Privacy & GDPR Settings
Last updated: November 29, 2025
Ensure your chat widget complies with privacy regulations like GDPR. Configure consent banners and privacy policy links.
- Open Bot Studio
- Scroll to Privacy & Compliance section
- Expand to configure options
Toggle to show a consent banner before chat starts:
When Enabled:
- Banner appears on first visit
- User must accept to use chat
- Consent is remembered
When Disabled:
- No consent banner shown
- Chat available immediately
- May not be GDPR compliant
Customize the consent text:
Default:
"We use cookies to improve your experience. By using our chat, you agree to our privacy policy."
Best Practices:
- Be clear about data usage
- Keep it concise
- Link to full privacy policy
Example Messages:
- "This chat collects your name and email to provide support. See our privacy policy for details."
- "By chatting with us, you consent to our data processing as described in our privacy policy."
Customize the accept button:
- Default: "Accept"
- Alternatives: "I Agree", "Continue", "OK"
Enter your privacy policy URL:
- Example:
https://yoursite.com/privacy - Opens in new tab when clicked
- Required for GDPR compliance
Customize the link text:
- Default: "Privacy Policy"
- Appears in consent banner
- Also shown in widget footer
Inform users what data you collect:
SimpleChat collects:
- Name (if asked in flow)
- Email (if asked in flow)
- Messages sent
- Timestamp of conversations
- Browser/device info (for support)
- Stored securely in EU data centers
- Encrypted in transit and at rest
- Retained per your account settings
Ensure you're compliant:
- Enable consent banner
- Add privacy policy link
- Update your privacy policy to mention chat
- Specify data retention period
- Provide way to request data deletion
- Document your legal basis
Under GDPR, users can:
- Request their chat data
- See what information you have
- Request data deletion
- "Right to be forgotten"
- Export their data
- Machine-readable format
When users request their data:
- Go to Conversations
- Find the user's conversations
- Export or delete as requested
- Respond within 30 days (GDPR requirement)
- Only ask for necessary info
- Don't collect sensitive data
- Clear retention policies
- HTTPS everywhere
- Encrypted storage
- Access controls
- Clear privacy notices
- Easy opt-out
- Contact information
- Consent required before processing
- Clear privacy notices
- Data subject rights
- "Do Not Sell" option
- Privacy notice requirements
- Consumer rights
- Similar to GDPR
- Consent requirements
- Data protection officer
Click Go Live to activate privacy settings.
This guide is informational only. Consult a legal professional for compliance advice specific to your business and jurisdiction.