Data controller
The controller is Nixer, the operator of Diomu. For any privacy question, write to hola@diomu.es.
What data we process
- Account data: email, name, handle, photo, bio, stack, status and any links you choose to add.
- Authentication data: GitHub, Google or Microsoft identifiers if you use those methods, and security metadata such as sign-in time or 2FA status.
- Content: posts, replies, images, code, tags, likes, bookmarks, follows and reports.
- Technical data: IP address, user agent, error logs and security events. Cloudflare may process network data to protect us from abuse.
- Nixo conversations: messages, date, usage and the generated answer. Nixo does not receive your password, email or private settings.
Why we use it
- Create and maintain your account, authenticate you and show you the service.
- Publish and distribute the content you choose to share.
- Send notifications and account-related emails.
- Moderate, prevent abuse and protect the security of the platform.
- Respond to support, rights requests and complaints.
- Understand which features are used to improve the product, using aggregated data where possible.
- Comply with legal obligations.
Legal bases
We process data needed to perform the contract of use, to comply with legal obligations and for our legitimate interests in security, moderation and service improvement. Where the law requires it, we ask for consent, for example for optional communications. You can withdraw consent at any time without affecting prior processing.
Who we share it with
We do not sell personal data or use it for third-party advertising. We share it only with providers needed to operate:
- Supabase: database hosting, authentication and image storage.
- Cloudflare: network, protection, cookieless analytics and AI model execution.
- GitHub, Google and Microsoft: only if you choose to sign in with them.
- A transactional email provider, for magic links and account notices.
- Public authorities, where there is a valid legal obligation.
These providers act as processors or independent controllers depending on the case. We require contractual safeguards where appropriate.
International transfers
We aim to keep data within the European Economic Area. If a provider processes it outside, we use valid mechanisms such as adequacy decisions or standard contractual clauses. You can ask for more information at hola@diomu.es.
How long we keep it
- Account data: while the account is active.
- Deleted content: removed from public view immediately and from primary systems within 30 days. Backups may take up to 90 days to rotate.
- Security and moderation records: up to 2 years, or longer if there is a claim or a legal obligation.
- Nixo conversations: 30 days, unless you delete them earlier.
Your rights
You can request access, rectification, erasure, objection, restriction and portability of your data, and withdraw your consent. Write to hola@diomu.es and state which right you want to exercise. We will respond within the legal deadline. You can also complain to the Spanish Data Protection Agency (aepd.es).
You can delete your account from settings or request it by email. When you delete it, your profile is removed and your content stops being public. Some records may be kept anonymised or blocked due to legal obligations.
Security
We use encryption in transit, access control, database RLS, 2FA for administrators and audit logs. No system is infallible. If you find a problem, write to hola@diomu.es and do not publish details before we can fix it.
Minors
Diomu is for people aged 14 and over. If you are under 18, you need authorisation from your parent or legal guardian. We do not knowingly collect data from children under 14. If you believe an account breaches this rule, tell us and we will review it.
Nixo and automated decisions
Nixo is an AI that may read public content and answer your messages. It does not make moderation decisions about accounts and is not used for advertising or commercial profiling. Its answers may be inaccurate. You can disable mention replies in settings.
Changes
We may update this policy. We will publish the last reviewed date and, if the change is important, announce it on the site or by email.