Privacy policy

Last updated: June 2026.

1. Controller

NiiRo.ai, Owner: Robin Kolb, Carrer de S’Illot 13, 07400 Alcúdia, Spain. Email: info@niiro.ai.

2. Data we process

Account & profile. When you set up your Crewtree, we process your email address and the profile data you provide (username, display name, bio and profile image). Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Content you enter. Links, blocks, social profiles, uploaded images and designs form part of your public bio page and are processed to provide that page (Art. 6(1)(b) GDPR). This content is publicly accessible.

Server logs. When pages are requested, technically necessary data (such as IP address, time and requested resource) is processed briefly to maintain operation and security (Art. 6(1)(f) GDPR).

3. Privacy-friendly analytics

Our analytics are cookieless and operate only with your consent (Art. 6(1)(a) GDPR). We use neither tracking cookies nor third-party trackers. IP addresses are never stored in plain text and are processed only as a salted hash for deduplication. Your browser’s Do Not Track signal is respected. Aggregated statistics are anonymised after the retention period. You can withdraw your consent at any time with effect for the future.

4. Profile owner features (processing on behalf)

If a profile owner enables features such as contact forms, lead capture or orders, that profile owner collects the visitor data entered there under their own responsibility; Crewtree acts as a processor for the profile owner in this respect.

5. Hosting & processors

We use carefully selected service providers as processors (Art. 28 GDPR) and have concluded the appropriate data processing agreements with them:

• Vercel — Hosting and delivery of the application.
• Supabase — Database, authentication and file storage.

Where this involves a transfer to third countries, it takes place on the basis of appropriate safeguards, such as the EU Standard Contractual Clauses.

6. Retention

We process account and profile data until you delete your account or remove the data. Analytics data is retained only in aggregated or anonymised form and deleted after the retention period. Data that we must retain for legal reasons is subject to restricted processing until the relevant period expires.

7. Your rights

Under the GDPR, you have in particular the following rights:

• Access (Art. 15), rectification (Art. 16) and erasure (Art. 17),
• Restriction of processing (Art. 18) and data portability (Art. 20),
• Objection to processing based on legitimate interests (Art. 21),
• Withdrawal of consent with effect for the future (Art. 7(3)).

To exercise your rights, send a message to info@niiro.ai. You also have the right to lodge a complaint with a data protection supervisory authority.

8. Cookies

We use only technically necessary cookies required for sign-in and operation (Art. 6(1)(f) / (b) GDPR). We do not use tracking or marketing cookies.