> Help Scout and GDPR: Beacon widget cookies, customer data processing, email tracking, US data transfers, the DPA and practical compliance steps. > > Canonical: https://www.flowconsent.com/en/services/customer-support/help-scout Customer support # Help Scout Preferences · [Official website](https://www.helpscout.com) Help Scout is a cloud based customer support platform providing shared inboxes, live chat (Beacon), knowledge base, and customer management features. Developed by Help Scout PBC (US), the Beacon widget sets cookies on visitor browsers and the platform stores conversation data, customer profiles, and email interactions on US infrastructure. [Block Help Scout until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=customer_support) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Customer support](https://www.flowconsent.com/en/services/customer-support) - Consent Preferences - Prior consent Required - Documented cookies 4 - Third-party domains 4 - Servers US (AWS hosted) Overview ## What does Help Scout do? ## **What Is Help Scout?** Help Scout is a cloud based customer support platform developed by Help Scout PBC, headquartered in Boston, Massachusetts. It provides shared email inboxes, a live chat widget (Beacon), an embeddable knowledge base, customer profiles, automated workflows, and reporting dashboards. Help Scout is designed for support teams and is widely used by SaaS companies, e commerce businesses, and service organisations. The Beacon widget can be embedded on any website to provide live chat, knowledge base search, and contact forms. ## **Cookies and Data Collected** The Help Scout Beacon widget sets cookies for session management, visitor identification, and chat history persistence. Cookies include session tokens, visitor identifiers for recognising returning users, and chat state cookies. Help Scout collects customer email addresses, conversation content, file attachments, customer profile metadata, and browsing context (page URL, browser type) when Beacon is active. Email conversations may include open tracking pixels. The Help Scout dashboard uses authentication and analytics cookies for team members. ## **GDPR and ePrivacy Implications** Help Scout processes customer support data that can be sensitive, including complaints, personal circumstances, health related queries, and financial details shared in support conversations. Help Scout PBC acts as a data processor and provides a DPA with SCCs. The company is certified under the EU US Data Privacy Framework and holds SOC 2 Type II certification. The Beacon widget sets cookies on visitor browsers, triggering ePrivacy consent requirements. Email open tracking pixels also constitute personal data processing. Organisations must ensure their support workflows comply with GDPR principles including data minimisation, purpose limitation, and storage limitation. ## **Consent and Legal Basis Requirements** Customer support operations typically rely on legitimate interest (Art. 6(1)(f)) or contract performance (Art. 6(1)(b)) when the support request relates to an existing contractual relationship. The Beacon widget cookies require consent under the ePrivacy Directive before being set on visitor browsers. Organisations should implement a cookie consent banner that blocks Beacon loading until consent is given, or configure Beacon to load without cookies initially. Email open tracking should be disclosed in the privacy policy. ## **International Data Transfers** Help Scout is US based with data hosted on AWS in the United States. No EU data residency option is available. Transfers are covered by SCCs in the DPA and Help Scout's EU US Data Privacy Framework certification. All conversation data, customer profiles, and Beacon interaction data is stored on US infrastructure. Organisations should document these transfers in their Records of Processing Activities. ## **Practical Compliance Steps** Execute Help Scout's DPA. Implement cookie consent for the Beacon widget on your website. Configure Beacon to respect consent settings. Establish data retention policies for closed conversations and delete old support tickets containing personal data. Disable email open tracking if not essential. Train support agents on data minimisation. Review third party integrations connected to Help Scout. Include Help Scout in your DPIA if processing sensitive support queries. Update your privacy policy to describe Help Scout's role and the US data transfers involved. Compliance ## Help Scout and the GDPR Help Scout is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Legitimate interest for customer support operations (Art. 6(1)(f)), consent required for Beacon widget cookies on public websites (Art. 6(1)(a)) - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, UK GDPR, CCPA/CPRA, SOC 2 Type II ### Impact assessment (DPIA) A DPIA is recommended when Help Scout processes customer support data at scale. Key areas: customer conversation content (potentially sensitive complaints, medical or financial queries), Beacon widget cookie tracking on website visitors, email open tracking pixels, customer profile data aggregation, third party integrations (Slack, Salesforce, Zapier), and US hosted infrastructure. ### Sample text for your banner > This site uses Help Scout Beacon for live chat and support. The widget sets cookies to maintain your chat session and identify returning visitors. Data is processed on Help Scout servers in the United States. By using the chat widget, you consent to this data processing. You can manage cookies via our cookie settings. Cookies and trackers ## What Help Scout sets and contacts - Tracking method Beacon JavaScript widget with cookies, email tracking pixels, conversation