Your first privacy program¶

This tutorial walks you through Dxtra end-to-end — from creating your account to having a complete, published privacy program. By the end you will have AI-generated privacy notices, a live Transparency Center, and a configured compliance framework.

What you need: An email address and 30 minutes.

Step 1: Create your account (~2 minutes)¶

Go to app.dxtra.ai and sign up with your email address. You can use email/password, a magic link, or sign in with GitHub. After verifying your email, you land on the Dxtra dashboard.

Step 2: Complete the setup questionnaire (~10 minutes)¶

Dxtra's AI engine needs context about your business to generate accurate compliance documents. The onboarding questionnaire covers:

• Organization details — Business name, industry, website
• Operating regions — Countries and states where you operate or serve customers
• Data collection — What personal data you collect and why
• Third-party services — Tools and vendors that process data on your behalf

The questionnaire takes approximately 10 minutes. Answer as accurately as you can — your responses directly shape every document Dxtra generates.

Step 3: Wait for AI generation (~60 minutes)¶

After you submit the questionnaire, Dxtra's AI engine generates your complete privacy program. This typically takes around 60 minutes and produces up to 21 document types including:

• Privacy notices (full, overview, and quick-look formats)
• Cookie policy
• Data Protection Impact Assessment (DPIA)
• Data processing agreements
• Retention policy
• Breach response plan
• Records of Processing Activities (Article 30 compliant)

Every document passes a five-point quality gate — word count verification, required section checks, completeness scoring, placeholder detection, and structural analysis.

You can monitor progress in Settings > Generation Center.

Step 4: Review your generated documents (~10 minutes)¶

Once generation completes, navigate to Notices, Policies & Agreements in the sidebar. You see your generated documents organized by type.

For each document:

1. Click to open and read the content
2. Check that the information matches your business context
3. Look for any sections that need refinement
4. Edit as needed — AI-generated content is a starting point, not a final draft

Step 5: Configure your processing purposes (~5 minutes)¶

Navigate to Purposes in the sidebar. Dxtra may have pre-populated some purposes based on your questionnaire answers. Review each one and confirm:

• The legal basis is correct (consent, contract, legitimate interest, etc.)
• The data categories match what you actually collect
• The recipients are accurate
• The retention period reflects your practices

Add any missing purposes. See Purposes for details on each field.

Step 6: Set up your Transparency Center (~5 minutes)¶

Your Transparency Center is a public-facing privacy portal where data subjects can view your policies, manage consent, and submit rights requests. To configure it:

1. Go to Settings > Organization > Branding and upload your logo and brand colors
2. Go to Settings > Organization > Domain Management and register your domain
3. Review the Transparency Center preview — it pulls content from your generated documents automatically

Your Transparency Center is accessible at transparencycenter.dxtra.ai by default, or you can embed it on your own domain as a web component. See Set up your Transparency Center for the full guide.

Step 7: Publish (~2 minutes)¶

Once you have reviewed your documents and configured your Transparency Center:

1. Approve your privacy notices and policies
2. Publish your Transparency Center
3. Add the Tag Manager script to your website for consent-aware analytics (optional)

Your privacy program is now live. Data subjects can visit your Transparency Center to view policies, manage consent preferences, and submit rights requests.

What you just built¶

In approximately 30 minutes, you now have:

• Privacy notices in multiple formats, tailored to your jurisdictions
• A live Transparency Center where data subjects manage their privacy preferences
• Processing activity records compliant with GDPR Article 30
• A Data Protection Impact Assessment covering your primary processing activities
• A breach response plan ready for incidents
• Consent management infrastructure for your website visitors

Next steps¶

• Handle your first data subject request — Walk through the DSRR workflow
• Add the Tag Manager — Privacy-first analytics with consent enforcement
• Connect an integration — Link Shopify, Stripe, HubSpot, or other platforms
• Invite your team — Add your DPO, developer, or auditor
• Configure the Data Subject Help Center — AI-powered self-service for data subjects