Skip to content
Namiru.ai
Sign Up

Privacy and trust

Namiru is built for GDPR and the EU AI Act. This page shows exactly what the chat does with your visitors' data, where it goes and how long it stays, so you can check it yourself.

Last updated: 30 September 2026

What we do by default

Hosted in Germany
Your account, assistants, knowledge and conversations are stored on our servers at Hetzner in Germany.
Every chat says it is AI
A small "Sent by AI" note sits under the first message, as Article 50 of the EU AI Act requires. The assistant is also instructed never to claim it is human.
Nothing stored before the chat opens
The widget writes nothing to a visitor's browser until they open the chat or start using it.
A DPA is part of our Terms
Processor terms under Article 28 GDPR apply to every customer automatically, with a public list of the providers we use.

What the chat does in a visitor's browser

The widget stays quiet until the visitor asks for it.

Before the visitor opens the chat

Empty
  • The chat button appears with your colours and greeting.
  • Nothing is written to the visitor's device.
  • With the chat button, no conversation starts on our servers.

After the visitor opens the chat

1 chat ID, 30 days
  • A random visitor ID is kept for 30 days after the last chat, so a reload continues the conversation.
  • A session ID lives only in the current browser tab.
  • If the visitor closes a greeting, that choice is remembered.

Want no request to Namiru at all before a click? Use the "Load only when clicked" install code in your dashboard. It shows a plain chat button and loads Namiru only when the visitor clicks it. We also recommend keeping the chat off login, account and payment pages.

EU AI Act

  • The note "Sent by AI" appears under the first message in every conversation, in the visitor's language. Branding options cannot remove it.
  • AI replies are marked in a machine-readable way (data-ai-generated) in the chat and in transcript emails.
  • The assistant is told to say it is an AI whenever someone asks, even if your own instructions describe a person.
  • Replies written by your team during a live handoff are shown as human replies, not as AI.

Who processes data for us

These are the providers that can receive personal data from Namiru. We tell customers before we add a new one.

  • Hetzner Online GmbH

    What for
    Servers, databases and email
    Location
    Germany

  • OpenRouter, Inc.

    What for
    Routes chat messages to the AI model
    Location
    USA

  • Alibaba Cloud

    What for
    Runs the AI model that writes chat replies
    Location
    Singapore, China

  • AI model providers chosen by OpenRouter

    What for
    Write short summaries of conversations for you
    Location
    Varies, may be outside the EU

  • Stripe

    What for
    Payments. When the checkout shows a purchase as sold through Link, a Stripe service, Link is the seller.
    Location
    Ireland, USA

  • Google

    What for
    Google sign-in, and Calendar or Drive if you connect them
    Location
    Ireland, USA

  • Slack, Discord, Telegram, Meta, browser push services

    What for
    Notifications you choose to turn on
    Location
    Varies

For providers outside the EU we rely on the EU-US Data Privacy Framework where a US provider is certified, and otherwise on the European Commission's Standard Contractual Clauses.

On namiru.ai itself we also use Google Analytics, Google Ads and the OpenAI Ads Measurement Pixel, only after cookie consent, and Instantly for our own outreach emails.

Less data by design

  • Visitor IP addresses are never sent to outside lookup services. The country is worked out on our own servers from a local database.
  • Chat and analytics records keep only a hash of the IP address, made with a secret key.
  • Chat message logs are deleted after 90 days, security events after 180 days and website analytics after 13 months.
  • You can delete any conversation from your dashboard, for example when a visitor asks you to.
  • We do not use your conversations to train models of our own.

Your part as the website owner

You decide what the assistant does, so you are the controller of your visitors' data. Mention Namiru in your privacy policy. You can adapt this text:

Text for your privacy policy

Our website uses a chat assistant provided by Crowie s. r. o. (Namiru.ai), Lipovník 187, 049 42 Lipovník, Slovakia, which processes chat messages on our behalf. Replies are generated by AI: messages are processed through OpenRouter, Inc. (USA), Alibaba Cloud (Singapore, China) and other AI model providers selected by OpenRouter. Conversation data is stored in Germany. When you open the chat, a random ID is stored in your browser for 30 days after your last chat so the conversation can continue. We keep conversations as long as we need them to answer you, and you can ask us to delete them at any time.

Security

Data is encrypted in transit with TLS. Credentials you give us for data feeds, webhooks and notification channels are stored encrypted (AES-256-GCM). Access to production systems is limited, and we review the service for security issues regularly.

Questions or requests

Write to us for a signed copy of the DPA, a security question, or a data request.

patrik@namiru.ai