metadata, customer profile storage - Server location US (AWS hosted) - Data transferred outside the EU Help Scout PBC is headquartered in Boston, US. Data hosted on AWS in the US. No EU data residency available. DPA with SCCs provided. Help Scout is certified under the EU US Data Privacy Framework. ### Cookies set (4) | Name | Type | Duration | Purpose | | ----------------- | -------------- | -------- | ------------------------------------------------------------------------------------------ | | hs-beacon-session | functionality | Session | Maintains the live chat session state in the Help Scout Beacon widget. | | hs-beacon-visitor | functionality | 1 year | Identifies returning visitors to maintain chat history and customer context across visits. | | hs-beacon-state | functionality | Session | Tracks whether the Beacon widget is open, minimised, or closed. | | hs-auth | authentication | Session | Authentication cookie for the Help Scout team dashboard. | ### Third-party domains contacted (4) - `beacon-v2.helpscout.net` - `api.helpscout.net` - `secure.helpscout.net` - `docs.helpscout.net` Questions ## Frequently asked questions about Help Scout Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Help Scout set? The Beacon widget sets session cookies, a visitor identifier cookie for recognising returning users, and a chat state cookie. The Help Scout dashboard sets authentication cookies. No third party analytics cookies are set by Beacon by default. ### Is consent required for Help Scout? Consent is required for the Beacon widget cookies under the ePrivacy Directive. Customer support operations themselves typically rely on legitimate interest or contract performance. Email open tracking should be disclosed. ### What is the legal basis? Legitimate interest (Art. 6(1)(f)) or contract performance (Art. 6(1)(b)) for support operations. Consent (Art. 6(1)(a)) for Beacon cookies on public websites. ### Does Help Scout transfer data to the US? Yes. US based (AWS). No EU residency. DPA with SCCs and Data Privacy Framework certification cover transfers. ### Is a DPIA required? Recommended if processing sensitive support data at scale (health, financial complaints). Assess conversation content sensitivity, Beacon tracking, and email pixel usage. ### How to implement GDPR compliance? Execute DPA. Implement cookie consent for Beacon. Set data retention policies. Disable email tracking if unneeded. Train agents on data minimisation. Audit integrations. ### Are there privacy friendly alternatives? Zammad (open source, self hosted), osTicket (open source), Chatwoot (open source, self hosted), FreeScout (open source Help Scout alternative). EU SaaS: Crisp (France), Freshdesk (EU data center option). ### How to update cookie policy? Document Beacon cookies (session, visitor ID, chat state). Describe data collected during chat. Reference Help Scout as processor and the DPA. Provide opt out for Beacon. Same category ## More services: Customer support [See the whole category](https://www.flowconsent.com/en/services/customer-support) ### [Haptik](https://www.flowconsent.com/en/services/customer-support/haptik) [Haptik is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Haptik integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Haptik makes advanced AI accessible to all teams.](https://www.flowconsent.com/en/services/customer-support/haptik) [Preferences](https://www.flowconsent.com/en/services/customer-support/haptik) · ### [Posh](https://www.flowconsent.com/en/services/customer-support/posh) [Posh is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Posh integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Posh makes advanced AI accessible to all teams.](https://www.flowconsent.com/en/services/customer-support/posh) [Preferences](https://www.flowconsent.com/en/services/customer-support/posh) · ### [GUURU](https://www.flowconsent.com/en/services/customer-support/guuru) [Guuru is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Guuru supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Guuru ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/customer-support/guuru) [Preferences](https://www.flowconsent.com/en/services/customer-support/guuru) · ### [MantisBT](https://www.flowconsent.com/en/services/customer-support/mantisbt) [MantisBT is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. MantisBT integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, MantisBT helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/mantisbt) [Preferences](https://www.flowconsent.com/en/services/customer-support/mantisbt) · ### [LiveChat](https://www.flowconsent.com/en/services/customer-support/livechat) [LiveChat is a user preference and personalization service that helps websites deliver customized experiences based on individual visitor settings and choices. It manages preferences for content display, communication channels, and interaction styles. LiveChat integrates with website platforms to remember and apply user choices consistently across sessions. With privacy-compliant preference storage, LiveChat enhances satisfaction by ensuring tailored browsing experiences for every visitor.](https://www.flowconsent.com/en/services/customer-support/livechat) [Preferences](https://www.flowconsent.com/en/services/customer-support/livechat) · ### [Infoset](https://www.flowconsent.com/en/services/customer-support/infoset) [Infoset is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Infoset integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Infoset helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/infoset) [Preferences](https://www.flowconsent.com/en/services/customer-support/infoset) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)