Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
UserVoice is a product feedback management platform providing feedback widgets, idea boards, NPS surveys, and feature request tracking. The JavaScript widget sets cookies on visitor browsers and collects user feedback data, email addresses, and product usage context. Data is hosted on US infrastructure.
UserVoice is a product feedback management platform based in San Francisco. It provides embeddable feedback widgets, idea voting boards, NPS surveys, product roadmaps, and feature request tracking. The JavaScript widget can be embedded on websites and web applications to collect user feedback, feature requests, and satisfaction scores. UserVoice integrates with CRMs, support tools, and analytics platforms.
The UserVoice widget sets session cookies, visitor identification cookies, and feedback state cookies. The platform collects email addresses, feedback text, votes, NPS scores, user agent information, IP addresses, and page context. UserVoice can identify users through API based identification, linking feedback to customer accounts.
UserVoice processes personal data through feedback submissions and user identification. The company provides a DPA with SCCs and holds SOC 2 Type II certification. The widget cookies require ePrivacy consent. Feedback content may contain sensitive personal information. All data is hosted on US infrastructure with no EU residency option.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Legitimate interest (Art. 6(1)(f)) typically applies for product improvement feedback from authenticated users. Consent (Art. 6(1)(a)) is required for widget cookies under ePrivacy and for collecting feedback from anonymous website visitors. NPS surveys sent via email should include an unsubscribe option.
UserVoice is US based with AWS hosting. No EU residency. Transfers covered by DPA with SCCs. Document all feedback data flows in your Records of Processing Activities.
Execute the DPA. Implement cookie consent for the feedback widget. Configure data retention for old feedback entries. Minimise personal data in feedback forms. Review user identification configuration. Audit integrations. Include UserVoice in your DPIA if processing sensitive feedback. Update your privacy policy.
Websites using UserVoice must obtain user consent under GDPR regulations.
DPIA considerations
DPIA recommended if UserVoice processes feedback at scale. Assess: feedback content (may contain personal complaints), email addresses, user identification, NPS survey data, widget cookie tracking, third party integrations, US hosting.
Sample consent text
This site uses UserVoice for product feedback. The widget may set cookies and collect your email and feedback on US servers. By submitting feedback, you consent to this processing.
Third-party domains contacted
widget.uservoice.comapi.uservoice.comfeedback.uservoice.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| uv_session | functionality | Session | Maintains the widget session for feedback submission. |
| uv_visitor_id | functionality | 1 year | Identifies returning visitors in the feedback widget. |
| uv_widget_state | functionality | Session | Tracks widget open/closed state across page navigation. |
UserVoice uses cookies for user preferences — inform visitors with a consent banner.
Session, visitor ID, and feedback state cookies via the widget. Dashboard authentication cookies.
Yes for widget cookies (ePrivacy). Legitimate interest may apply for authenticated user feedback.
Legitimate interest (Art. 6(1)(f)) for product feedback. Consent (Art. 6(1)(a)) for widget cookies and anonymous feedback.
Yes. US based, AWS hosted. DPA with SCCs. No EU residency.
Recommended if collecting sensitive feedback at scale.
Execute DPA. Cookie consent for widget. Data retention. Minimise data. Audit integrations.
Canny, Sleekplan, Nolt, Fider (open source self hosted), ProductBoard.
Document widget cookies. Describe feedback data collected. Reference DPA. Provide opt out.