Saltar al contenido
KumoYami
Mi cuentaComprar

Privacy policy

1. Data controller

  • Owner: Maria Teresa Nogueras Cebrero
  • NIF: 26205197D
  • Address: Camino de ronda, España
  • Email: admin@hostarys.com
  • Website: kumoyami.com (https://kumoyami.com)

This policy explains what personal data we process on kumoyami.com and in the services that come with it: the payment, the delivery of the license, the license server and the program's download registry.

2. What data we process, why and for how long

  • Purchase and invoice. When you buy, you give us your name or company name, your email address, your billing address and your country and, if you buy as a business, your tax or VAT number. With them we keep the order: the plan, the amount, the date, the status of the payment and the identifiers Stripe assigns. We use them to sell you the license, issue the invoice and send you the key. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and tax and accounting obligations (Art. 6(1)(c) GDPR). They are kept for the period required by law: six years, under article 30 of the Spanish Commercial Code.
  • Record of consent. When you press «Pay» we record what you accept: whether you buy as a consumer or as a business, the version and fingerprint (SHA-256) of the EULA and the Terms of sale, the text of each box you tick, the date and time, your IP address and your browser data (user agent). It proves the contract and, if you are a consumer, your consent to immediate delivery and the loss of the right of withdrawal. Legal basis: performance of the contract and our legal obligations as a seller (Art. 6(1)(b) and (c) GDPR). It is kept as long as the purchase data.
  • Delivery email. The confirmation of the contract, the license, the access to the downloads and the copy of the EULA and the Terms reach you by email, sent through Resend. We keep the address and the delivery status with the order. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). They are kept with the order.
  • My account. To sign in to My account we email you a single-use link. For each session we keep the date, the IP address and your browser data, to protect it and to show you your licenses, servers and invoices. Legal basis: performance of the contract and our legitimate interest in protecting your account (Art. 6(1)(b) and (f) GDPR). Sessions are deleted when you sign out or after 30 days at most.
  • License activation. Each KumoYami installation contacts our license server when it is activated and then once a day. It sends the license ID, a random installation ID, the domain of your website and the program version; with the connection we also receive the server's IP address. This is used to activate and renew the license, apply the number of servers of your plan, give you the included updates and detect unauthorised copies. We never receive your files, your visitors' data or the content of your website. Legal basis: performance of the contract and our legitimate interest in protecting the license (Art. 6(1)(b) and (f) GDPR). It is kept while the license exists; only the latest events of its history are kept.
  • Program downloads. KumoYami is downloaded from our private Docker registry with your license credentials. For each download we keep the date, the version, the IP address and the Docker client that requests it. This gives you access to the versions included in your license and helps detect abuse, such as shared credentials. Legal basis: performance of the contract and our legitimate interest (Art. 6(1)(b) and (f) GDPR). It is kept while the license exists; only the latest downloads of each license are kept.
  • Support. If you write to admin@hostarys.com, we use your message and contact details to reply. Legal basis: performance of the contract, if you are a customer, or our legitimate interest in answering your request (Art. 6(1)(b) and (f) GDPR). It is kept as long as needed to help you and then for the limitation period of any liability.
  • News. Only if you tick the box when buying, we use your email to send you KumoYami news and offers. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by writing to us. It is kept until you unsubscribe.
  • Browsing. When you visit this website, the server receives your IP address and technical data about your browser, needed to show you the pages and protect them from abuse (for example, by limiting payment attempts). There are no analytics and no profiling, and this data stays in the server's technical logs only as long as needed for security. Legal basis: our legitimate interest in providing the service securely (Art. 6(1)(f) GDPR).

We do not sell your data, use it for advertising, make automated decisions or build profiles. The files you publish with KumoYami never go through our servers: the program runs on yours.

3. Payments

Payments are made on Stripe's page (checkout.stripe.com). We never see or keep your card details. Stripe also processes payment data as an independent controller, to meet its own obligations (such as fraud prevention), under its privacy policy: https://stripe.com/privacy

4. Recipients

We do not disclose your data to third parties unless required by law. These providers take part in providing the service:

  • Stripe Payments Europe, Ltd. (Ireland): payments and invoices.
  • Resend (United States): sending the delivery and confirmation emails.
  • The hosting provider of the servers of this website, the license server and the download registry.
  • The storage provider of our backups, which only keeps encrypted files it cannot read.
  • Public authorities, such as the Spanish Tax Agency, and the courts, when required by law.

5. International transfers

Resend provides its service from the United States, and Stripe may transfer payment data to its US parent company, Stripe, Inc. These transfers rely on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

6. Your rights

You can access, correct and delete your data, object to or restrict its processing, ask for its portability and withdraw any consent you have given at any time. To do so, write to admin@hostarys.com stating which right you exercise and how to identify you.

Some data, such as invoices, must be kept even if you ask for its deletion while the legal obligation lasts; during that time it is only used to meet that obligation.

If you believe we have not handled your request properly, you can file a complaint with the Spanish Data Protection Agency: https://www.aepd.es

7. Children

Purchases on this website are reserved for adults. We do not knowingly process data of minors.

8. Security and changes

This website, the license server and the download registry only work over encrypted connections (HTTPS). Access to customer data is restricted to the owner. This policy may change to reflect the law or the service; the version in force is always the one published here.

Last updated: 31 October 2026.