> How Ada processes chat transcripts and personal data under GDPR, AI Act implications, EU and Canadian hosting, consent requirements and compliance steps.
>
> Canonical: https://www.flowconsent.com/en/services/customer-support/ada

Customer support

# Ada

Preferences · [Official website](https://www.ada.cx)

Ada is a conversational AI platform that powers automated customer service chatbots and voice agents through a JavaScript widget and the Ada Engine.

[Block Ada until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=customer_support) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [Customer support](https://www.flowconsent.com/en/services/customer-support)

- Consent

  Preferences

- Prior consent

  Required

- Documented cookies

  3

- Third-party domains

  4

- Servers

  Canada (Ada Support Inc., Toronto), with regional pods on AWS in Canada, the United States and the EU

Overview

## What does Ada do?

## **What is Ada**

Ada (ada.cx) is a Canadian conversational AI platform that lets brands deploy AI driven customer service chatbots and voice agents. Ada combines proprietary AI with large language models from OpenAI, Anthropic and others, behind an embeddable chat widget. Used by retail, travel, fintech and SaaS companies to automate up to 70 percent of support interactions.

## **What cookies and data Ada collects**

The Ada widget writes a chatter\_token, an ada\_anonymous\_id and a conversation identifier in cookies and localStorage. It collects IP address, user agent, the chat transcript, page context, the authenticated identifier when you provide one, and any meta information passed through metaFields. Conversations are stored on Ada infrastructure and may be used (depending on contract) to improve the model.

## **GDPR, AI Act and ePrivacy implications**

Loading the Ada widget writes to the user device, so Article 5(3) of the ePrivacy Directive applies. Chat content is personal data under the GDPR, and AI driven automated decisions (eg automatic refund denial) fall under Art. 22 GDPR with a right to human intervention. The EU AI Act classifies many customer service AI uses as limited risk, with transparency obligations on the human or AI nature of the interlocutor.

## **Consent and legal basis**

On a marketing or content site, get prior consent before loading the Ada widget. Inside an authenticated product, contract performance covers the customer support flow because helping the user is part of the service. Always disclose that the interlocutor is an AI bot, the categories of data processed, and the option to be transferred to a human agent.

## **Data transfers and hosting**

Ada Support Inc. is headquartered in Toronto, Canada. Canada benefits from a partial adequacy decision under PIPEDA, so transfers to the default Canadian region need no additional safeguards for commercial data. Ada also operates pods in the US (covered by the EU US Data Privacy Framework) and an EU pod for residency sensitive customers; pick the region in the data processing addendum.

## **Practical compliance steps**

Pick the EU pod when residency matters. Disable model improvement on customer conversations in the contract. Configure clear AI bot disclosure with a name like Ada bot, the bypass to a human agent and a clear privacy notice. Mask credit card and ID numbers in transcripts. Set short retention for chat logs and audit who can access conversations.

Compliance

## Ada and the GDPR

Ada is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  Consent (Art. 6(1)(a) GDPR) for browsing visitors; contract performance (Art. 6(1)(b) GDPR) for authenticated customer support inside a paid product

- Risk level

  medium

- Applicable regulations

  GDPR, ePrivacy Directive, Commission adequacy decision for Canada (PIPEDA), EU US Data Privacy Framework, AI Act (when AI based decisions are made)

### Impact assessment (DPIA)

A DPIA is recommended when Ada handles health, financial or legal queries, when minors interact with the bot, when conversations are used to train downstream LLMs, or when sentiment scoring drives routing or escalation decisions.

### Sample text for your banner

> We use Ada to provide an AI assistant. Ada writes cookies on your device, processes your messages and IP address, and shares them with Ada Support Inc. in Canada (which benefits from a GDPR adequacy decision). We only load the chatbot if you accept.

Cookies and trackers

## What Ada sets and contacts

- Tracking method

  JavaScript chat widget loading an iframe with the Ada conversational AI engine

- Server location

  Canada (Ada Support Inc., Toronto), with regional pods on AWS in Canada, the United States and the EU

- Data transferred outside the EU

  Ada Support Inc. is headquartered in Toronto, Canada. Canada benefits from a Commission adequacy decision (PIPEDA), so transfers from the EU to Canadian Ada infrastructure do not require additional safeguards. EU and US pods are also offered; the US pod is covered by the EU US Data Privacy Framework.

