> How to deploy the botBrains AI chatbot in line with the GDPR: the cookies and browser storage it uses, consent requirements and conversation data. > > Canonical: https://www.flowconsent.com/en/services/customer-support/botbrains Customer support # botBrains Preferences · [Official website](https://www.botbrains.io) botBrains is an AI chatbot platform that adds an automated conversation widget to websites. It loads from third party servers and can store conversation data and identifiers in the browser, which brings it within the scope of the GDPR and the ePrivacy consent rules. [Block botBrains until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=customer_support) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Customer support](https://www.flowconsent.com/en/services/customer-support) - Consent Preferences - Prior consent Required - Documented cookies 3 - Third-party domains 2 - Servers European Union Overview ## What does botBrains do? ## What botBrains is botBrains is an artificial intelligence chatbot platform that lets organisations embed an automated assistant on their website to answer questions and capture enquiries. The widget loads from the vendor infrastructure and exchanges messages in real time, so it processes whatever visitors type along with technical data about their device and session. ## What data and cookies botBrains collects To keep a conversation coherent, botBrains stores a session identifier in a cookie or in browser local storage and may retain the message history linked to that identifier. Depending on the configuration it can also record the page a visitor came from, their language, and any contact details they share, all of which can constitute personal data under the GDPR. ## GDPR and ePrivacy implications Loading the widget and writing identifiers to the device fall under Article 5(3) of the ePrivacy Directive. Where the assistant only stores what is strictly necessary to answer a request the visitor started, that storage can be exempt, but any analytics or persistent profiling requires consent. As controller, the website operator must also inform users that an automated system processes their messages. ## Consent requirements If botBrains loads automatically on page open and sets non essential cookies, it should be gated behind consent. A common compliant pattern is to load only a lightweight launcher by default and initialise the full widget once the visitor opens the chat or accepts the relevant cookie category. Make the privacy notice reachable from the chat window. ## Practical compliance steps Sign a data processing agreement with the vendor, confirm where conversation data is stored, and set a retention period for transcripts. List the botBrains cookies in your cookie policy, explain that an AI assistant handles the conversation, and offer a way to reach a human. Review the configuration whenever the chatbot gains new tracking features. Compliance ## botBrains and the GDPR botBrains is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent under Article 6(1)(a) GDPR for non essential storage and legitimate interest under Article 6(1)(f) for the core chat function - Risk level medium - Applicable regulations GDPR, ePrivacy Directive ### Impact assessment (DPIA) A full DPIA is usually not required for a basic support chatbot, but it becomes advisable if the assistant processes sensitive topics, profiles users, or handles large volumes. Document the data flows and retention in any case. ### Sample text for your banner > We use botBrains to answer your questions through an automated assistant. The chat only stores non essential information if you accept it. Cookies and trackers ## What botBrains sets and contacts - Tracking method JavaScript chat widget using cookies and browser local storage - Server location European Union ### Cookies set (3) | Name | Type | Duration | Purpose | | ------------- | ---------- | -------- | ---------------------------------------------------------------------------------------- | | bb\_session | Functional | Session | Stores a conversation session identifier so the chatbot can keep the dialogue consistent | | bb\_visitor | Functional | 6 months | Recognises a returning visitor to restore an earlier conversation | | bb\_analytics | Analytics | 1 year | Measures how visitors interact with the chatbot widget | ### Third-party domains contacted (2) - `botbrains.io` - `app.botbrains.io` Questions ## Frequently asked questions about botBrains Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does botBrains set? botBrains stores a session identifier in a cookie or local storage to keep the conversation consistent, and depending on settings may add analytics cookies. The session storage supports the chat itself, while any analytics storage is non essential. ### Is consent required for botBrains? If the widget loads automatically and sets non essential cookies, you need prior consent. If it only stores what is strictly necessary once a visitor opens the chat, that part can rely on the ePrivacy exemption, but a notice is still required. ### What is the legal basis for botBrains? The core chat function can rely on legitimate interest or, where it supports a contract, on Article 6(1)(b). Analytics and profiling cookies rely on consent under Article 6(1)(a) of the GDPR and Article 5(3) ePrivacy. ### Does botBrains transfer data outside the EU? In its standard configuration botBrains conversation data is processed within the European Union. If you enable integrations with non EU providers, check whether they introduce a transfer and document the safeguard. ### Is a DPIA needed for botBrains? A full DPIA is usually not required for a basic support chatbot, but it becomes advisable if the assistant processes sensitive topics, profiles users, or handles large volumes. Document the data flows and retention in any case. ### How do I implement botBrains compliantly? Load only a launcher by default, initialise the full widget after the visitor opens the chat or grants consent, sign a data processing agreement, and set a transcript retention period. List its cookies and disclose the automated processing in your privacy notice. ### Are there alternatives to botBrains? Other chat and chatbot tools hosted in the EU offer similar features. Whatever you choose, the consent and transparency duties are the same once the widget stores non essential data or profiles visitors. ### How do I update my cookie policy for botBrains? Add the botBrains session and analytics cookies to your cookie policy with their purpose and duration, mention the automated conversation processing, and update the entry whenever the widget changes how it stores data. Same category ## More services: Customer support [See the whole category](https://www.flowconsent.com/en/services/customer-support) ### [Kustomer](https://www.flowconsent.com/en/services/customer-support/kustomer) [Kustomer is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Kustomer integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Kustomer helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/kustomer) [Preferences](https://www.flowconsent.com/en/services/customer-support/kustomer) · ### [SolutionReach](https://www.flowconsent.com/en/services/customer-support/solutionreach) [SolutionReach is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. SolutionReach enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, SolutionReach empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/customer-support/solutionreach) [Marketing](https://www.flowconsent.com/en/services/customer-support/solutionreach) · ### [Newo](https://www.flowconsent.com/en/services/customer-support/newo) [Newo is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Newo integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Newo makes advanced AI accessible to all teams.](https://www.flowconsent.com/en/services/customer-support/newo) [Preferences](https://www.flowconsent.com/en/services/customer-support/newo) · ### [Userpilot](https://www.flowconsent.com/en/services/customer-support/userpilot) [Userpilot is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Userpilot integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Userpilot helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/userpilot) [Analytics](https://www.flowconsent.com/en/services/customer-support/userpilot) · ### [Vergic](https://www.flowconsent.com/en/services/customer-support/vergic) [Vergic is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Vergic supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Vergic ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/customer-support/vergic) [Preferences](https://www.flowconsent.com/en/services/customer-support/vergic) · ### [KeyReply](https://www.flowconsent.com/en/services/customer-support/keyreply) [KeyReply is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. KeyReply supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, KeyReply ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/customer-support/keyreply) [Preferences](https://www.flowconsent.com/en/services/customer-support/keyreply) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)