Netus AI

GDPR overview

The privacy policy claims GDPR compliance explicitly and repeatedly, naming consent as its legal basis and describing granular consent processes for each purpose. It recognises access, rectification, restriction, objection, blocking, anonymisation, erasure and portability, plus the right to complain to a supervisory authority, and commits to answering within one month and to notifying breaches within 72 hours. Rights are exercised through a single address, support@netus.ai. What is missing is as telling: no Article 27 EU representative, no named DPO, no data processing agreement, no subprocessor list, no hosting country, and no legal form for the controller, which is identified only as Netus AI. A GDPR Actions page and an opt-out page are mentioned but not linked. The policy has been in force since 25 December 2022 and has not been revised since, while the terms were updated in June 2025.

Who owns the data?

Under the terms of service, Netus AI claims no ownership in user content: what you submit stays yours. Submitting it does, however, grant the vendor a non-exclusive, transferable, worldwide, royalty-free and sublicensable licence to use, copy, modify, create derivative works from, distribute and publicly display that content, limited to operating and providing the service. Generated output is licensed back to the user on non-exclusive, transferable, worldwide and perpetual terms for lawful business use, while Netus AI retains all rights to the content it makes available through the service, generated content included. Deleting content does not guarantee that every copy disappears.

Reuse rights

Yes, generated content can be reused without asking again: the licence granted to the user is perpetual, worldwide, transferable and sublicensable, and covers using, copying, modifying, redistributing and publicly displaying the output for lawful business purposes. Two limits frame that freedom. The terms bar using the service for the benefit of a third party or for commercial purposes the agreement does not permit, and the fair use policy forbids reselling or redistributing the tools themselves. Netus AI also keeps its own rights over the content it makes available, generated content included, so what the user receives is a right to use rather than a transfer of ownership. On the input side, the vendor states that model training is switched off with every provider its chat routes to; no equivalent statement is published for the writing tools.

Data retention & training

Hosting summary

No hosting country or region is declared anywhere on the site. The privacy policy states only that personal information may be transferred to Netus AI's servers and databases, locally or globally, and acknowledges that different jurisdictions govern privacy and data security differently, without naming any of them. There is no trust or security page, no certification, no data processing agreement and no subprocessor list. For the chat product, data necessarily transits the APIs of OpenAI, Anthropic, Google and xAI, which the vendor says retain it briefly for abuse monitoring under their own published policies before deleting it; those four are named and linked, but never presented as a subprocessor list. One technical signal exists and should not be over-read: the domain's A record resolves to a DigitalOcean address geolocated in the United States. That describes where the website is served, not where customer data is stored. Buyers with a data residency requirement have nothing contractual to rely on here.