Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Leadster is a Brazilian AI-powered conversational marketing platform that uses a chat widget to capture leads through interactive conversations. It collects visitor names, email addresses, phone numbers, and behavioural data via cookies. As a Brazilian company without an EU adequacy decision, transfers of European personal data to Leadster require Standard Contractual Clauses. Prior consent is required before the widget loads.
Leadster is a Brazilian conversational marketing platform that replaces static contact forms with an interactive AI-powered chat widget that guides visitors through a lead qualification conversation. It is designed to increase lead conversion rates by engaging visitors at the right moment with personalised questions. The widget collects visitor data including name, email, phone number, and company through the chat flow, and passes qualified leads to CRM systems or sales teams.
Leadster collects name, email address, phone number, company name, and any other qualification data configured in the chat flow. It also collects IP addresses, browser information, pages visited, and behavioural signals used to trigger the chat at the right moment. Lead data is stored in Leadster''s Brazilian infrastructure and can be forwarded to integrated CRM platforms.
Brazil adopted its General Data Protection Law (LGPD) in 2020, which shares structural similarities with GDPR. However, Brazil does not have an EU adequacy decision, meaning transfers of EU personal data to Brazilian infrastructure require a valid transfer mechanism under GDPR Article 46. Standard Contractual Clauses are the most practical option. Organisations must document this transfer and ensure Leadster can provide appropriate contractual safeguards.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Consent is required before the Leadster widget loads under the ePrivacy Directive. The consent notice must explain that Leadster is used for lead capture, describe the data collected, and disclose the transfer to Brazil. Visitors who decline must be able to use the website without the chat widget appearing. A separate contact form or other lead capture mechanism should be available as an alternative.
Leadster processes data in Brazil, which requires Standard Contractual Clauses as the transfer mechanism. Organisations should verify that Leadster can sign a DPA incorporating SCCs, document the transfer in their RoPA, and disclose it in their privacy policy.
Block the Leadster script until consent is obtained. Update your privacy policy to disclose Leadster as a processor and the Brazil transfer. Sign a DPA with Leadster incorporating SCCs. Ensure the chat flow includes a privacy notice before data is collected. Provide an alternative lead capture method for visitors who decline consent.
Websites using Leadster must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is advisable when Leadster is used at scale to collect personal data from large numbers of EU visitors, particularly when lead data is shared with CRM systems or used for automated follow-up campaigns.
Sample consent text
We use Leadster to engage with visitors and capture leads through an interactive chat. Leadster may collect your name, email, and phone number. Data is processed in Brazil. Please accept to enable the chat assistant.
Third-party domains contacted
leadster.com.brapi.leadster.com.brCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| ls_uid | persistent | 1 year | Visitor identifier used to recognise returning users and trigger the lead capture chat at optimal moments |
| ls_session | session | Session | Session identifier used to maintain the active lead capture conversation state |
Leadster uses cookies for user preferences — inform visitors with a consent banner.
Leadster sets tracking cookies to identify returning visitors and trigger the chat widget at optimal moments. It also uses localStorage to maintain conversation context. These cookies require prior consent under the ePrivacy Directive before the Leadster script loads.
Yes. Leadster sets tracking cookies and collects personal data including name, email, and phone number from the first interaction. Consent must be obtained before the widget loads. The consent notice must disclose the Brazil data transfer.
Consent under Article 6(1)(a) GDPR is required for tracking cookies and the collection of lead data via the chat widget. Once a visitor submits their contact details during a chat, the subsequent processing for lead follow-up may rely on legitimate interest or contract performance depending on the context.
Yes, to Brazil. Brazil does not have an EU adequacy decision. Standard Contractual Clauses are required as the transfer mechanism under GDPR Article 46. Sign a DPA with Leadster incorporating SCCs and document the Brazil transfer in your RoPA.
A DPIA is advisable at scale, particularly when Leadster data is forwarded to CRM systems for automated marketing follow-up. The combination of personal data collection, behavioural tracking, and Brazil transfer warrants assessment for large-scale deployments.
Block the Leadster script until consent is obtained. Include a privacy notice in the chat flow before collecting personal data. Disclose the Brazil transfer and SCC safeguard in your privacy policy. Sign a DPA with Leadster. Provide an alternative contact method for visitors who decline.
Yes. Typeform and Tally both offer EU data residency. For conversational lead capture with EU hosting, Chili Piper and Calendly offer EU data processing. For a privacy-first approach, a simple GDPR-compliant contact form hosted on your own EU infrastructure eliminates third-party data sharing entirely.
Add entries for Leadster tracking cookies in your cookie policy, listing their names, category (marketing or analytics), duration, and purpose. Disclose the Brazil data transfer and SCC safeguard. Reference Leadster as a third-party processor and link to their privacy policy.