Privacy Policy

This policy describes how CLM Cloud Solutions S.L. ("we", "KubeBolt") handles the personal data we collect through kubebolt.io. It is written to comply with the GDPR and Spanish data protection law (LOPDGDD).

1. Who is the data controller

The controller is CLM Cloud Solutions S.L., a company incorporated in Spain. To exercise any right or ask questions about this policy, write to hello@kubebolt.io.

2. What we collect

We only collect what's strictly needed to operate the site, the waitlist, and the feedback channel:

• Waitlist: your email address when you submit the waitlist form. We also record your IP address, browser User-Agent, and the page that originated the request (Referer) for security and abuse-prevention purposes.
• Feedback form: your email address and the message you write us at kubebolt.io/feedback, along with the optional category you pick. We also record IP, User-Agent, and Referer for security and abuse prevention. We use your email solely to reply to your message. If you tick the contact checkbox (design-partner program), we treat that consent as the legal basis to contact you for commercial purposes; you can withdraw it at any time by writing to hello@kubebolt.io.
• Anonymous usage metrics: we use Vercel Web Analytics (cookieless), and — if you consent — also Google Analytics 4 via Google Tag Manager. GA4 uses cookies (_ga, _ga_*) that activate only after you accept the banner. Until then we operate under Consent Mode v2 with every category denied by default.
• Server logs: our providers retain technical logs (IP, timestamps, HTTP errors) for limited periods to diagnose operational issues.

3. How we use it

• To send your signup confirmation and, occasionally, product updates and your invitation to KubeBolt Cloud once available.
• To prevent form abuse (per-IP rate limiting).
• To understand aggregate site traffic (page views, sources), never at the individual level.

4. Legal basis

We process your data under the following Article 6 GDPR bases:

• Consent (Art. 6.1.a): when you sign up for the waitlist and agree to receive our emails, or when you tick the contact checkbox on the feedback form.
• Legitimate interest (Art. 6.1.f): for service security, abuse prevention, and improving the site through aggregate metrics.

5. Subprocessors

To operate the site we rely on the following providers, each subject to their own data protection guarantees:

Provider	Purpose	Location
Vercel Inc.	Site hosting and cookieless analytics	USA / EU
Google LLC	Google Tag Manager + Google Analytics 4 (consent-gated)	USA / EU
Resend	Transactional email delivery	USA
Managed Postgres (via Vercel Marketplace)	Waitlist storage	EU

6. Retention periods

• Waitlist email: for as long as you want to stay subscribed. You can unsubscribe at any time.
• Signup metadata (IP, User-Agent, Referer): up to 24 months, then anonymized or deleted.
• Server logs: according to the provider's policy, typically 30 days.

7. Your rights

As the data subject you can exercise the following rights:

• Access: know what data we hold about you.
• Rectification: correct inaccurate data.
• Erasure: have your data deleted ("right to be forgotten").
• Portability: receive your data in a structured format.
• Objection and restriction: object to processing or have it restricted.
• Withdraw consent at any time.

To exercise any of these rights, email hello@kubebolt.io. We will respond within the legal deadline of one month. If you are not satisfied with our response, you may file a complaint with the Spanish Data Protection Agency (AEPD).

8. International transfers

Some of our subprocessors (Vercel, Resend) are based in the USA. Transfers are made under the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission, as applicable.

9. Cookies

Cookies fall into two groups. Strictly technical cookies (load balancing, waitlist form session) are exempt from consent under the GDPR and are always active. Analytics cookies (Google Analytics 4: _ga, _ga_*) require explicit consent and run under Consent Mode v2 — denied by default, activated only when you click Accept on the banner. See the cookies page for per-cookie detail, duration and purpose.

10. Minors

The site targets technology professionals. We do not knowingly collect data from children under 14.

11. Changes to this policy

If we change this policy materially, we'll notify you through the site itself and, where appropriate, by email. The "last updated" date in the header always reflects the current version.

12. Contact

CLM Cloud Solutions S.L.
Email: hello@kubebolt.io
Web: clmcloudsolutions.es