriptions renew automatically for periods matching the initial one, at the then-current fee, and must be cancelled at least two calendar days before the renewal date. External charges, such as paying a ticket on the user's behalf, are debited separately from the connected account after written approval. No starting price or currency can therefore be stated here.
- recurring paid services
- renewed automatically for a period matching the initial one
- at the then-current fee
- no amount published
- paid on a per-use basis
- no amount published
Data, GDPR & hosting
A consolidated view of how DoNotPay handles your data.
GDPR overview
There is no mention of the GDPR anywhere on DoNotPay's public pages. This is silence rather than a refusal: the site never claims compliance, never denies it, and never names a legal basis, a data protection officer, an Article 27 EU representative or any European data subject right. The framework it does invoke is entirely American, namely COPPA for children under thirteen, California Civil Code section 1798.83 for direct-marketing sharing, and Virginia and federal law for the terms themselves. The privacy notice states plainly that DoNotPay is based in the United States, that the information it collects is governed by US law, and that using the service from abroad means consenting to the transfer of that data to the United States. No data processing agreement is published or offered, and no sub-processor is ever named.
Who owns the data?
DoNotPay, Inc. controls the data. The privacy notice of 22 August 2023 defines personal information as name, email, postal and billing addresses, phone number and payment card details, and treats usage data such as IP address and device identifiers as non-personal unless combined with the rest. Anything the company de-identifies leaves the policy's scope entirely and may then be used without obligation. Data may be shared with service providers, with authorities on legal request, with affiliates, and transferred in a merger, sale or bankruptcy. Two commitments run the other way: the terms promise never to sell or rent anonymised user data, and the About page states the company does not sell data. Any feedback a user sends becomes DoNotPay's property.
Reuse rights
Reuse rights are narrow and they run in DoNotPay's favour. The terms authorise use of the service solely for personal, non-commercial purposes: material from the platform may not be copied, redistributed, published, modified, sold or turned into a derivative work without prior written consent. Anything a user submits as feedback is deemed DoNotPay's property, and the company may reproduce, disclose or commercialise it without limitation or compensation. In the other direction, the user grants far more than access to a form: linking an email account lets DoNotPay read receipts, correspondence and contact details to find savings opportunities, and the service acts as the user's agent, able to cancel and repurchase a ticket or a service on their behalf. Connecting a bank account authorises both debits and credits.
Data retention & training
Hosting summary
The privacy notice states that DoNotPay is based in the United States and that the information it collects is governed by US law. Users outside the country are told that data collected through the service is transferred to, processed, stored and used in the United States, and that using the service constitutes consent to that transfer. No other hosting country or region is mentioned, no hosting provider is named, and no security certification such as SOC 2 or ISO 27001 is claimed anywhere on the site. On security itself, the notice commits only to reasonable measures against loss, theft, misuse and unauthorised access, with no technical detail, and adds that transmission over the internet is not completely secure and that the company cannot guarantee the security of information collected through its service. Network lookups place the site behind an Amazon CloudFront edge node, which describes content delivery rather than where data is stored.
Things to keep in mind
Risks and trade-offs to weigh before adopting DoNotPay.
- No price is visible before you hand over a credit card, and the subscription renews automatically with only a 48-hour cancellation window
- The terms authorise debits and credits on your connected bank account, including recovery in small increments if the balance is short, while disclaiming any responsibility for the overdraft fees that may follow
- Linking an email account lets DoNotPay read your receipts, correspondence and contact details, a far wider view of your life than any single dispute requires
- Acting as your agent, the service may cancel and repurchase a ticket or a service on your behalf, and if it obtains a settlement you agree in advance to accept it as final
- US residents waive a jury trial and the right to join a class action, and must go through individual arbitration instead
- The service says nothing about the GDPR, publishes no data processing agreement and names no sub-processors, while reserving the right to retain de-identified data indefinitely
- Automated legal self-help can create false confidence: the tool does not check your facts, provides no legal advice, and its outcomes are explicitly not guaranteed
Setup & Integrations
Technical difficulty
Technically, none. There is nothing to install, no API key to configure and no integration to build: everything happens on the web or in the mobile app, through forms and a chatbot. The real friction is administrative and personal rather than technical. Enrolment requires a valid credit card, several services require linking an email account so the tool can read receipts and correspondence, payments run through a connected bank account, and certain services trigger an identity check that may extend to a tax identification number or a credit report.
Deployment
Integrations
Behind DoNotPay
Fundraising
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
Is DoNotPay a law firm?
How much does DoNotPay cost?
Do I need a credit card to sign up?
How do I cancel my subscription?
What data does DoNotPay actually access?
Does DoNotPay sell my data?
Is DoNotPay GDPR compliant?
Is there an API for developers?
What is the minimum age?
What happens if I have a dispute with DoNotPay?
Should you pick DoNotPay?
DoNotPay is one of the few consumer AI services with a genuine track record. It has been running since 2015, the company behind it is identifiable, its legal pages are complete and dated, a support email and a phone number are published, and a decade of dated press coverage plus the American Bar Association's 2020 Louis M. Brown Award back up the claim that it made self-help legal tools reachable for people who could not afford a lawyer. The catalogue is genuinely broad, and for a household fighting a parking ticket, a stubborn merchant or a subscription that will not die, the value proposition is easy to grasp.
Three reservations should be weighed before signing up. The first is pricing: nothing is published, and a valid credit card is required before any amount appears, which sits awkwardly against the site's own promise of clear pricing and no surprises. The second is the depth of access requested. Reading a linked email account and connecting a bank account for debits and credits is a lot of trust for a refund, and the terms place the risk of overdraft fees on the user. The third is jurisdiction: the service is built for American procedures, the data is processed in the United States, and the GDPR is not mentioned anywhere, so European users are largely outside the picture.
Read the terms before enrolling, particularly the 48-hour cancellation window and the arbitration clause. And keep DoNotPay's own framing in mind: it is not a law firm, it gives no legal advice, and its self-help tools are not guaranteed to resolve every situation. Used for what it is, an automation layer over consumer paperwork, it is a serious tool. Mistaken for a lawyer, it is not.
- Choosing a selection results in a full page refresh.
- Opens in a new window.