Rights & grievances
Give people a place to submit requests. Help your team assign, review and respond.
Available · plan & configuration dependent BUILT FOR INDIA’S PRIVACY JOURNEYCollect consent
Collect consent
clearly.
Respect choices.
Keep proof.
Give people a real choice. Keep optional tracking off until they agree. Put understandable receipts and a clear evidence trail behind every decision.
A Free plan to get started · Built around your website
For the people building
trust into their business.Business owners
Privacy teams · Developers
trust into their business.Business owners
Privacy teams · Developers
northstar.exampleFictional website
✦ NORTHSTARStories for the curious.
YOUR PRIVACY, YOUR CHOICE
A better experience.
On your terms.
Choose how this example website uses optional data. You can change your mind anytime.
Essential site operationSecurity and remembering your choices
Always activeWebsite analyticsHelp improve the reading experience
PersonalisationRecommend content you may find useful
Powered by Privista Interactive example
Optional processing starts off.Try these fictional example controls.
Default offA receipt they can keep.Clear choices. A lasting record.
Purpose-level choicesConfigured script controlsPortable consent receiptsPrivacy-rights workflows
A CLEARER WAY TO HANDLE CONSENTOne choice.
One choice.
A connected trail.
Explore the journey from a clear notice to a record people can keep.
STEP 01 / 04
A notice with context
A clear, itemised notice connects each purpose to the personal data involved. Optional choices begin off.
ILLUSTRATIVE FLOWNotice ready
notice.version = 14- Purpose: Website analytics
- Data: Page views, interaction events
- Optional: Yes · starts off
01 / CHOICES THAT DO SOMETHINGA preference isn’t just
A preference isn’t just
a setting. It’s a decision.
Try a purpose below, save your choice, and watch the example controls respond. The receipt records what you saved.
Interactive preview
Fictional business. Browser-only example.
Example choices do not record real consent.
✦ NORTHSTARPrivacy preferences
It’s your choice.
Essential processing keeps the example site working. Optional processing is up to you.
Essential site operationSecurity and remembering your choices
Always activeWebsite analyticsHelp improve the reading experience
PersonalisationRecommend content you may find useful
Behind the choiceSIMULATION
Your website should follow their lead.
These labels illustrate how integrated scripts follow the saved choice. This example does not run tracking scripts.
Essential site operationSite security · preferences
AllowedAnalyticsOptional measurement
BlockedPersonalisationOptional recommendations
BlockedOn your website, enforcement depends on correctly classifying and integrating optional scripts. Unconfigured tools need separate attention.
Save a choice to see its sample receipt
02 / PROOF PEOPLE CAN KEEPA clear choice deserves
A clear choice deserves
a clear receipt.
Give people more than a confirmation message. Give them an understandable record they can revisit, download, and keep.
- The business, notice and purposes at the time
- The selections they actually recorded
- JSON download and a professional print view
- Optional verified-email recovery across devices
Subject receipts are available on every plan when activated for your organisation. An account or email is not required to give consent.
N
RECEIPT
Northstar PublishingFictional Data Fiduciary
CONSENTRECEIPT
Recorded choice28 Oct 2026, 2:30 pm IST
Your choices, recorded clearly.
Website analyticsNot agreed
PersonalisationNot agreed
Essential site operationAlways active
Historical context. Readable evidence.This sample is illustrative and unsigned.
03 / CLARITY FOR YOUR TEAMWatch the record
Watch the record
take shape.
Save a choice in the demo above and it appears here. Explore activity and the steps behind a fictional privacy request.
Connected to your example choices0 interactions in this demo
WORKSPACE / CONSENT
ILLUSTRATIVE DATAConsent activity
Sample sessions6
With sample receipts6
Your interactions00
| Recorded / IST | Session | Outcome | Evidence |
|---|---|---|---|
| 28 Oct · 14:32 IST | session_6e2cv14 · English | Updated | |
| 28 Oct · 14:28 IST | session_3a91v14 · English | Granted | |
| 28 Oct · 14:21 IST | session_b7d0v14 · English | Rejected | |
| 28 Oct · 14:15 IST | session_95fav13 · English | Withdrawn | |
| 27 Oct · 17:44 IST | session_1c44v13 · English | Granted | |
| 27 Oct · 16:09 IST | session_877ev13 · English | Rejected |
Searchable activityHistorical notice evidenceRoles and responsibilitiesCase history and deadlines
MORE OF THE PRIVACY JOURNEY
More clarity. Fewer loose ends.
Extend the work around consent with focused tools for everyday privacy operations.
Nominations
Keep nomination records and review authority when someone seeks to act for another person.
Available · tenant-configurableAge activity
Review recorded age selections and restrictions, with clear self-declaration labels.
Self-declaration · not identity verificationWhat’s still on the roadmap?
Comprehensive processing inventory, DPIA, breach workflows, native mobile SDKs, enterprise SSO and separate verified representative consent remain distinct future capabilities. Their inclusion in the wider vision does not mean they are available today.
FIT PRIVACY INTO YOUR WEBSITEA practical start.
A practical start.
A considered integration.
Start with your notice and purposes. Add the integration that fits your website, then test that your scripts respect each choice.
- 1Set up your organisation
Configure your domain, notice and purposes.
- 2Connect your website
Use WordPress, JavaScript or your API workflow.
- 3Test the complete journey
Check acceptance, rejection, changes and withdrawal.
Integration previewEXAMPLE ONLY
// Use your organisation’s actual configuration
<script
src="YOUR_SDK_URL"
data-privista-key="YOUR_PUBLISHABLE_KEY"
data-notice="YOUR_NOTICE_KEY"
async>
</script>Replace placeholders before installation.
