Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Landbot is a no code conversational chatbot builder from Hello Umi S.L. in Barcelona, Spain, hosted on AWS in the EU.
Landbot is a no code conversational chatbot builder operated by Hello Umi S.L. in Barcelona, Spain. It lets teams build chat flows that embed on a website through a JavaScript snippet or an iframe to capture enquiries and qualify leads.
The widget stores conversation state and can capture form data such as name, email, phone and any answers a visitor provides. It sets Landbot session and state cookies to keep the conversation consistent. Lead data is stored in the Landbot account and can be sent to connected tools.
Cookies that are strictly necessary to run the chatbot do not require consent, but persistent identifiers, analytics and marketing cookies do under Article 5(3) of the ePrivacy Directive. Lead data captured in the chat is personal data subject to the GDPR.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
The chatbot itself can rely on legitimate interest or on the steps needed to respond to an enquiry. Where Landbot sets persistent identifiers or supports marketing follow up, obtain consent under Article 6(1)(a) GDPR before those functions run.
Landbot is EU based and hosts on AWS in the EU, commonly in Frankfurt, so most processing stays within the European Union. This reduces transfer risk compared with non EU vendors. Verify the current sub processor list and apply Standard Contractual Clauses for any transfer outside the EEA.
Sign the Landbot data processing agreement, confirm the EU hosting region, gate any marketing or analytics features behind consent, list the Landbot cookies in your cookie policy, set retention for conversation logs and lead records, and document the lawful basis.
Websites using Landbot must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA may be needed where Landbot captures leads and personal identifiers at scale or feeds marketing automation. The EU hosting on AWS reduces transfer risk, but assess the volume of personal data, the use of persistent identifiers, the retention of conversation logs and the current sub processor list.
Sample consent text
We use Landbot to provide a chatbot on this site. The chatbot stores conversation state, and with your consent it may use cookies and identifiers to recognise you and follow up on your enquiry.
Third-party domains contacted
landbot.iostatic.landbot.ioapi.landbot.iostorage.landbot.iochats.landbot.ioCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| landbot_session | First-party | Session | Maintains the chatbot conversation session and state across page views. |
| landbot_visitor | First-party | Persistent | Stores a visitor identifier so the chatbot can recognise a returning visitor and resume the conversation. |
| landbot_settings | First-party | Persistent | Stores widget configuration and display preferences for the chatbot. |
Landbot uses cookies for user preferences — inform visitors with a consent banner.
Landbot sets session and state cookies that keep the chatbot conversation consistent across page views. Where you enable analytics or persistent identifiers, additional cookies that require consent may be set.
The core chatbot is largely functional and may not require consent. Consent is required for persistent identifiers, analytics and any marketing follow up under the ePrivacy Directive and Article 6(1)(a) GDPR.
The chatbot can rely on legitimate interest or on contract to answer enquiries. Persistent identifiers and marketing features require consent under Article 6(1)(a) GDPR.
Landbot is EU based and hosts on AWS in the EU, so most processing stays within the European Union. Some sub processors may operate outside the EEA, so verify the sub processor list and rely on Standard Contractual Clauses where needed.
A DPIA may be needed where Landbot captures leads or identifiers at scale or feeds marketing automation. The EU hosting lowers transfer risk, but assess data volume, identifiers, retention and the sub processor list.
Sign the data processing agreement, confirm the EU hosting region, gate marketing and analytics behind consent, list the Landbot cookies in your cookie policy and set retention for conversation logs and lead records.
Other EU friendly chatbot and chat tools include Crisp and Userlike. Non EU options such as Zoho SalesIQ, Gladly and Gist may involve transfers. Compare hosting region, lead capture and consent controls.
List the Landbot session and state cookies with their purposes and durations, state that they support the chatbot, name Hello Umi S.L. as the provider, and explain consent for any analytics or marketing identifiers.