Botpress
Botpress is an AI chatbot and conversational agent platform that embeds a chat widget, processes conversation content and may set cookies or identifiers.
What does Botpress do?
What Botpress is
Botpress is a platform for building AI chatbots and conversational agents that businesses embed on their websites as a chat widget. It interprets user messages, generates replies and can connect to large language models to power natural conversation. Botpress Cloud is operated from the United States and processes the conversation content that users type.
What data and cookies it collects
Botpress processes the full content of chat conversations, which can include names, contact details and anything else a user volunteers. The widget may set cookies or identifiers to maintain the session and recognise returning users. Because users can disclose health, financial or other sensitive details in free text, conversation logs can contain special category data.
GDPR and ePrivacy implications
Non essential cookies set by the chat widget require prior consent under the ePrivacy Directive. Under the GDPR you need a lawful basis and clear information for processing conversation data, and you must account for any large language model subprocessor. As the website operator you are the controller and Botpress acts as your processor under a data processing agreement.
Consent requirements
Any non essential cookies or identifiers must load only after freely given, specific, informed and unambiguous consent. The chat function a user actively starts can rely on consent or legitimate interest, but you should warn users not to share sensitive data. Where the assistant is likely to handle special category data, explicit consent or another Article 9 condition is required.
Data transfers and hosting
Botpress Cloud is hosted in the United States and large language model subprocessors may also be located outside the European Economic Area. These transfers must be covered by Standard Contractual Clauses or the EU US Data Privacy Framework. Review the data processing agreement, map the subprocessors and document the transfer mechanism in your records of processing.
Practical compliance steps
Sign the data processing agreement, review the subprocessor list and confirm transfer safeguards. Gate non essential cookies behind your consent banner, add a notice in the chat warning against sharing sensitive data and set retention limits for conversation logs. Complete a data protection impact assessment and describe the AI processing in your privacy notice.
Botpress and the GDPR
Botpress is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent for non essential cookies under ePrivacy; consent or legitimate interest for conversation processing, with explicit consent where sensitive data is involved
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive
Impact assessment (DPIA)
Because Botpress processes conversation content that can be personal or sensitive, may use large language models and transfers data to the United States, a data protection impact assessment is strongly recommended. Assess what users might disclose in chat, the role of AI subprocessors and the safeguards covering the transfer.
Sample text for your banner
We use Botpress to power our chat assistant, which processes your messages and may set cookies. Non essential cookies load only after you accept, and you should avoid sharing sensitive information in the chat. You can change your choice at any time in cookie settings.
What Botpress sets and contacts
- Tracking method
- Embedded chat widget that processes conversation content and may set cookies or identifiers, with optional large language model processing
- Server location
- United States and cloud regions
- Data transferred outside the EU
- Botpress Cloud is operated from the United States and personal data within conversations may be processed there. Transfers rely on Standard Contractual Clauses and, where applicable, the EU US Data Privacy Framework, and large language model subprocessors may also be involved.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| bp_session | Functional | Session | Maintains the chat session and conversation continuity. |
| bp_user_id | Functional | 1 year | Recognises returning users to restore prior conversations. |
| bp_analytics | Analytics | 1 year | Measures chat usage and assistant performance. |
Third-party domains contacted (4)
botpress.comcdn.botpress.cloudwebchat.botpress.cloudmessaging.botpress.cloud
Frequently asked questions about Botpress
Can't find your question? Write to us, we answer fast.
What cookies does Botpress set?
Botpress may set a functional cookie that keeps the chat session running, an identifier that recognises returning users to restore conversations and an analytics cookie that measures chat usage. The non essential cookies require consent before they load.
Is consent required for Botpress?
Yes for non essential cookies and identifiers. Under the ePrivacy Directive these must load only after the visitor opts in through your consent banner, so the chat widget should not place them before consent is given.
What is the legal basis for using Botpress?
Non essential cookies rely on consent. Processing conversation data can rely on consent or legitimate interest, but where the assistant is likely to handle sensitive details you need explicit consent or another Article 9 condition. Document each basis in your records.
Does Botpress transfer data to the United States?
Yes. Botpress Cloud is hosted in the United States and large language model subprocessors may also be outside the European Economic Area. Ensure transfers are covered by Standard Contractual Clauses or the EU US Data Privacy Framework and map every subprocessor.
Do I need a DPIA for Botpress?
A data protection impact assessment is strongly recommended because conversation content can be personal or sensitive, the platform may use AI models and data is transferred internationally. Assess what users might disclose and the role of AI subprocessors before deployment.
How do I implement Botpress compliantly?
Sign the data processing agreement, review the subprocessor list and confirm transfer safeguards. Gate non essential cookies behind your consent banner, warn users in the chat against sharing sensitive data, set retention limits for logs and describe the AI processing in your privacy notice.
