Privacy policy
Last updated: October 26, 2026
Draft pending review by our lawyer: this text may change.
Data controller
RETAIL ONLINE LLC, whose address is 2201 Menaul Blvd NE Ste A, Albuquerque, NM 87107, United States. For any question about your personal data, write to privacy@kubocrm.com.
What data we process
Only the data you give us when you subscribe to our newsletter or write to us: your email address and, if you write to us through the contact form, your name, your message and, if you add it, your company. If you joined our waitlist before, we also keep the company you added, if you added one. With each sign-up or message, we keep its date, the language of the website and the version of this policy you accepted, as proof of your consent. To prevent repeated submissions, we also use your IP address, solely as a counter and without linking it to your other data. This website uses no analytics or advertising and does not track you.
Purposes
If you subscribe, we use your data to send you the Kubo Mail newsletter; if you joined our waitlist, only to let you know when Kubo Mail opens; if you write to us, to reply to you. We will not send you anything else without asking you first.
Legal basis
Your consent, which you give by checking the box on the form. You can withdraw it at any time; doing so does not affect the lawfulness of the processing carried out before you withdrew it. If you write to us directly by email, we use your message to reply to you, based on our legitimate interest in answering it or, if you are exercising your rights, on our legal obligation to respond. The IP address counter is based on our legitimate interest in protecting the form from abuse; you can object to it by writing to privacy@kubocrm.com.
Is providing your data required?
To subscribe, only your email address is required; without it we cannot send you the newsletter. To write to us through the contact form, your name, email address and message are required (your company is optional); without them we cannot reply to you. We do not make automated decisions or build profiles with your data.
Retention
Your subscription: until you unsubscribe. Waitlist data: until you unsubscribe or, at the latest, twelve months after launch. Messages you send us: for as long as needed to reply to you, and no longer than one year. The same periods apply to the copies we keep in Kubo CRM and in our mailbox. The copy of your IP address kept for that counter is deleted automatically within 24 hours.
Service providers
Vercel, which hosts this website; Kubo CRM, our own contact management tool, where your sign-up or message is stored as a contact, which is hosted by Railway and Supabase (the database is in the EU, in Ireland) and is reached through Cloudflare; Resend, which sends us the notification of each sign-up and each message by email; Cloudflare, which also receives the emails sent to our addresses and forwards them to our mailbox; and Google, which hosts that mailbox (Gmail), where those emails and those notifications arrive. When we send you the newsletter, it will go out from Kubo Mail, our own newsletter tool, which is hosted by Vercel and Supabase (the database is in the EU, in Ireland) and sends email through Amazon Web Services (Amazon SES). All of them are U.S. companies, like us, or belong to U.S. groups. For each of them, transfers of your data to the United States rely on the European Commission’s standard contractual clauses or, where the company is certified, on the EU-U.S. Data Privacy Framework, as is the case with Google. We do not sell your data or share it with anyone other than these providers. You can ask for a copy of the standard contractual clauses we rely on by writing to privacy@kubocrm.com; the list of certified companies is available at dataprivacyframework.gov.
Your rights
You can ask to access, correct or delete your data, to object to or restrict its processing, or to receive it in a portable format, by writing to privacy@kubocrm.com. To unsubscribe from the newsletter, use the unsubscribe link included in each of its emails or write to the same address; to leave the waitlist, write to the same address. If you believe we are not handling your data properly, you can lodge a complaint with the data protection authority in your country (in Spain, the Spanish Data Protection Agency, aepd.es).