Botpress

Overview

Botpress is an open-source AI chatbot platform that allows developers and businesses to build, deploy, and host conversational agents. When a Botpress chatbot is deployed on a website, a JavaScript widget embed loads the chat interface in the visitor's browser, manages the real-time conversation exchange, and transmits message content to the Botpress-hosted (or self-hosted) backend for AI processing and response generation.

What This Script Does

The Botpress web channel script (loaded from cdn.botpress.cloud or a self-hosted endpoint) performs the following:

• Widget initialization: Injects a chat launcher button and conversation panel into the page DOM
• Session management: Stores a conversation session identifier in localStorage or a cookie to persist conversation context across page refreshes and navigations within the same site
• Message transmission: Every message sent by the visitor is transmitted to the Botpress backend in real time for processing; the full conversation transcript is stored server-side
• User identification (if configured): When integrated with authentication systems, Botpress can link conversation sessions to authenticated user accounts or CRM contacts
• Analytics (if enabled): Botpress tracks conversation metrics including message count, session duration, and handoff events for chatbot performance analytics
• Integration callbacks: Botpress bots can be configured to push conversation data to third-party CRMs, helpdesk platforms, and email systems on specific trigger conditions

The data footprint depends heavily on how the bot is configured by the deploying organization.

Consent & Compliance

• Consent Category: Functional
• GDPR/ePrivacy: Session identifiers stored in localStorage or cookies for conversation continuity are functional in nature when the visitor explicitly initiates a chat. However, if Botpress is configured to profile visitors before they interact (e.g., pre-loading visitor context from analytics integrations), this processing requires a lawful basis beyond functional necessity. Conversation transcripts containing personal data shared by users must be handled under an appropriate legal basis and disclosed in your privacy notice.
• CCPA: Conversation data including any personal information shared by visitors constitutes personal information under CCPA. Botpress acts as a service provider; ensure your privacy notice discloses chat data collection.
• Data transfer: Botpress Cloud is hosted on AWS infrastructure. Self-hosted deployments give full control over data residency.

Should You Block This Without Consent?

Conditional. A basic Botpress chat widget used solely for customer support or FAQ interaction can be treated as functional and loaded without prior consent, provided it does not pre-profile visitors or set non-essential tracking cookies. If Botpress is configured with analytics integrations, CRM data syncing, or behavioral targeting features, those components require appropriate consent before activation.