Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
JivoChat is a live chat and business messenger widget that lets websites talk to visitors in real time. It loads JavaScript on the page, sets cookies, and processes chat content, IP addresses and visitor behaviour, which makes it a non essential tool requiring consent in the EU.
JivoChat is a live chat and business messenger widget that businesses embed on their websites to talk to visitors in real time. The widget loads a JavaScript snippet that renders a chat window, connects to JivoChat servers, and can also route messages from email, social channels and phone into one operator interface.
JivoChat sets cookies to maintain the chat session, identify returning visitors and remember widget state. It processes the content of conversations, the visitor IP address, browser and device information, the pages viewed and on site behaviour. This is personal data under the GDPR because visitors can be singled out and tracked across a session.
Because the widget stores and reads cookies that are not strictly necessary to deliver a service the visitor explicitly requested, the ePrivacy Directive requires prior consent before they are placed. The associated processing of chat content and behavioural data must also have a valid GDPR legal basis and be disclosed in your privacy notice.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
In practice you should obtain freely given, specific and informed consent before the JivoChat script loads and sets cookies. The widget should be blocked behind your consent banner so that no cookies are written and no data is sent until the visitor accepts the chat or marketing category.
JivoChat operates globally and chat data, IP addresses and visitor identifiers may be processed on infrastructure outside the EEA, including the United States. Such transfers need an appropriate safeguard, typically Standard Contractual Clauses, supported by a transfer impact assessment and clear information to visitors in your privacy policy.
Sign a data processing agreement with JivoChat, load the widget only after consent, document the processing in your records, configure data retention for chat transcripts, list JivoChat cookies in your cookie policy, and inform visitors about international transfers and their rights.
Websites using JivoChat must obtain user consent under GDPR regulations.
DPIA considerations
A full DPIA is usually not mandatory for a standard chat widget, but document the processing in your records and assess risk if chats capture sensitive data, if behavioural tracking is extensive, or if transfers outside the EEA are involved.
Sample consent text
We use JivoChat to provide live chat support. This sets cookies and may transfer your chat content and IP address to JivoChat outside the EU. Do you accept the chat service?
Third-party domains contacted
jivosite.comjivochat.comnode.jivosite.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| jv_visitor_id | Functional / tracking | 1 year | Identifies a returning visitor across chat sessions |
| jv_session | Functional | Session | Maintains the active chat session state |
| jv_enter_ts | Analytics | Persistent | Records visit timing and chat engagement behaviour |
JivoChat uses cookies for user preferences — inform visitors with a consent banner.
JivoChat typically sets cookies such as a visitor identifier, a session cookie and timing cookies to keep the chat working, recognise returning visitors and remember the widget state. The exact names can vary by configuration.
Yes. The widget sets non essential cookies and processes behavioural data, so under the ePrivacy Directive and the GDPR you must obtain prior consent before it loads.
The appropriate legal basis is consent under Article 6(1)(a) GDPR, since the chat widget and its cookies are not strictly necessary and are loaded at the visitor's choice.
It can. JivoChat operates globally and chat data and IP addresses may be processed outside the EEA, including the US, which requires safeguards such as Standard Contractual Clauses.
A full DPIA is usually not mandatory for a standard chat widget, but you should assess the risk and carry one out if chats handle sensitive data or involve large scale behavioural tracking.
Block the widget behind your consent manager, load it only after consent, sign a data processing agreement, set retention limits and disclose the processing and transfers in your privacy and cookie policies.
Alternatives include EU hosted live chat tools and self hosted chat solutions that keep data within the EEA, which can reduce transfer concerns. You still need consent for non essential cookies.
List the JivoChat cookies, their purpose and duration, name JivoChat as a recipient, explain that data may be transferred outside the EU and describe how visitors can withdraw consent.