Legal notice and privacy

Website owner and operator

AMVARA CONSULTING S.L.
NIF/CIF: ES-B65707994
Gran Via de les Corts Catalanes 636, Princ. 1B
08007 Barcelona, Spain
Website: https://km0digital.com/
Cloud service: https://cloud.km0digital.com/
Mail service: https://mail.km0digital.com/

The content on this website is provided for general information about Kilometer 0 Digital and related services. It does not constitute legal, financial, technical, or professional advice unless explicitly stated.

AMVARA CONSULTING S.L. strives to keep information accurate and up to date but does not guarantee completeness or suitability for any particular purpose. Use of this website is at your own risk.

Links to third-party sites (including WhatsApp, GitHub, KM0 Cloud, KM0 Mail, and external providers) are provided for convenience. We are not responsible for their content, availability, or privacy practices.

Text, images, software, design, logos, and trademarks on this site are protected by applicable intellectual property laws. Unauthorised reproduction, distribution, or transformation is prohibited without prior written consent from AMVARA CONSULTING S.L.

For legal enquiries: legal@amvara.de

Data controller: AMVARA CONSULTING S.L. (details above).
Privacy contact: legal@amvara.de

Privacy-first approach: km0digital is built with a privacy-first mindset. We are not a large corporation collecting your data to profile you or sell your information. We only process the minimum data needed to provide a useful, reliable service.

This policy describes how we process personal data on km0digital.com (marketing site), cloud.km0digital.com (KM0 Cloud), and mail.km0digital.com (KM0 Mail). Legal pages for these properties are hosted on km0digital.com.

Marketing site (km0digital.com)

• Ideas form (/ideas/): message (required), chosen product scope (required), optional name, locale, IP address, and User-Agent. Submissions are posted to a host spool for a few minutes then destroyed automatically. Your name and the message topic are kept in a GitHub Issue in the repository for the chosen product for follow-up.
• Contact section: no data is stored on the site. Email links open your mail client (legal@amvara.de).
• WhatsApp group link: you leave our site and join a third-party service operated by Meta. Their policies apply: WhatsApp Privacy Policy.
• Cloud user count (/cloud/): no personal data from visitors. The count is fetched at build time via the OpenCloud Graph API using server-side credentials.
• Server logs: IP address, User-Agent, timestamps, and request metadata in nginx and host access logs for security and troubleshooting (typically retained up to 30 days, or longer if required for incident investigation).

KM0 Mail (mail.km0digital.com)

• Account data: email address, password hash, quotas, and aliases for @km0digital.com mailboxes.
• Mailbox content: messages sent and received, attachments, and metadata (headers, dates).
• Webmail (Roundcube): session cookies on mail.km0digital.com when you use webmail (not on the km0digital.com marketing site).
• Operational logs: Postfix, Dovecot, nginx, and Rspamd logs for security, anti-spam, and troubleshooting.

Purposes and legal bases

• Operating the website and KM0 Cloud services (contract and legitimate interest).
• Providing KM0 Mail services (contract and legitimate interest).
• Handling ideas and support requests (legitimate interest and, where applicable, consent).
• Security, abuse prevention, and legal compliance (legitimate interest and legal obligation).

Retention

• Ideas spool files: minutes, then destroyed.
• GitHub Issues from the ideas pipeline: retained while the issue is open and thereafter as project history on GitHub until archived or deleted under GitHub's policies.
• Server access logs: limited period as described above.
• KM0 Cloud account and file data: retained for the life of the account and as required for backups and legal obligations; see the KM0 Cloud section below.
• KM0 Mail mailbox content and account data: retained for the life of the account plus operational backups as described in the km0-mail runbook; deleted when the account is removed unless legal retention applies.

Recipients and subprocessors (verified)

• GitHub (ideas pipeline issue tracking)
• Hetzner (EU hosting, Germany)
• Meta / WhatsApp (optional community link only)
• Let's Encrypt (TLS certificates)
• KM0 Mail stack (self-hosted Postfix, Dovecot, Rspamd, and Roundcube; no external SaaS mail provider for the product)
• OpenCloud stack (KM0 Cloud product infrastructure)

Data is primarily processed within the European Union. Where a provider processes data outside the EU, we rely on appropriate safeguards as required by GDPR.

Your rights

Under GDPR you may request access, rectification, erasure, restriction, objection, and data portability where applicable. You may withdraw consent at any time when processing is based on consent. Contact legal@amvara.de. You may lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

Security

We apply technical and organisational measures including HTTPS, access controls, and operational practices aligned with AMVARA's ISO/IEC 27001:2022 certified management system. See our security page for more detail.

We may update this policy from time to time. Material changes will be reflected on this page with an updated date.

Marketing site (km0digital.com): we do not set cookies on marketing pages today. We do not use analytics or advertising trackers on this site. No cookie consent banner is required for the marketing site in its current form.

KM0 Cloud (cloud.km0digital.com): authentication and session cookies may be set on the cloud domain when you sign in or use the service. These cookies are not loaded on km0digital.com. Session cookies support login and secure access to your account and files.

KM0 Mail (mail.km0digital.com): Roundcube session cookies may be set on the mail domain when you use webmail. These cookies are not loaded on km0digital.com. Session cookies support secure access to your mailbox.

If we introduce cookies on the marketing site in the future, we will update this section and implement appropriate consent where required by law.

KM0 Cloud (cloud.km0digital.com) is a community OpenCloud instance operated by AMVARA CONSULTING S.L. Legal and privacy information for the cloud service is published on this page on km0digital.com.

Data we process

• Account data: registration details, username, email, and authentication data managed via Dex, LDAP, and related identity components.
• Files and metadata: content you upload, file names, sharing settings, and activity metadata stored in OpenCloud.
• Session and auth cookies: set on cloud.km0digital.com to maintain secure sessions (not on the marketing site).
• Operational logs: access and security logs on EU infrastructure for reliability and incident response.

Hosting and location

Cloud infrastructure runs in the European Union (Germany) on Hetzner. Traffic is encrypted with TLS. Backups and operational details are described in our technical blog where applicable.

Your choices

You can access, correct, or delete your cloud data through the service where supported, or contact legal@amvara.de for privacy requests related to your KM0 Cloud account.

KM0 Mail (mail.km0digital.com) provides @km0digital.com mailboxes and Roundcube webmail, operated by AMVARA CONSULTING S.L. Legal and privacy information for the mail service is published on this page on km0digital.com.

Data we process

• Account data: email address, password hash, quotas, and aliases.
• Mailbox content: messages, attachments, and metadata stored in Maildir.
• Webmail session cookies: set on mail.km0digital.com to maintain secure sessions (not on the marketing site).
• Operational logs: access and security logs on EU infrastructure for reliability, anti-spam, and incident response.

Hosting and location

Mail infrastructure runs in the European Union (Germany) on Hetzner. Traffic is encrypted with TLS. We do not use an external SaaS mail provider for the KM0 Mail product.

Your choices

For privacy requests related to your mail account, contact legal@amvara.de. For operational mail incidents, postmaster@km0digital.com.