196 days until DPDP Rules take full effect

DPDPA compliance,
done in an evening.

Answer 15 questions about your product. Complyoo writes your privacy notice, breach response plan and nine more DPDP policies for the tools you actually use, ready for review.

Start free→Scan your website free

No credit card. No demo call. Built in India.

complyoo.com/policies
  • Privacy Notice
  • Breach Response
  • Data Retention
  • Data Principal Rights
  • Vendor DPA
  • Information Security

Privacy Notice

Written for Razorpay, AWS, Mixpanel

Writing
Rule 3Rule 7Sec. 8

Every policy is written against

DPDP Act, 2023DPDP Rules, 2025Rule 3 · Privacy noticeRule 6 · Security safeguardsRule 7 · Breach intimationRule 8 · Retention and erasureSection 8(2) · Processor contractsSections 11 to 14 · Data Principal rightsCERT-In Directions, 2022DPDP Act, 2023DPDP Rules, 2025Rule 3 · Privacy noticeRule 6 · Security safeguardsRule 7 · Breach intimationRule 8 · Retention and erasureSection 8(2) · Processor contractsSections 11 to 14 · Data Principal rightsCERT-In Directions, 2022
Free tool · AI Exposure Check

Before you paste it into ChatGPT, check it here

Your team pastes customer data into AI tools every day. Paste any text and see the Aadhaar numbers, PANs, UPI IDs and API keys in it. It runs in your browser; nothing is uploaded.

Runs in your browser. Nothing you paste is uploaded.

What would the AI see?

Aadhaar, PAN, GSTIN, UPI IDs, phone numbers, card numbers, bank details and API keys show up here.

Want this check on every prompt your team sends?

Add Complyoo Guard to Chrome, free →
What is at stake

The Act sets penalties in crores, per instance

Maximum penalties from the Schedule to the DPDP Act, 2023. The Data Protection Board decides the actual amount based on how serious and how repeated the breach is.

₹250 Cr

Security safeguards

Failing to take reasonable security safeguards to prevent a personal data breach.

Section 8(5)

₹200 Cr

Breach intimation

Failing to inform the Data Protection Board and affected people of a breach.

Section 8(6)

₹200 Cr

Children's data

Failing the additional obligations for processing data of children.

Section 9

₹150 Cr

Significant Data Fiduciaries

Failing the additional obligations placed on notified large processors.

Section 10

₹50 Cr

Everything else

Any other breach of the Act or Rules, including notice, consent and rights handling.

Schedule, item 7

Product

Everything your DPDP paperwork needs, nothing it doesn't

Two tools, built deep: a policy generator that knows your stack, and a scanner that shows what your website is already telling regulators.

Policy generator

11 DPDP policies, written for your stack

Your privacy notice names Razorpay and AWS, not “a payment processor”. Every clause points to the rule it satisfies, and every template is ready to copy and send.

Privacy NoticeBreach ResponseData RetentionData Principal RightsConsent CollectionVendor DPAVendor ManagementInformation SecurityEmployee PrivacyChildren's DataCross-Border Transfer

Free tool

Website scanner

Finds third-party trackers, a missing privacy notice and forms without consent in under a minute. No signup.

Run a scan

No personal data to AI

Only business metadata is used. Your users’ records never leave your systems.

Edit and export

Edit any section, regenerate it on its own, and download Word files for review.

Breach-ready templates

CERT-In six-hour report, DPBI notices and user emails, written before you ever need them.

How it works

From zero to drafted in three steps

01

Tell us about your product

15 questions on the data you collect, the tools you use and where data is stored. About 10 minutes.

02

Generate your policies

Complyoo writes each policy section by section, naming your real vendors and the DPDP rule each clause satisfies.

03

Review, edit, publish

Edit in the browser, fill your contact details once, and download Word files for your counsel to review.

Pricing

One plan. Public price. No sales call.

Consultants quote lakhs for a one-time engagement. Complyoo is a monthly subscription you can cancel anytime.

Free

₹0

See where you stand.

  • Privacy Notice written for your stack
  • Website scanner with fixes for each finding
  • Edit and download as Word
Start free
Most teams

Complyoo

₹2,999/month

or ₹24,999 a year, two months free.

  • All 11 DPDP policies for your stack
  • Section-by-section editing and regeneration
  • Breach, rights-request and consent templates
  • Word export for every policy
  • Contact details filled in automatically
  • Everything in Free
Get Complyoo
FAQ

Questions founders ask us

Something else? Write to hello@complyoo.com.

No. Complyoo gives you complete, specific first drafts so your counsel reviews instead of writing from scratch. That usually turns weeks of work into an hour of review. It is not legal advice.
About Complyoo

Built in India, for the founders the Act forgot to budget for

The DPDP Act applies to every company that handles personal data of people in India. Large enterprises have legal teams for it. Most startups have a founder, a deadline and a quote from a consultant they cannot afford.

Complyoo turns the Act and the Rules into documents a founder can finish in one sitting: specific to the tools you use, traceable to the rule they satisfy, and honest about what still needs a lawyer.

Self-serve

Start tonight. No demo call, no sales process, public pricing.

Specific, not generic

Your documents name your vendors, your data and your rules.

Honest about limits

We draft. Your counsel approves. We never call it legal advice.

196 days. Start with one evening.

Scan your website free, then generate the policies it is missing.

Start freeScan your website