TRUST IS IN THE DETAILSBuilt to keep the
Built to keep the
record clear.
Understand what the evidence shows, how access is controlled, and where your team’s responsibilities begin.
Evidence should explain
what actually happened.
TRY THE EVIDENCEProof you can put
Proof you can put
to the test.
Check this small sample chain. Then change a record and see what the next check finds.
Actual SHA-256 checks, performed locally. This teaching example is separate from the production ledger and signed receipts.
Sample evidence chain3 FICTIONAL RECORDS
Ready to check. Verify the sample, then alter a record and try again.
Inspect sample hashes
Historical context
Receipts use the notice and recorded selections at the time. Missing historical information is clearly labeled.
Tenant-scoped access
Tenant context, database controls and application roles govern who can review business records.
Verifiable evidence
Hash-linked records and signed subject receipts support integrity checks. Verification is not a legal-validity certificate.
Controlled receipt access
Receipt references alone do not authorize access. Recovery links only receipts explicitly enrolled by the person.
Built for Indian businesses
DPDP implementation is phased. Software supports your privacy operations; your organisation remains responsible for its notices, integration and applicable obligations.
Read the FAQsGET THE FRAMING RIGHTDPDP starts with people
DPDP starts with people
and personal data.
A banner is one part of the experience. The important questions are what personal data you process, for which purpose, and on what lawful basis.
THE COMMON ASSUMPTION
“Every cookie needs a consent banner.”
The DPDP framework addresses digital personal data. A technology label, such as a cookie or pixel, is not by itself the legal test.
THE LEGAL FRAMING
Start with the processing and its basis.
Where you rely on consent, provide a clear notice and obtain a specific, informed, affirmative choice. The Act also recognises certain legitimate uses, subject to its conditions.
PRIVISTA’S ROLE
Make the consent workflow practical.
Publish purposes, collect choices, apply configured script controls and keep evidence. Your organisation determines its lawful basis and the duties that apply.
A MORE USEFUL COMPARISON
Where Privista is different.
Compare the choices, the implementation and the evidence. Here is a practical checklist for evaluating a consent solution.
| What matters | What to check in any tool | Privista Consent |
|---|---|---|
| Purpose-level choices | Can people make granular choices and easily change them? | Optional purposes start off; the preference centre supports updates and withdrawal. |
| Script enforcement | Which scripts are actually integrated, classified and controlled? | Configured optional scripts follow the recorded choice, with Consent Mode support. |
| Evidence integrity | Can you inspect and check the historical record? | Hash-linked consent records and signed subject receipts support integrity checks. |
| Receipts for individuals | Can a person view, download and keep their own record? | Subject receipt access, JSON, print and optional recovery when activated for the tenant. |
| Language support | Which languages are included in the selected plan? | English and Indian-language notices, with language capacity determined by plan. |
| Privacy operations | What happens after a person raises a request? | Intake, cases, grievances and nomination workflows with plan and configuration limits. |
Confirm the features, integration requirements and terms for the plan you choose.
WHO IS BEHIND PRIVISTABuilt at the intersection
Built at the intersection
of privacy law
and technology.
Privista is founded by Amal Singh, a Cyber Law & Information Security student at the National Law Institute University, Bhopal.
That perspective informs the product’s focus on clear notices, purposeful choices and understandable evidence—details that matter to the person giving consent and the business recording it.
Meet the founder on LinkedInA PLAN FOR YOUR NEXT STEP
Start small. Build with confidence.
Choose the capacity your website and team need. Subject receipt access is available across plans when activated.
Loading current plans…
Prices exclude 18% GST. Paid selections create a plan request; activation follows review. Allowances are loaded from the current public catalog.
A FEW CLEAR ANSWERSPrivacy is complex.
Privacy is complex.
Getting started
shouldn’t be.
The questions business owners ask before making consent part of their website.
Is Privista only a cookie banner?
The banner is the starting point. Privista also provides purpose controls, a preference centre, consent evidence, subject receipts and privacy-rights workflows. Script enforcement depends on correctly classifying and integrating the scripts on your website.
What does “tamper-evident” mean?
Consent records are linked using cryptographic hashes, so changes can be detected through verification. A valid receipt signature establishes issuer authenticity and integrity. It does not, by itself, establish that consent was legally valid or that an external processor completed an instruction.
Can a person keep a copy of their receipt?
Yes. When subject receipts are activated for an organisation, a person can view their receipt, download JSON, print it, and optionally verify an email for recovery. Consent does not require an account or an email. This access is available across subscription plans when enabled.
Is Privista a registered Consent Manager?
Privista is software businesses use to collect consent and manage their own privacy operations. The registered Consent Manager under the DPDP framework is a distinct regulated role. Privista does not claim that registration.
What is needed to make script controls work?
Install the JavaScript integration or WordPress plugin, publish the appropriate notice, and classify your optional scripts. Test the initial visit, acceptance, rejection and withdrawal flows. Privista controls integrated scripts; it cannot guarantee that every unconfigured third-party tool follows a choice.
Do age controls verify parental consent?
The current age policy supports self-declaration, restrictions and activity reporting. Adult self-declaration is not independent identity verification. Verified parental or representative consent is a separate capability and should not be inferred from an age selection.
Are all seven platform modules available?
This page focuses on working consent and privacy-rights capabilities. Comprehensive inventory management, DPIA, breach workflows, native mobile SDKs and enterprise SSO remain separate roadmap items. Availability also depends on plan, tenant configuration and activation.
Does a subscription history window delete old receipts?
The displayed plan window describes administrator dashboard and export visibility. It is separate from evidence retention and subject receipt access. Retention follows a documented tenant policy and applicable requirements; the plan window is not a deletion promise.