1. Step-by-Step Platform Onboarding Guides (Open to All Customers)
Every DPDP Star customer can onboard their website or store using our guided connectors—no custom coding required. Choose your platform below to follow the step-by-step instructions.
Wix Website Onboarding (5 Guided Steps)
Complete visual walkthrough for Wix site owners with Light & Dark mode screenshots covering every screen from installation to live consent collection:
- Step 1 — Register & Verify OTP: Connect your Wix site and verify your work email with a 6-digit code.
- Step 2 — Automated Site Scan & ROPA: Our headless scanner inspects cookies, forms, and third-party scripts and populates your Record of Processing Activities (ROPA).
- Step 3 — Rule 3 Notice & Bhashini (22 Languages): Review itemised purposes and enable Eighth Schedule Indian languages.
- Step 4 — Rule 10 Parental Consent: Enable verifiable parental age check if your site serves children under 18.
- Step 5 — Publish Banner & Rights Portal: Go live with the DPDP Star banner and
/my-privacy-dashboard(90-day Grievance SLA under Rule 14(3)).
Custom Website & Web App Onboarding (3 Steps)
Add DPDP Star to any custom HTML, React, Next.js, Vue, PHP, Ruby, or Java website in under 5 minutes:
- Step 1 — Verify Domain Ownership: Add your domain in the DPDP Star Console (
Brand & Domains) and verify via DNS TXT (_dpdp-star-challenge) or HTML<meta name="dpdp-star-verify">. - Step 2 — Paste the 1-Line Embed Snippet: Load
<script src="https://star.dpdpa.support/embed/dpdp-star.js" data-site-key="pk_..." defer></script>in your site<head>. - Step 3 — Link Your Privacy Dashboard: Point your footer My Privacy Dashboard link to
https://star.dpdpa.support/rights/?fid=<YOUR_ORG_ID>for self-service withdrawal, erasure, and grievances.
WordPress & WooCommerce Plugin Onboarding (4 Steps)
Zero-code WordPress and WooCommerce integration with automatic site verification and order-erasure hooks:
- Step 1 — Install Plugin: Upload
dpdp-star-wordpress.zipinWP Admin → Plugins → Add Newand activate. - Step 2 — Auto-Verify Site: Click Connect to DPDP Star; our server verifies your site over HTTPS via
/?rest_route=/dpdp-star/v1/proveautomatically. - Step 3 — WooCommerce Hooks: Enable checkout consent receipts and DPO-approved customer erasure across WooCommerce orders.
- Step 4 — Shortcode Portal: Add
[dpdp_star_rights]to your Privacy Dashboard page.
Shopify Storefront & App Proxy Onboarding (4 Steps)
Native Shopify Theme App Extension and App Proxy integration with Shopify Customer Privacy API sync:
- Step 1 — Connect Store: Open DPDP Star in Shopify Admin and complete the 5-step merchant onboarding wizard.
- Step 2 — Enable Theme App Embed: In
Online Store → Themes → Customize → App embeds, toggle DPDP Star Consent Banner ON. - Step 3 — Customer Privacy Sync: Choices sync automatically with
window.Shopify.customerPrivacy.setTrackingConsent(). - Step 4 — Storefront Rights Portal: Customers manage consent and grievances directly at
/apps/dpdp-staron your store domain.
2. Request a Feature, Custom Platform Connector, or Enterprise Upgrade
Need a custom feature, a connector for your ERP/CRM (Zoho, Tally, Freshworks, HubSpot, Salesforce, SAP), or want to upgrade to an Enterprise Multi-Domain Plan (3 or more domains under one organization) to unlock the Developer API & AI Agent MCP Portal? Submit your request below.
3. 🔒 Unlock Enterprise Developer Portal (3+ Domains) or Internal Engineering Docs
Server-side access control enforced by DocsAccessServlet.java. Standard customers (1–2 domains) use the onboarding guides and feature request form above. Approved Enterprise Customers (organizations with 3 or more domains under one organization or an active ENTERPRISE plan) and CynorSense Internal Engineers can unlock restricted documentation below.
Unlock Enterprise API, OpenAPI 3.0 & AI Agent MCP
Unlocks /enterprise/ (Full REST API & India DPI), /mcp/ (AI Agents & Local MCP), and /api/ (OpenAPI 3.0 Spec). Your organization must be ACTIVE with 3 or more domains under one organization (or an active ENTERPRISE plan).
Unlock Internal Core Java Engineering Playbook (/internal/)
Strictly restricted to CynorSense core engineers (PLATFORM_ADMIN / PLATFORM_SUPPORT). Unlocks /internal/ (Step 0 ops/agent-preflight.sh Session Bootstrap, Precision LLM Contract, PostgreSQL RLS migrations, and security gates).
4. Documentation Access & Security Matrix
How docs.star.dpdpa.support protects internal engineering playbooks and Enterprise API specifications at the server edge.
| Documentation Path | Access Tier | Eligibility Requirement | What It Covers |
|---|---|---|---|
/ (Onboarding & Requests)/wix/ • /onboarding/ |
PUBLIC • ALL CUSTOMERS | Open to all visitors and Starter / Standard / Growth customers (1–2 domains). | 5-step Wix onboarding guide (29 screenshots), Website HTML/JS embed steps, WordPress & WooCommerce plugin setup, Shopify Theme App Extension setup, and the default Request a Feature / Custom Integration form. |
/enterprise/ (Developer API)/mcp/ (AI Agents & MCP)/api/ (OpenAPI 3.0) |
🔒 ENTERPRISE ONLY | Approved Enterprise Customer: Active organization with 3 or more domains under one organization in tenant_domains (or an active ENTERPRISE / OEM plan). Verified via DocsAccessServlet. |
Client API endpoints (/api/v1/client/*), Consent Validation, 90-Day Grievance SLA API, Notification Cursor Polling, Purge & Erasure Queue, DigiLocker (API Setu), Blockchain & CCA eSign, OpenAPI 3.0 spec, and Local MCP Bridge for Claude Code, Antigravity, Codex & Sarvam. |
/internal/ (Internal Dev SOP) |
🔒 INTERNAL STAFF ONLY | Strictly locked to CynorSense Internal Engineering (PLATFORM_ADMIN / PLATFORM_SUPPORT or HMAC-derived DOCS_INTERNAL_KEY). Even Enterprise customers are refused (403 Forbidden). |
Step 0 bash ops/agent-preflight.sh Fork/Clone Session Bootstrap, Precision Input/Output LLM Cost-Reduction Contract, Pure Java com.cynorsense.dpdpstar.* architecture, PostgreSQL FORCE ROW LEVEL SECURITY migrations, and VAPT security gates. |
Zero Third-Party Tracking on docs.star.dpdpa.support: Browsing the public onboarding guides sets zero cookies and loads zero third-party analytics or tracking scripts. An HttpOnly; Secure; SameSite=Strict session cookie (__Host-dps_docs) is set only when an Enterprise Customer or CynorSense Internal Engineer explicitly signs in to unlock protected documentation.
No Legal Advice & No Liability: DPDP Star is software, not legal advice. All onboarding guides, API specifications, and AI agent templates are provided strictly “AS IS” under the Terms of use and Privacy notice on star.dpdpa.support.