### Cookies set (3)

| Name                  | Type         | Duration | Purpose                                                    |
| --------------------- | ------------ | -------- | ---------------------------------------------------------- |
| chatter\_token        | third\_party | 1 year   | Authentication token for the Ada chatter session           |
| ada\_anonymous\_id    | third\_party | 1 year   | Anonymous identifier used to recognise a returning chatter |
| ada\_conversation\_id | third\_party | session  | Identifier of the active conversation thread               |

### Third-party domains contacted (4)

- `ada.support`
- `static.ada.support`
- `sdk.ada.support`
- `ada.cx`

Questions

## Frequently asked questions about Ada

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### Which cookies does Ada set?

Ada writes a chatter\_token cookie, an ada\_anonymous\_id and a conversation identifier, plus localStorage entries for chat state. Some deployments also write a session cookie scoped to the customer subdomain.

### Is consent required to embed Ada?

On a public site, yes. The widget writes to the user device, processes IP addresses and chat messages, and Article 5(3) ePrivacy applies. Inside an authenticated product, contract performance covers the helpdesk feature.

### Which GDPR legal basis applies?

Consent for embeds on public pages. Contract performance for authenticated customer support. Sensitive content (health, finance) requires Art. 9 GDPR coverage. AI Act transparency obligations always apply.

### Are there transfers to the United States?

By default to Canada (covered by adequacy under PIPEDA). Optionally to the US (EU US Data Privacy Framework). An EU pod is available for customers with strict residency requirements.

### Do I need a DPIA?

Recommended when the bot handles health, financial or legal queries, when minors interact, when transcripts train downstream LLMs, or when AI decisions like refund denial happen without human review.

### How do I implement Ada compliantly?

Pick the EU pod, disable model training on customer data, disclose the AI nature of the interlocutor, offer a path to a human agent, mask credit card and ID numbers, keep retention short, and run regular bias and accuracy checks.

### Are there alternatives to Ada?

European AI customer service options include Dialpad Ai (US), Crisp (France), Iadvize (France, now Iadvize AI), Ultimate.ai (Germany, acquired by Zendesk), Kustomer (US, Meta), Inbenta (Spain), and self hosted options like Rasa.

### How do I update my cookie policy for Ada?

List the chatter\_token cookie, the ada\_anonymous\_id and the conversation identifier with purpose and duration, plus the localStorage entries. State Ada is a sub processor in Canada or in the chosen region, and mention the AI Act transparency notice.

Same category

## More services: Customer support

[See the whole category](https://www.flowconsent.com/en/services/customer-support)

### [ChatBot](https://www.flowconsent.com/en/services/customer-support/chatbot)

[ChatBot is an AI-powered chatbot platform that enables businesses to automate customer conversations across websites, messaging apps, and social channels. It provides natural language processing, conversation flow builders, and backend integration to handle inquiries, qualify leads, and provide support. ChatBot reduces response times and costs while maintaining high-quality conversational experiences that scale with your business needs.](https://www.flowconsent.com/en/services/customer-support/chatbot)

[Preferences](https://www.flowconsent.com/en/services/customer-support/chatbot)

·

### [Chatwith](https://www.flowconsent.com/en/services/customer-support/chatwith-io)

[ChatWith.io is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. ChatWith.io integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, ChatWith.io helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/chatwith-io)

[Preferences](https://www.flowconsent.com/en/services/customer-support/chatwith-io)

·

### [Skedify](https://www.flowconsent.com/en/services/customer-support/skedify)

[Skedify is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Skedify integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Skedify helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/skedify)

[Preferences](https://www.flowconsent.com/en/services/customer-support/skedify)

·

### [LimeCall](https://www.flowconsent.com/en/services/customer-support/limecall)

[Limecall is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Limecall integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Limecall helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/limecall)

[Preferences](https://www.flowconsent.com/en/services/customer-support/limecall)

·

### [LiveZilla](https://www.flowconsent.com/en/services/customer-support/livezilla)

[LiveZilla is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. LiveZilla supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, LiveZilla ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/customer-support/livezilla)

[Preferences](https://www.flowconsent.com/en/services/customer-support/livezilla)

·

### [Canny](https://www.flowconsent.com/en/services/customer-support/canny)

[Canny is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Canny supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Canny ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/customer-support/canny)

[Preferences](https://www.flowconsent.com/en/services/customer-support/canny)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)
