FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Customer support

Coco AI

MarketingOfficial website

Coco AI is a conversational AI platform that embeds a chat widget on websites to answer visitor questions using large language models, storing conversation transcripts and visitor identifiers.

Block Coco AI until consentScan my site
Overview

What does Coco AI do?

What is Coco AI

Coco AI is a conversational AI platform that embeds an intelligent chat widget on websites. It answers visitor questions using large language models, integrates with knowledge bases, and can hand over to a human agent. The widget is delivered as a JavaScript SDK that loads from Coco AI servers, stores conversation history, and reports analytics back to the dashboard.

Cookies and data collected

Coco AI sets first party cookies such as coco_visitor (twelve months) and coco_session (browser session) to identify chat participants across visits. The full conversation transcript, page context, and metadata (URL, user agent, IP) are sent to Coco AI servers and may be processed by foundation model APIs (OpenAI, Anthropic, or self hosted). Visitor data inside conversations is considered personal data under the GDPR.

Legal basis under the GDPR

Consent is required for the chat widget cookies and the LLM processing of conversations because users do not strictly need an AI assistant to use the website. Where conversations lead to a contractual interaction (support, sales), Art. 6(1)(b) may also apply to specific data flows. The EU AI Act imposes transparency obligations: visitors must be told they are interacting with an AI.

International data transfers

Coco AI is typically hosted in the US, and conversations may be forwarded to OpenAI or Anthropic APIs (mostly US based). Transfers rely on Standard Contractual Clauses and the EU, US Data Privacy Framework where the recipient is certified. Some Coco AI plans offer an EU only mode with self hosted or EU based models.

Practical compliance steps

Display a clear AI disclosure on first message (EU AI Act Art. 52), gate the widget behind consent, set a short retention period for transcripts (typically thirty to ninety days), avoid sending special category data to the model, sign a DPA with Coco AI that lists every model sub processor, and configure prompt level redaction for emails and phone numbers.

Privacy friendly alternatives

European alternatives include Mistral powered solutions (Lyzr, Toolkit), self hosted Ollama plus open source UI, and traditional knowledge base chatbots without LLMs (Zendesk Answer Bot EU). Each trades off capability against data residency.

Compliance

Coco AI and the GDPR

Coco AI is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent for the chat widget and conversation storage (GDPR Art. 6(1)(a) and ePrivacy Art. 5(3))
Risk level
high
Applicable regulations
GDPR, ePrivacy Directive, EU AI Act (limited risk transparency obligations)

Impact assessment (DPIA)

A DPIA is required because conversations may contain personal or sensitive data, sub processors include foundation model providers, and automated decision making may apply when the AI suggests products or services.

Sample text for your banner

We use Coco AI to provide automated chat assistance. With your consent, Coco AI will store conversation history and may share it with our AI sub processors to generate responses.
Cookies and trackers

What Coco AI sets and contacts

Tracking method
JavaScript chat widget with first party cookies, conversation logs and LLM based response generation
Server location
United States with optional EU region
Cookieless mode available
Yes
Data transferred outside the EU
Coco AI is operated from the United States and may use OpenAI or Anthropic models. EU data transfers rely on Standard Contractual Clauses and the EU, US Data Privacy Framework where applicable.

Cookies set (3)

NameTypeDurationPurpose
coco_visitorfirst_party12 monthsPseudonymous visitor identifier for chat continuity
coco_sessionfirst_partySessionSession identifier for the active chat
coco_convfirst_party30 daysStores the current conversation reference for reconnection

Third-party domains contacted (3)

  • coco.ai
  • widget.coco.ai
  • api.coco.ai
Questions

Frequently asked questions about Coco AI

Can't find your question? Write to us, we answer fast.

What cookies does Coco AI set?

First party cookies coco_visitor (twelve months), coco_session (session), and coco_conv (thirty days) for chat continuity and reconnection.

Is consent required for Coco AI?

Yes. The chat widget cookies and LLM processing are not strictly necessary, so consent is required under Art. 5(3) ePrivacy and Art. 6(1)(a) GDPR.

What is the legal basis for Coco AI?

Consent for chat widget and LLM processing. Contract may apply for support related processing. Display an AI disclosure under EU AI Act Art. 52.

Does Coco AI transfer data outside the EU?

Yes. Coco AI is typically US hosted and may forward conversations to OpenAI or Anthropic. Use SCCs and the EU, US Data Privacy Framework where applicable.

Do I need a DPIA for Coco AI?

Yes. AI processing of free text conversations triggers Art. 35 GDPR for risk to rights and freedoms.

How do I implement Coco AI compliantly?

Block the widget until consent, display AI disclosure, set short retention, sign a DPA listing model providers, redact PII at prompt level, and use EU mode if available.

Are there alternatives?

Mistral powered chatbots (Lyzr, Toolkit), self hosted Ollama plus open UI, or non LLM knowledge base bots (Zendesk Answer Bot EU).

How do I update my cookie policy?

List the coco_ cookies, the coco.ai domains, the model sub processors and their countries, and link to the Coco AI privacy policy.

Same category

More services: Customer support

See the whole category

Aimy

Aimy is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Aimy integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Aimy helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

BespokeChat

BespokeChat is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. BespokeChat integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, BespokeChat helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Leadster

Leadster is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Leadster supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Leadster ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Quicktext

Quicktext is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Quicktext integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Quicktext helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Qpien

Qpien is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Qpien integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Qpien helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

8x8

8x8 is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. 8x8 supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, 8x8 ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site