pactbase is live. Here is the story of why.

Chapter two

The one question with no answer

Then a customer writes in, politely, and asks: “What did I agree to when I signed up?”

For most businesses, that is the one question with nothing behind it. Consent lives in pieces: a cookie banner from a plugin, a checkbox on a form somebody built three years ago, a privacy policy in a document, a spreadsheet of people who asked to stop getting emails.

Each piece made sense on the day it was added. Together, they cannot answer a simple question.

That is not carelessness. Nobody gave small businesses a simple way to do it.

Chapter three

What the law asks, in plain words

India’s DPDP Act applies to every business that stores personal data digitally. If your website has a contact form, a sign-up page or an analytics script, that includes you. It is not only for large companies.

What it asks is fair, and easy to say. Tell people what you collect and why. Ask first, one purpose at a time. Keep proof of what they said. And let them change their mind as easily as they agreed.

The rules come fully into effect in May 2027. That is enough time, as long as getting there is simple.

Chapter four

The options we kept finding

When we looked at how a small team would do this today, we kept landing on the same four doors.

Large privacy platforms. Thorough and serious, but built for large companies, with enterprise pricing and rollouts that run for months. Free cookie plugins. Quick, but cookies only, and no proof you can show later. A lawyer and a spreadsheet. A good policy, which is a promise, not a record. Building it yourself. Possible, but it takes your engineers away from your product, and it is never quite finished.

Most small teams have no compliance officer and no GRC team. So the honest answer, for a lot of good businesses, was “we’ll deal with it later.”

Chapter five

So we asked a simpler question

DPDP is for every business that stores data. We kept coming back to one thought: if the law is for everyone, then following it should not be a pain for the small ones.

So we asked: what if DPDP compliance were as easy as adding a Google Analytics script to your website’s header? You add it once. It runs in the background. Nobody has to be an expert to keep it going.

DPDP for small businesses, the way they already work. Nothing complex.Shubham & Pradip, on why we started

That is the whole idea behind pactbase. We want to keep it simple and do the routine work for you, so you can spend your time on the real business.

Chapter six

What you can do today

pactbase launches with four modules. They share one record underneath.

Cookies

See every tracker on your site, and ask before it fires. Explore Cookies →

Consent

Add one unticked box per purpose to the forms you already have. Every yes and no is recorded, with a receipt. Explore Consent →

Trust Center

One public page that shows customers how you handle their data, in the languages they read. Explore Trust Center →

Data Rights

When a customer asks for their data, the request has a deadline and an owner. Explore Data Rights →

Chapter seven

In the language your customer thinks in

Consent only means something if people understand what they are agreeing to. So the banner speaks 22 languages, and you approve each one yourself.

Your customer’s yes should be given in the language they think in.

Chapter eight

Set up in a day

1. Sign up. No sales call.
2. Add your website and let it scan.
3. Paste one script into your site’s header.
4. Share your Trust Center link.