> Guide to UserVoice GDPR compliance covering feedback widget cookies, user data collection, NPS surveys, US data transfers, and practical compliance steps.
>
> Canonical: https://www.flowconsent.com/en/services/customer-support/uservoice

Customer support

# UserVoice

Preferences · [Official website](https://uservoice.com)

UserVoice is a product feedback management platform providing feedback widgets, idea boards, NPS surveys, and feature request tracking. The JavaScript widget sets cookies on visitor browsers and collects user feedback data, email addresses, and product usage context. Data is hosted on US infrastructure.

[Block UserVoice until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=customer_support) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [Customer support](https://www.flowconsent.com/en/services/customer-support)

- Consent

  Preferences

- Prior consent

  Required

- Documented cookies

  3

- Third-party domains

  3

- Servers

  US (AWS hosted)

Overview

## What does UserVoice do?

## **What Is UserVoice?**

UserVoice is a product feedback management platform based in San Francisco. It provides embeddable feedback widgets, idea voting boards, NPS surveys, product roadmaps, and feature request tracking. The JavaScript widget can be embedded on websites and web applications to collect user feedback, feature requests, and satisfaction scores. UserVoice integrates with CRMs, support tools, and analytics platforms.

## **Cookies and Data Collected**

The UserVoice widget sets session cookies, visitor identification cookies, and feedback state cookies. The platform collects email addresses, feedback text, votes, NPS scores, user agent information, IP addresses, and page context. UserVoice can identify users through API based identification, linking feedback to customer accounts.

## **GDPR and ePrivacy Implications**

UserVoice processes personal data through feedback submissions and user identification. The company provides a DPA with SCCs and holds SOC 2 Type II certification. The widget cookies require ePrivacy consent. Feedback content may contain sensitive personal information. All data is hosted on US infrastructure with no EU residency option.

## **Consent and Legal Basis**

Legitimate interest (Art. 6(1)(f)) typically applies for product improvement feedback from authenticated users. Consent (Art. 6(1)(a)) is required for widget cookies under ePrivacy and for collecting feedback from anonymous website visitors. NPS surveys sent via email should include an unsubscribe option.

## **International Data Transfers**

UserVoice is US based with AWS hosting. No EU residency. Transfers covered by DPA with SCCs. Document all feedback data flows in your Records of Processing Activities.

## **Practical Compliance Steps**

Execute the DPA. Implement cookie consent for the feedback widget. Configure data retention for old feedback entries. Minimise personal data in feedback forms. Review user identification configuration. Audit integrations. Include UserVoice in your DPIA if processing sensitive feedback. Update your privacy policy.

Compliance

## UserVoice and the GDPR

UserVoice is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  Legitimate interest for product feedback (Art. 6(1)(f)), consent for widget cookies and NPS tracking (Art. 6(1)(a))

- Risk level

  medium

- Applicable regulations

  GDPR, ePrivacy Directive, UK GDPR, CCPA/CPRA, SOC 2 Type II

### Impact assessment (DPIA)

DPIA recommended if UserVoice processes feedback at scale. Assess: feedback content (may contain personal complaints), email addresses, user identification, NPS survey data, widget cookie tracking, third party integrations, US hosting.

### Sample text for your banner

> This site uses UserVoice for product feedback. The widget may set cookies and collect your email and feedback on US servers. By submitting feedback, you consent to this processing.

Cookies and trackers

## What UserVoice sets and contacts

- Tracking method

  JavaScript widget with cookies, feedback form submissions, user identification, analytics tracking, NPS surveys

- Server location

  US (AWS hosted)

- Data transferred outside the EU

  UserVoice Inc. is headquartered in San Francisco, US. Data hosted on AWS US. No EU residency. DPA with SCCs available.

### Cookies set (3)

| Name              | Type          | Duration | Purpose                                                 |
| ----------------- | ------------- | -------- | ------------------------------------------------------- |
| uv\_session       | functionality | Session  | Maintains the widget session for feedback submission.   |
| uv\_visitor\_id   | functionality | 1 year   | Identifies returning visitors in the feedback widget.   |
| uv\_widget\_state | functionality | Session  | Tracks widget open/closed state across page navigation. |

### Third-party domains contacted (3)

- `widget.uservoice.com`
- `api.uservoice.com`
- `feedback.uservoice.com`

Questions

## Frequently asked questions about UserVoice

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### What cookies does UserVoice set?

Session, visitor ID, and feedback state cookies via the widget. Dashboard authentication cookies.

### Is consent required?

Yes for widget cookies (ePrivacy). Legitimate interest may apply for authenticated user feedback.

### What is the legal basis?

Legitimate interest (Art. 6(1)(f)) for product feedback. Consent (Art. 6(1)(a)) for widget cookies and anonymous feedback.

### Does UserVoice transfer data to the US?

Yes. US based, AWS hosted. DPA with SCCs. No EU residency.

### Is a DPIA required?

Recommended if collecting sensitive feedback at scale.

### How to implement compliance?

Execute DPA. Cookie consent for widget. Data retention. Minimise data. Audit integrations.

### Alternatives?

Canny, Sleekplan, Nolt, Fider (open source self hosted), ProductBoard.

### Cookie policy update?

Document widget cookies. Describe feedback data collected. Reference DPA. Provide opt out.

Same category

## More services: Customer support

[See the whole category](https://www.flowconsent.com/en/services/customer-support)

### [Velaro](https://www.flowconsent.com/en/services/customer-support/velaro)

[Velaro is a live chat and customer messaging platform that enables businesses to engage with website visitors in real time. It provides instant messaging, chatbot automation, and team collaboration tools to deliver fast, personalized customer support. Velaro supports multi-channel communication, conversation routing, and canned responses to improve response times. With built-in analytics and CRM integration, Velaro helps convert visitors into customers.](https://www.flowconsent.com/en/services/customer-support/velaro)

[Preferences](https://www.flowconsent.com/en/services/customer-support/velaro)

·

### [TeamBrain](https://www.flowconsent.com/en/services/customer-support/teambrain)

[TeamBrain is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. TeamBrain integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, TeamBrain helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/teambrain)

[Preferences](https://www.flowconsent.com/en/services/customer-support/teambrain)

·

### [LimeCall](https://www.flowconsent.com/en/services/customer-support/limecall)

[Limecall is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Limecall integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Limecall helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/limecall)

[Preferences](https://www.flowconsent.com/en/services/customer-support/limecall)

·

### [Neexa](https://www.flowconsent.com/en/services/customer-support/neexa)

[Neexa is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Neexa integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Neexa makes advanced AI accessible to all teams.](https://www.flowconsent.com/en/services/customer-support/neexa)

[Preferences](https://www.flowconsent.com/en/services/customer-support/neexa)

·

### [CallPage](https://www.flowconsent.com/en/services/customer-support/callpage)

[CallPage is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. CallPage supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, CallPage ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/customer-support/callpage)

[Marketing](https://www.flowconsent.com/en/services/customer-support/callpage)

·

### [GetFeedback](https://www.flowconsent.com/en/services/customer-support/getfeedback)

[GetFeedback is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. GetFeedback supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, GetFeedback ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/customer-support/getfeedback)

[Preferences](https://www.flowconsent.com/en/services/customer-support/getfeedback)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)
