Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Kyvio is a SaaS funnel and website builder with built in marketing automation. Pages and funnels created with it embed tracking pixels and set marketing cookies, and the platform profiles leads and contacts to drive campaigns. Because it is US hosted and marketing focused, it carries higher consent and data transfer obligations under EU law.
Kyvio is a software as a service platform for building sales funnels and websites, with built in email and marketing automation. It lets users create landing pages, capture leads, and run campaigns from a single hosted tool. The service is operated from the United States, so data created through it is typically processed on US infrastructure.
Pages and funnels built with Kyvio embed tracking pixels and set marketing cookies that follow visitor behaviour, measure conversions, and feed automation. The platform processes lead and contact data such as names, email addresses, and engagement history, and can build behavioural profiles to target campaigns. This is squarely non essential, marketing oriented processing.
Under the ePrivacy Directive, marketing pixels and tracking cookies require prior consent before they load. Because Kyvio profiles contacts and runs automated marketing, operators must identify a clear legal basis, usually consent, and document profiling in their records of processing. Transparency about US hosting is also a GDPR obligation in the privacy notice.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
No Kyvio pixel or marketing cookie should fire before the visitor gives freely given, specific, and informed consent. Consent must be as easy to refuse as to accept, must not be bundled with other terms, and should be logged so it can be demonstrated. Email marketing also needs a valid opt in under ePrivacy and GDPR rules.
Because Kyvio is US hosted, using it from the EU involves transferring personal data to the United States. This transfer needs a valid mechanism, such as reliance on the EU US Data Privacy Framework where the provider is certified, or standard contractual clauses backed by a transfer impact assessment. Operators should confirm which safeguard applies before collecting EU data.
Run a DPIA, set up a consent banner that blocks all pixels and marketing cookies until consent, and confirm a valid US transfer mechanism. Use double opt in for email lists, document the legal basis and retention for each purpose, and keep a clear cookie and privacy policy that names the US transfer and the rights available to data subjects.
Websites using Kyvio must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is strongly recommended for Kyvio because it combines marketing tracking, lead profiling, and automation with transfers to the United States. Operators should assess the scale of profiling, the sensitivity of contact data, and the adequacy of the chosen US transfer mechanism before going live.
Sample consent text
We use necessary cookies to run this page. With your consent we also use marketing and analytics cookies and pixels to measure campaigns and personalise offers, which may involve transferring data to the United States. You can accept, reject, or manage these at any time.
Third-party domains contacted
kyvio.comkyvio.netconnect.facebook.netCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| kyvio_session | Strictly necessary | Session | Maintains the builder session and authenticated state while using the platform. |
| cookie_consent | Strictly necessary | 1 year | Stores the visitor cookie consent choices for pages built with Kyvio. |
| _kyvio_visitor | Analytics | 13 months | Set after consent to measure funnel traffic and conversions. |
| mkt_pixel_id | Advertising | 13 months | Set after consent to support marketing pixels, retargeting, and campaign attribution. |
| _fbp | Advertising | 3 months | Third party advertising cookie set when a Facebook or similar marketing pixel is embedded, after consent. |
Kyvio collects user analytics data — you legally need a consent banner. Try FlowConsent free.
Kyvio pages set a small number of strictly necessary cookies for the builder and session, plus marketing and analytics cookies and tracking pixels used for campaigns and conversion measurement. The marketing cookies are non essential and require consent.
Yes. Because Kyvio relies on marketing pixels, tracking cookies, and lead profiling, prior consent is required before those load. Only the strictly necessary builder and session cookies may be set without consent.
Marketing tracking, pixels, and automation profiling rely on consent under Article 6(1)(a) of the GDPR. Only strictly necessary functions of the page or builder can rest on contract or legitimate interest.
Yes. Kyvio is a US hosted SaaS platform, so using it from the EU transfers personal data to the United States. You need a valid transfer mechanism such as the EU US Data Privacy Framework where applicable or standard contractual clauses with a transfer impact assessment.
A DPIA is strongly recommended. The combination of marketing profiling, lead automation, and US data transfers represents higher risk processing that benefits from a documented impact assessment before launch.
Block all pixels and marketing cookies until consent, run a DPIA, confirm a valid US transfer safeguard, use double opt in for email, and document the legal basis, retention, and recipients for each purpose in your records of processing.
Other funnel and marketing builders include systeme.io, GetResponse, and ClickFunnels, among others. Some offer EU hosting options, so compare hosting location and transfer terms if data residency matters to you.
List every pixel and cookie Kyvio loads with its purpose and duration, state the US transfer and the safeguard you rely on, reflect any new marketing integrations, and refresh your consent banner so visitors can re consent to the current set.