Introducing VowTrace

Consent, on the record.

DPDP compliance for Indian businesses. One consent record that shows an auditor who said yes, to what, and when, wherever they said it.

हर सहमति, रिकॉर्ड पर।

Request early access See how it works
DPDP Act 2023 DPDP Rules 2025 Data stays in India Websites, apps and APIs

Every DPDP duty is enforceable from 13 May 2027. Start with your website.

--Days
--Hours
--Minutes

A cookie banner is easy to copy. A record you can hand to the Data Protection Board is not.

How it works

Purpose by purpose. Proof by proof.

  1. Tell us about your site

    Eight questions about the data you collect and why. About thirty minutes, start to finish.

  2. Show a notice people can read

    A plain-language notice in their language, generated from your answers and versioned on every edit. Rule 3

  3. Let them choose, one purpose at a time

    Every toggle starts off. No bundled "accept all". Sec 6

  4. Every yes and every withdrawal is written down

    Append-only and hash-chained, linked to the notice version it was given against. Rule 6

Everything the Rules ask of you

Built from the Act, Rule by Rule.

Every feature maps to a duty in the DPDP Act 2023 and the DPDP Rules 2025, and every checklist item cites its Rule number. No vague promises, just evidence.

Sec 6(4)Rule 6

An append-only consent ledger

Rows are never edited or deleted, not even by us. A withdrawal is a new entry. Each row is hash-chained to the one before, so tampering shows.

#1042granted
#1043granted
#1044withdrawn
Rule 3

Notices in the languages your customers read

Generated from your answers, versioned on every edit, and reviewed by native speakers. Old versions stay exactly as they were shown.

Englishहिन्दीमराठीதமிழ்ગુજરાતીবাংলা
Rule 14

A rights desk with a clock

Access, correction and erasure requests land in one place, each with its 90-day countdown.

68days remaining
Checklist

Know where you stand

A dashboard checklist that cites the Rule behind every item.

Notice published
DPO contact shown
Hosting

Your data stays in India

India regions only, tenant isolation enforced in the database, and identifiers stored as keyed hashes.

INIndia-region hosting
and backups
WordPressWooCommerce

Works where your forms already are

Consent at WooCommerce checkout, and purpose-wise checkboxes in Contact Form 7, WPForms and Elementor forms. Auto-generated privacy and "your data" pages.

Audit

Evidence on demand

Export your consents and processing events as CSV or JSON whenever an auditor, a client or the Board asks.

Consent at the gateway

Enforced on every request. Not promised in a policy.

Most consent tools stop at the banner. VowTrace checks consent where your data actually moves. If a customer withdraws consent for marketing, your campaign service gets a 403 before it touches their data.

  • Kong plugin and nginx moduleDrops into the gateway you already run. No changes to your services.
  • Purpose from the routeMap /campaigns/* to "marketing" once. Every call is checked against that purpose.
  • Machine-readable denialsA clear consent_withdrawn body your code can handle, not a mystery error.
  • Every allowed call loggedEach processing event lands in your activity log, kept for at least a year. Rule 6

In numbers

Calm, specific, on the clock.

0minto install and configure on WordPress
0languages at launch, English and Hindi always
0daysto answer each rights request, counted for you
0pre-ticked boxes, ever

One record, every door

Your website, your app, your APIs.

Every integration writes to the same consent record, so you start on one channel and add the next without migrating. Tell us where you need consent first and we will bring that integration forward for you.

WordPress and WooCommerce

A plugin with the banner, notices, rights desk and WooCommerce checkout consent. Set up in about thirty minutes.

Request this first

JS SDK and REST API

One script tag for any site (Wix, Webflow, custom PHP, React) and an API with signed webhooks for apps and backends.

Request this first
Our difference

API gateway enforcement

A Kong plugin and an nginx module that check consent on every request before your services touch the data.

Request this first

Pricing

Priced for Indian businesses.

Free

₹0
  • Purpose-wise consent banner
  • Two languages
  • 50 consents a month
  • Rights request form
WordPress Pro

Pro

₹2,999per site / year
  • All six languages
  • Unlimited consents
  • WooCommerce and form integrations
  • Audit export and Rule checklist
Apps and APIs

Platform

from₹4,999a month
  • JS SDK, REST API and webhooks
  • Consent-check API for your services
  • Breach and retention workflows
  • One record across all your properties

Prices exclude GST. VowTrace helps you meet specific DPDP duties; it does not make you "certified" and is not legal advice.

Questions

Asked, and on the record.

Agencies, gateways, Significant Data Fiduciaries: if it is not in the plans above, it is probably an option we already offer. Write to us and we will set it up for you.

Ask us anything
Do you work with agencies?Option available

Yes, there is an agency option. Manage every client site from one dashboard, set up new sites in bulk, and white-label the banner and notices with your agency's name. Write to us with the number of sites you look after.

Ask about this option
Can VowTrace enforce consent at our API gateway?Option available

Yes, this option is available. A Kong plugin and an nginx module check consent on every request against the purpose you map to each route, and refuse calls with a machine-readable 403 when consent is missing or withdrawn. Allowed calls are written to your Rule 6 activity log.

Ask about this option
We may be a Significant Data Fiduciary. Can you help?Option available

Yes, there is an SDF option. It adds Data Protection Impact Assessment templates, an evidence pack for your periodic audit, and the records your DPO needs, mapped to Rule 13.

Ask about this option
Our website is not on WordPress, or we have an app.Option available

Use the JS SDK (one script tag for Wix, Webflow, custom PHP or React sites) or the REST API with signed webhooks for apps and backends. Everything writes to the same consent record.

Ask about this option
Do you support children's data and parental consent?Option available

Yes, this option is available: an age gate and verifiable parental consent flow, as Rule 10 requires for children's data.

Ask about this option
How is the agency, gateway or SDF option priced?

These options are set up for each business, so there is no list price. Tell us what you need and we will reply with a plan for your setup.

Where is our data stored?

In India. VowTrace is hosted in India regions only, with backups in India. Each business's data is isolated in the database, and visitor identifiers are stored as keyed hashes, not raw emails or phone numbers.

Does VowTrace make us DPDP compliant?

VowTrace helps you meet specific duties under the DPDP Act 2023 and the DPDP Rules 2025, and every checklist item names the Rule behind it. It does not certify you, it is not a registered Consent Manager yet, and it is not legal advice.

Which languages are supported?

English and Hindi always, plus Marathi, Tamil, Gujarati and Bengali. Every translation is reviewed by a native speaker.

We practise what we sell

This page asks nothing of you.

0cookies set by this page
0trackers or analytics scripts
0third-party requests; fonts are self-hosted
0forms. Early access is a plain email you write

Early access

Be first on the record.

We are onboarding a small group of Indian businesses and agencies before launch. Write to us and we will reply personally.

Request early access

Opens your email app, addressed to hi@askininnovations.com