Privacy policy

Data controller

The controller of your personal data is AGUMAIK TECH, SLU, CIF B70910922, registered address Gran Via de Carlos III, 98, 10, 08028 Barcelona. Contact: [email protected].

Data we process

Account email address; billing data you enter in the billing profile (name, company, tax ID, address); registrant contact sets (name, organization, email, phone, postal address) used for domain registrations; and order history (domains ordered, amounts, invoices).

Purposes and legal basis

We process your data to provide the domain registration service and manage your account (performance of a contract), to issue legally required invoices (legal obligation), and to prevent abuse of the service (legitimate interest). We do not use your data for advertising or profiling.

Processors and international transfers

We share the minimum data necessary with the following providers:

our upstream ICANN-accredited domain registrar: your registrant contact data is transmitted to the corresponding domain registry and published in WHOIS as required by domain policies. The registrar and the registries may be located outside the EEA.

Mollie (payments): billing and payment data is processed by Mollie under its own privacy policy for payment processing, invoicing, and fraud prevention.

DigitalOcean (hosting): application and database hosting, including data centers outside the EEA.

Cloudflare (DNS, CDN, and email relay): network traffic, DNS, and transactional email transit.

Retention

Audit logs are retained for 24 months. Invoices and billing records are retained for the period Spanish tax and commercial law requires (4 to 6 years depending on the record). Account data is deleted when you delete your account, except for the records whose retention is legally mandated.

Your rights

You may exercise your rights of access, rectification, erasure, restriction, portability, and objection. Data erasure is available directly from the CLI with the command domain-cli account delete, which deletes your account and personal data. You may also write to [email protected]. If you are in the EU/EEA you may lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (www.aepd.es).

Security

Access to the API requires personal bearer tokens; traffic is encrypted in transit; audit logging records every account action. The control panel token is stored in your browser's local storage — see the Cookies and local storage page.