Are there alternatives to Botpress?
Yes. Tools such as Rasa, which can be self hosted, and other European chatbot providers offer similar features with more local hosting options. Whichever you choose, the same consent, transfer and conversation handling duties apply.
How do I update my cookie policy for Botpress?
List each Botpress cookie with its name, purpose and duration, state that conversation data is processed in the United States and name the transfer safeguard. Mention any AI subprocessors and keep the policy aligned with what your consent banner controls.
Store Vantage
Store Vantage is a comprehensive e-commerce platform that provides businesses with all the tools needed to build, manage, and grow an online store. From product catalog management and secure payment processing to inventory tracking and order fulfillment, Store Vantage delivers a complete commerce solution. It features responsive storefront themes, SEO-optimized product pages, and powerful marketing tools to help merchants increase visibility and drive sales across channels.
Upvoty
Upvoty is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Upvoty enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Upvoty empowers marketing teams to achieve measurable growth.
%22%3E%0A%20%20%20%20%20%20%20%20%3Cpath%20fill-rule%3D%22evenodd%22%20clip-rule%3D%22evenodd%22%0A%20%20%20%20%20%20%20%20%20%20%20%20d%3D%22M-0.0800781%20-0.0800781C10.5866%20-0.0800781%2021.2532%20-0.0800781%2031.9199%20-0.0800781C31.9199%2010.5866%2031.9199%2021.2532%2031.9199%2031.9199C21.2532%2031.9199%2010.5866%2031.9199%20-0.0800781%2031.9199C-0.0800781%2021.2532%20-0.0800781%2010.5866%20-0.0800781%20-0.0800781Z%22%0A%20%20%20%20%20%20%20%20%20%20%20%20fill%3D%22%23FEFEFE%22%20%2F%3E%0A%20%20%20%20%20%20%20%20%3Cpath%20fill-rule%3D%22evenodd%22%20clip-rule%3D%22evenodd%22%0A%20%20%20%20%20%20%20%20%20%20%20%20d%3D%22M14.0002%203.43958C19.0073%202.94569%2023.0338%204.65236%2026.0802%208.55958C28.8524%2013.2332%2028.9591%2017.9799%2026.4002%2022.7996C24.5446%2025.7181%2021.9046%2027.5049%2018.4802%2028.1596C12.3097%2029.1673%207.74971%2026.954%204.80024%2021.5196C2.68504%2016.293%203.37838%2011.493%206.88024%207.11958C8.8767%205.14812%2011.25%203.92145%2014.0002%203.43958Z%22%0A%20%20%20%20%20%20%20%20%20%20%20%20fill%3D%22%230F0F0F%22%20%2F%3E%0A%20%20%20%20%20%20%20%20%3Cpath%20fill-rule%3D%22evenodd%22%20clip-rule%3D%22evenodd%22%0A%20%20%20%20%20%20%20%20%20%20%20%20d%3D%22M14.7999%209.19964C18.7703%209.03578%2021.3035%2010.8491%2022.3999%2014.6396C22.497%2019.1296%2020.3103%2021.6363%2015.8399%2022.1596C14.8629%2022.1353%2013.9296%2021.922%2013.0399%2021.5196C11.9339%2021.811%2010.8139%2021.9444%209.67986%2021.9196C9.50799%2021.8014%209.40132%2021.6414%209.35986%2021.4396C9.65116%2020.618%209.91782%2019.7913%2010.1599%2018.9596C8.85914%2015.8386%209.39247%2013.0919%2011.7599%2010.7196C12.7004%2010.036%2013.7137%209.52935%2014.7999%209.19964Z%22%0A%20%20%20%20%20%20%20%20%20%20%20%20fill%3D%22%23FCFCFC%22%20%2F%3E%0A%20%20%20%20%3C%2Fg%3E%0A%20%20%20%20%3Cdefs%3E%0A%20%20%20%20%20%20%20%20%3CclipPath%20id%3D%22clip0_5276_2311%22%3E%0A%20%20%20%20%20%20%20%20%20%20%20%20%3Crect%20width%3D%2232%22%20height%3D%2232%22%20fill%3D%22white%22%20%2F%3E%0A%20%20%20%20%20%20%20%20%3C%2FclipPath%3E%0A%20%20%20%20%3C%2Fdefs%3E%0A%3C%2Fsvg%3E)
eKonsilio
eKonsilio is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. eKonsilio integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, eKonsilio helps organizations maintain robust websites that meet user expectations and technical requirements.
Allbookable
Allbookable is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Allbookable supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Allbookable ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Ruttl
Ruttl is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Ruttl integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Ruttl helps organizations maintain robust websites that meet user expectations and technical requirements.
TerMed
TerMed is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. TerMed integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, TerMed helps organizations maintain robust websites that meet user expectations and technical requirements.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.