This piece sets out exactly what is included, what isn't, and — the part most vendors skip — whether a free banner is actually enough for your situation. For a lot of small Indian websites, it genuinely is.
What's included
| Free plan | |
|---|---|
| Price | ₹0, permanently. No card |
| Domains | 1 |
| Cookie consents | 1,000 per month |
| Form consents | 50 per month |
| Cookie and tracker scanning | Basic |
| Consent banner | DPDP, English and Hindi |
| Consent records | Timestamped, with purpose breakdown |
| Data Principal rights requests | Manual handling — unmetered |
| WordPress plugin | Included |
| Analytics | Basic — acceptance rates, consent counts |
| Onboarding | 1 session |
| Data hosting | India |
On rights requests specifically. They are not capped and not charged, on the free plan or any plan. Responding to a Data Principal is an unconditional statutory obligation with a response deadline — metering it would put a price on the point at which you start breaching the law. The free plan gives you manual handling; paid plans automate the workflow and add SLA tracking. The difference is automation depth, never permission.
What's not included
Being straightforward about this, because a free plan that hides its limits wastes your time.
- One domain only. Additional domains need Pro.
- English and Hindi only. DPDP notices must be available in English or any of the 22 Eighth Schedule languages at the individual's option — full language coverage is on Pro.
- Basic scanning, not scheduled. You trigger scans; Pro runs them automatically and alerts on new trackers.
- No breach module. The CERT-In and DPDP breach clock tracking is on Pro.
- No automated DSR workflows. Manual handling on free.
- No parental consent workflow. Section 9 verifiable parental consent is on Pro.
- No Data Discovery or ROPA. Database scanning and records of processing are Enterprise.
- No uptime SLA. We don't publish one on any plan — we run from a single Indian data centre and won't promise a figure we can't stand behind contractually.
Is a free banner enough for you?
Honest answer: it depends on three things. Volume — 1,000 cookie consents a month suits roughly a few thousand monthly visitors, depending on your return-visitor ratio. Scope — if you run one website, collect leads through a form or two, and use analytics plus maybe one advertising pixel, the free plan covers your consent obligation properly. Obligation breadth — cookie consent is one obligation out of roughly a dozen. DPDP also requires Rule 3-compliant notice content, Data Principal rights fulfilment, retention and erasure logic, breach intimation, a published grievance contact and records.
Where the free plan is genuinely the right answer: a single marketing site or blog; an early-stage startup with modest traffic; a business that wants consent capture live now and will scale later; or anyone who wants to run a real scan and see what's actually firing on their site before committing budget. → Run that check in 10 minutes
Where it isn't: multiple domains or storefronts; a database that needs discovery and a ROPA; regulated-sector retention conflicts; a user base including under-18s; or anyone above a Third Schedule threshold with Rule 8 erasure clocks to run.
How to get a DPDP banner live in ten minutes
- Register at app.consiva.ai. No card. Verify your domain.
- Let the first scan run. It returns every cookie, pixel, tag and third-party script it finds, with suggested purpose categories.
- Review and set purposes. Move anything miscategorised. Keep "strictly necessary" genuinely minimal.
- Configure the banner. Layout, colours, English and Hindi. Keep Accept and Reject at equal visual weight.
- Deploy. One script tag before
</head>, or install the Consiva Consent Banner plugin for WordPress and paste your Script Key. - Verify properly. Open a clean incognito window with DevTools' Network tab open before loading the page. Confirm nothing third-party fires until you choose. → This is the step people skip, and it's the one that matters
Run a real scan on your own site — free
Most people are surprised by their own tracker inventory. One domain, 1,000 cookie consents a month, no credit card.
Start Free on Consiva.ai — No Credit Card →Why a free tier exists at all
Two honest reasons. The substantive DPDP obligations commence 13 May 2027. Between now and then, the most useful thing a business can do is stop the growth of the non-compliant pile — get consent capture live on new collection, so you're not re-consenting an even larger database later. A paywall on that is a bad outcome for everyone.
And we would rather you evaluated the product on your own site than on a demo. Run a scan. See what it finds. Most people are surprised by their own tracker inventory.
Frequently Asked Questions
Yes. Consiva's free plan covers one domain with 1,000 cookie consents and 50 form consents a month, permanently, no credit card and no expiry, including cookie scanning, consent records and the WordPress plugin.
No. It is a permanent free tier, not a time-limited trial. There is no card on file and nothing to cancel.
No. Rights request intake and handling are unmetered on every plan including free. The free plan provides manual handling; paid plans automate the workflow and track SLAs.
Install the Consiva Consent Banner plugin, paste the Script Key from your dashboard, and configure the banner in Consiva. No template editing required.
It handles the cookie consent layer. DPDP also requires notice content per Rule 3, Data Principal rights fulfilment, retention and erasure logic, breach intimation, a published grievance contact and records — so a banner is one obligation of roughly a dozen.
In India. Note that some supporting services in our own delivery chain may process limited data elsewhere; we publish the full subprocessor list rather than making a blanket claim.
Start Free — No Credit Card
One domain, 1,000 cookie consents a month, unmetered rights requests, no expiry.