> How the EU based Landbot chatbot works, what cookies and lead data it stores, what GDPR and ePrivacy require, and when consent is needed for identifiers. > > Canonical: https://www.flowconsent.com/en/services/customer-support/landbot Customer support # Landbot Preferences · [Official website](https://landbot.io) Landbot is a no code conversational chatbot builder from Hello Umi S.L. in Barcelona, Spain, hosted on AWS in the EU. [Block Landbot until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=customer_support) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Customer support](https://www.flowconsent.com/en/services/customer-support) - Consent Preferences - Prior consent Required - Documented cookies 3 - Third-party domains 5 - Servers European Union. Landbot is operated by Hello Umi S.L. in Barcelona, Spain, with hosting on Amazon Web Services in the EU, commonly the Frankfurt region. Overview ## What does Landbot do? ## **What Landbot is** Landbot is a no code conversational chatbot builder operated by Hello Umi S.L. in Barcelona, Spain. It lets teams build chat flows that embed on a website through a JavaScript snippet or an iframe to capture enquiries and qualify leads. ## **Data and cookies, and how it works** The widget stores conversation state and can capture form data such as name, email, phone and any answers a visitor provides. It sets Landbot session and state cookies to keep the conversation consistent. Lead data is stored in the Landbot account and can be sent to connected tools. ## **GDPR and ePrivacy obligations** Cookies that are strictly necessary to run the chatbot do not require consent, but persistent identifiers, analytics and marketing cookies do under Article 5(3) of the ePrivacy Directive. Lead data captured in the chat is personal data subject to the GDPR. ## **Consent and lawful basis** The chatbot itself can rely on legitimate interest or on the steps needed to respond to an enquiry. Where Landbot sets persistent identifiers or supports marketing follow up, obtain consent under Article 6(1)(a) GDPR before those functions run. ## **Data transfers** Landbot is EU based and hosts on AWS in the EU, commonly in Frankfurt, so most processing stays within the European Union. This reduces transfer risk compared with non EU vendors. Verify the current sub processor list and apply Standard Contractual Clauses for any transfer outside the EEA. ## **Practical compliance steps** Sign the Landbot data processing agreement, confirm the EU hosting region, gate any marketing or analytics features behind consent, list the Landbot cookies in your cookie policy, set retention for conversation logs and lead records, and document the lawful basis. Compliance ## Landbot and the GDPR Landbot is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis The chatbot widget is largely functional and can rely on legitimate interest or contract. Persistent identifiers, marketing and analytics require consent under Article 6(1)(a) GDPR and Article 5(3) ePrivacy Directive. - Risk level medium - Applicable regulations GDPR, ePrivacy Directive and SCCs for any transfers outside the EEA. ### Impact assessment (DPIA) A DPIA may be needed where Landbot captures leads and personal identifiers at scale or feeds marketing automation. The EU hosting on AWS reduces transfer risk, but assess the volume of personal data, the use of persistent identifiers, the retention of conversation logs and the current sub processor list. ### Sample text for your banner > We use Landbot to provide a chatbot on this site. The chatbot stores conversation state, and with your consent it may use cookies and identifiers to recognise you and follow up on your enquiry. Cookies and trackers ## What Landbot sets and contacts - Tracking method JavaScript or iframe embedded chatbot widget that stores conversation state and may capture form and lead data such as name, email and phone. Persistent identifiers and any analytics extend the tracking footprint. - Server location European Union. Landbot is operated by Hello Umi S.L. in Barcelona, Spain, with hosting on Amazon Web Services in the EU, commonly the Frankfurt region. ### Cookies set (3) | Name | Type | Duration | Purpose | | ----------------- | ----------- | ---------- | --------------------------------------------------------------------------------------------------------- | | landbot\_session | First-party | Session | Maintains the chatbot conversation session and state across page views. | | landbot\_visitor | First-party | Persistent | Stores a visitor identifier so the chatbot can recognise a returning visitor and resume the conversation. | | landbot\_settings | First-party | Persistent | Stores widget configuration and display preferences for the chatbot. | ### Third-party domains contacted (5) - `landbot.io` - `static.landbot.io` - `api.landbot.io` - `storage.landbot.io` - `chats.landbot.io` Questions ## Frequently asked questions about Landbot Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Landbot set? Landbot sets session and state cookies that keep the chatbot conversation consistent across page views. Where you enable analytics or persistent identifiers, additional cookies that require consent may be set. ### Is consent required for Landbot? The core chatbot is largely functional and may not require consent. Consent is required for persistent identifiers, analytics and any marketing follow up under the ePrivacy Directive and Article 6(1)(a) GDPR. ### What is the legal basis for Landbot? The chatbot can rely on legitimate interest or on contract to answer enquiries. Persistent identifiers and marketing features require consent under Article 6(1)(a) GDPR. ### Does Landbot transfer data to third countries? Landbot is EU based and hosts on AWS in the EU, so most processing stays within the European Union. Some sub processors may operate outside the EEA, so verify the sub processor list and rely on Standard Contractual Clauses where needed. ### Is a DPIA needed for Landbot? A DPIA may be needed where Landbot captures leads or identifiers at scale or feeds marketing automation. The EU hosting lowers transfer risk, but assess data volume, identifiers, retention and the sub processor list. ### How do I implement Landbot compliantly? Sign the data processing agreement, confirm the EU hosting region, gate marketing and analytics behind consent, list the Landbot cookies in your cookie policy and set retention for conversation logs and lead records. ### What are alternatives to Landbot? Other EU friendly chatbot and chat tools include Crisp and Userlike. Non EU options such as Zoho SalesIQ, Gladly and Gist may involve transfers. Compare hosting region, lead capture and consent controls. ### How do I update my cookie policy for Landbot? List the Landbot session and state cookies with their purposes and durations, state that they support the chatbot, name Hello Umi S.L. as the provider, and explain consent for any analytics or marketing identifiers. Same category ## More services: Customer support [See the whole category](https://www.flowconsent.com/en/services/customer-support) ### [KeyReply](https://www.flowconsent.com/en/services/customer-support/keyreply) [KeyReply is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. KeyReply supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, KeyReply ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/customer-support/keyreply) [Preferences](https://www.flowconsent.com/en/services/customer-support/keyreply) · ### [Splutter AI](https://www.flowconsent.com/en/services/customer-support/splutter-ai) [Splutter AI is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Splutter AI integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Splutter AI makes advanced AI accessible to all teams.](https://www.flowconsent.com/en/services/customer-support/splutter-ai) [Preferences](https://www.flowconsent.com/en/services/customer-support/splutter-ai) · ### [Ada](https://www.flowconsent.com/en/services/customer-support/ada) [Ada is a web accessibility solution that helps websites comply with ADA, WCAG, and accessibility standards. It provides automated scanning, remediation tools, and compliance monitoring to ensure content is accessible to all users, including those with disabilities. Ada offers screen reader optimization, keyboard navigation support, and color contrast adjustment. With regular audits and reporting, Ada helps create inclusive digital experiences for everyone.](https://www.flowconsent.com/en/services/customer-support/ada) [Preferences](https://www.flowconsent.com/en/services/customer-support/ada) · ### [Chatlio](https://www.flowconsent.com/en/services/customer-support/chatlio) [Chatlio is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Chatlio supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Chatlio ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/customer-support/chatlio) [Preferences](https://www.flowconsent.com/en/services/customer-support/chatlio) · ### [Capacity](https://www.flowconsent.com/en/services/customer-support/capacity) [Capacity is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Capacity supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Capacity ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/customer-support/capacity) [Preferences](https://www.flowconsent.com/en/services/customer-support/capacity) · ### [Sharpen](https://www.flowconsent.com/en/services/customer-support/sharpen) [Sharpen is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Sharpen integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Sharpen helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/sharpen) [Preferences](https://www.flowconsent.com/en/services/customer-support/sharpen) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)