FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Customer support

YourGPT

AnalyticsOfficial website

YourGPT is a no code platform that lets you build AI chatbots trained on your own content. The widget embeds on a website and routes messages to a large language model with retrieval augmented generation.

Block YourGPT until consentScan my site
Overview

What does YourGPT do?

YourGPT is a no code platform that lets a business build an AI chatbot trained on its own website, documents, PDFs, and structured data. Once trained, the chatbot is embedded on the website as a JavaScript widget and answers visitor questions using retrieval augmented generation, with handoff to a human agent when needed. Many SMEs adopt it as a lower cost alternative to enterprise customer support AI.

What YourGPT does

YourGPT crawls or imports your content into a vector database. The website widget opens a WebSocket to the YourGPT backend, retrieves the relevant chunks of the knowledge base, and calls a large language model (OpenAI GPT, Anthropic Claude, or a YourGPT hosted model) to generate the answer. Conversations are stored in the YourGPT admin and can be exported.

Cookies and data collected

YourGPT sets first party cookies on the merchant domain (yg_session, yg_visitor) to persist the conversation. The widget collects the IP, user agent, referrer, URL, the full text of each message, attachments, and any context passed to the widget (visitor email, plan). Conversation logs are stored on the YourGPT backend on AWS and may transit through the chosen LLM provider.

GDPR and ePrivacy implications

Chat messages frequently contain personal data and occasionally special category data (health, financial). YourGPT acts as a processor for the conversations; the chosen LLM provider may act as an independent controller for its own model improvement. The widget writes non strictly necessary cookies and scripts, so Article 5(3) ePrivacy requires consent. The deployment can fall under the high risk category of the EU AI Act if used for decision making, eligibility, or access to essential services.

Data transfers to the United States

YourGPT can be deployed on AWS US or EU. LLM inference typically happens with US providers (OpenAI, Anthropic), which transfers conversation data to the US. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, and on Standard Contractual Clauses otherwise. A Transfer Impact Assessment is recommended.

How to deploy it compliantly

Sign the DPA with YourGPT, ask for the subprocessor list including the LLM provider, choose EU residency if available, disable training on your data unless explicitly required, and configure prompt and answer filters to block special category content. Gate the widget behind consent in your CMP. Provide a manual contact channel for users who refuse the AI chat.

Compliance

YourGPT and the GDPR

YourGPT is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR) for the chat widget and tracking, contract (Art. 6(1)(b)) for handling support requests initiated by the user
Risk level
high
Applicable regulations
GDPR, ePrivacy Directive, EU AI Act (for high impact deployments), EU-US Data Privacy Framework

Impact assessment (DPIA)

A DPIA is recommended. YourGPT processes user messages through third party LLMs (often US providers), stores conversation transcripts, and may capture personally identifiable information typed by visitors. Document the LLM chain, the retention, the opt out for model training, the US transfer mechanism, and the human escalation path.

Sample text for your banner

We use YourGPT to power the AI chat on this site. YourGPT loads a script, stores conversation transcripts on its servers, and routes your messages to an external large language model. We only activate it after you accept the customer support category in our cookie banner.
Cookies and trackers

What YourGPT sets and contacts

Tracking method
JavaScript chatbot widget on the website with first party cookies, WebSocket connection, conversation processing by a large language model
Server location
AWS us-east-1 and eu-west-1 depending on plan; LLM inference can route to OpenAI or Anthropic depending on configuration
Data transferred outside the EU
YourGPT is hosted on AWS with US and EU regions and uses LLM providers such as OpenAI (US) for inference. Conversation transcripts and user inputs can be transferred to the US. Transfers rely on the EU-US Data Privacy Framework and on Standard Contractual Clauses with a Transfer Impact Assessment.

Cookies set (4)

NameTypeDurationPurpose
yg_sessionhttp_cookieSessionSession identifier issued by YourGPT for the current chat session.
yg_visitorhttp_cookie1 yearPersistent visitor identifier set by the YourGPT widget to recognise returning users.
yg_convlocalStorage30 daysStores the active conversation ID so the user can come back without losing context.
yg_contextlocalStorageSessionStores the context variables passed to the widget (visitor email, plan, page URL) for personalisation.

Third-party domains contacted (4)

  • yourgpt.ai
  • widget.yourgpt.ai
  • api.yourgpt.ai
  • cdn.yourgpt.ai
Questions

Frequently asked questions about YourGPT

Can't find your question? Write to us, we answer fast.

What cookies does YourGPT set?

YourGPT sets first party cookies on the merchant domain (yg_session for the current session, yg_visitor for the persistent visitor ID, yg_conv for the active conversation). It also writes localStorage entries to keep the conversation across reloads.

Does YourGPT require GDPR consent?

Yes. The chat widget loads non strictly necessary scripts and writes identifiers, so Article 5(3) ePrivacy requires prior consent. The chat content itself is treated under the legal basis of contract performance (handling the request) and consent for any analytics or training.

What is the legal basis for processing?

Consent under Article 6(1)(a) GDPR for the widget cookies, profiling and any model training. Contract performance under Article 6(1)(b) when the user initiates a request that requires the chat to be answered.

Are data transferred outside the EU?

Usually yes. YourGPT can host data in the EU, but LLM inference is typically performed by US providers such as OpenAI or Anthropic. Transfers rely on the EU-US Data Privacy Framework where the provider is certified and on Standard Contractual Clauses otherwise.

Do I need a DPIA?

A DPIA is recommended. YourGPT processes free text from users (which may include special category data), uses third party LLMs, and may store conversation logs. If you use it for decision making about persons, also assess the EU AI Act implications.

How do I implement YourGPT compliantly?

Sign the DPA, list subprocessors including the LLM, choose EU residency where available, disable model training on your data, set retention, filter sensitive content in prompts and answers, and gate the widget behind consent. Always provide a manual fallback channel.

Are there alternatives to YourGPT?

Alternatives include Chatbase, Botpress, Voiceflow, Ada, Kore.ai, parloa, Cognigy, Intercom Fin, and self hosted RAG stacks based on LangChain or LlamaIndex. EU based options exist for several of them.

How do I update my cookie policy for YourGPT?

Add a YourGPT entry covering the yg_session, yg_visitor and yg_conv cookies. Mention the chat content processing, the role of the LLM provider, the US transfer mechanism, the retention, and the right to delete the conversation.

Same category

More services: Customer support

See the whole category

REI Chat

REI Chat is a live chat and customer messaging platform that enables businesses to engage with website visitors in real time. It provides instant messaging, chatbot automation, and team collaboration tools to deliver fast, personalized customer support. REI Chat supports multi-channel communication, conversation routing, and canned responses to improve response times. With built-in analytics and CRM integration, REI Chat helps convert visitors into customers.

Preferences

Re:amaze

Re:amaze is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Re:amaze supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Re:amaze ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Tactful

Tactful is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Tactful integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Tactful makes advanced AI accessible to all teams.

Preferences

Virtual Chat

Virtual Chat is a live chat and customer messaging platform that enables businesses to engage with website visitors in real time. It provides instant messaging, chatbot automation, and team collaboration tools to deliver fast, personalized customer support. Virtual Chat supports multi-channel communication, conversation routing, and canned responses to improve response times. With built-in analytics and CRM integration, Virtual Chat helps convert visitors into customers.

Preferences

DelightChat

DelightChat is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. DelightChat supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, DelightChat ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Upvoty

Upvoty is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Upvoty enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Upvoty empowers marketing teams to achieve measurable growth.

Marketing

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site