Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Zoho SalesIQ is a live chat and website visitor tracking widget from Zoho Corporation that also powers the Zobot chatbot.
Zoho SalesIQ is a live chat and visitor engagement product from Zoho Corporation. It embeds a JavaScript widget on a website to offer real time chat, to track visitor behaviour, and to run the Zobot chatbot for automated conversations.
The widget collects the visitor IP address, browser type and language, referring URL, pages visited, time zone, operating system and time on site. It sets cookies such as _iamadt, _iambdt, _zcsr_tmp, JSESSIONID, ZCSESSIONID, _is, _uls and LSSUUID to maintain sessions and to identify returning visitors. This data feeds chat routing, visitor scoring and chatbot logic.
Under Article 5(3) of the ePrivacy Directive, storing or reading cookies that are not strictly necessary requires prior consent. The visitor tracking cookies in SalesIQ go beyond what is strictly necessary, so they require consent. The chat function itself can rely on a different basis once a visitor chooses to interact.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Tracking cookies should be loaded only after the visitor gives consent under Article 6(1)(a) GDPR. SalesIQ provides cookie APIs that let you integrate its cookies into your consent banner, so the widget can hold back tracking until consent is recorded. The chat itself may rely on legitimate interest or contract.
Zoho operates regional data centers in the EU, the United States, India and Australia. The default location depends on the account region, so data may be processed in India or the United States unless an EU data center on zoho.eu is selected. For transfers outside the EEA, Zoho relies on Standard Contractual Clauses. EU organisations should register on the EU data center to keep processing local.
Block tracking cookies until consent is given, document the lawful basis, choose the EU data center where possible, sign the Zoho data processing addendum, list the SalesIQ cookies in your cookie policy, and configure retention for chat transcripts and visitor records.
Websites using Zoho SalesIQ must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended because SalesIQ performs systematic visitor tracking, including IP based geolocation and returning visitor identification, which can profile website visitors. Assess the volume of personal data, the choice of data center, possible transfers to India or the United States, and the retention of chat transcripts. Document the lawful basis for tracking cookies and the safeguards applied to transfers.
Sample consent text
We use Zoho SalesIQ to provide live chat and to recognise returning visitors. With your consent, SalesIQ sets cookies to track your activity on this site. You can accept or decline these cookies at any time.
Third-party domains contacted
salesiq.zoho.comsalesiq.zohopublic.comjs.zohocdn.comcss.zohocdn.comsalesiq.zoho.euCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| _iamadt | Third-party | Session | Authentication token for the Zoho IAM service that maintains the SalesIQ session. |
| _zcsr_tmp | Third-party | Session | Cross site request forgery protection token for SalesIQ requests. |
| JSESSIONID | Third-party | Session | Server session identifier that maintains the visitor session with SalesIQ. |
| LSSUUID | Third-party | Persistent | Unique visitor identifier used to recognise returning visitors for visitor tracking. |
| _is | Third-party | Persistent | Stores visitor tracking state and interaction data for SalesIQ. |
| _uls | Third-party | Persistent | Stores visitor session and locale state for the SalesIQ widget. |
Zoho SalesIQ uses cookies for user preferences — inform visitors with a consent banner.
SalesIQ sets cookies such as _iamadt, _iambdt, _zcsr_tmp, JSESSIONID, ZCSESSIONID, _is, _uls and LSSUUID. They maintain chat sessions and identify returning visitors for visitor tracking.
Yes for the visitor tracking cookies, which are not strictly necessary and require prior consent under the ePrivacy Directive. The chat function itself can run on another basis once a visitor starts a conversation.
The legal basis for tracking cookies is consent under Article 6(1)(a) GDPR. The live chat may rely on legitimate interest or on contract once the visitor chooses to engage.
It can. Depending on the account region, data may be processed in India or the United States. EU customers can choose the zoho.eu data center, and transfers outside the EEA rely on Standard Contractual Clauses.
A DPIA is recommended because the tool performs systematic visitor tracking and IP based geolocation that can profile visitors. Assess data volume, data center choice, transfers and retention of chat transcripts.
Block the tracking cookies until the visitor consents, integrate the SalesIQ cookie APIs into your consent banner, select the EU data center where possible, sign the data processing addendum and set retention limits.
EU based options such as Landbot keep most processing within the EU. Other live chat tools include Crisp, Userlike and Tidio. Evaluate hosting region, tracking footprint and consent controls before choosing.
List the SalesIQ cookies with their names, purposes and durations, state that they support live chat and visitor tracking, name Zoho as the provider, and explain how visitors can withdraw consent.