Privacy Notice

Privacy Notice — Heimdall API

Version 1.2 — 5 October 2026

1. What this is

Heimdall is a centralised identity service. If you have an account with a system that uses it, this notice tells you what it holds about you, why, for how long, and what you can make it do.

It is written to be read by the person it is about. The formal record behind it — legal bases, recipients, transfer mechanisms — is the Data Protection Document .

The version matters. This notice is versioned, and the version in force when your account was created is recorded against it, so it is always possible to say what you were actually told rather than what you would be told today.

2. Who is responsible

Published here because LGPD Art. 41 §1 requires the Encarregado’s identity and contact to be publicly disclosed.

If your account belongs to another organisation’s system, that organisation decides why your data is held, and it is the controller for it — Heimdall processes it on their instructions. You can raise anything with the address above, and it will be answered or passed to them; the Data Processing Agreement sets out which.

3. What is held about you

Your IP address is recorded, with the time, in the service’s logs for every request you make, so that attempts to break into accounts can be detected and investigated. It is also used briefly, in memory, to limit how many sign-in attempts can come from one place in a minute.

Nothing here is sold, and nothing is used for advertising or profiling. No decision affecting you is made automatically.

4. Why, and on what basis

Almost everything here is held because it is necessary to run an account you asked for — LGPD Art. 7 V, GDPR Art. 6(1)(b). The security data is held on legitimate interests (LGPD Art. 7 IX, GDPR Art. 6(1)(f)): defending accounts against people trying to break into them. The erasure records are held because the law requires it (LGPD Art. 7 II, GDPR Art. 6(1)(c)).

We do not ask you to consent to any of it, deliberately. Consent can be withdrawn at any moment, and an identity service that stopped checking passwords when you withdrew it would not be protecting you — it would be broken. Basing it on necessity instead is more honest about what is actually happening.

5. Who else sees it

Data is held in Brazil, and your email address is sent to the United States to deliver the messages above. That is an international transfer, made because sending you the email that activates or restores your account is part of running the account you asked for — LGPD Art. 33 IX with Art. 7 V, and where it applies, the standard contractual clauses in Sinch’s own terms. The detail is in §7 of the Data Protection Document .

If you sign in with Google, nothing about you is sent to Google by us. Google is where your name, address and picture came from — the token it issues when you sign in is checked here against Google’s published certificates, on this server. Your sign-in at Google itself is between you and Google, under their terms.

6. How long it is kept

The full schedule is the Data Retention Schedule . The short version:

“Anonymised” means the name, address and credentials are overwritten and cannot be recovered. The row itself stays, because other records point at it, but nothing in it refers to you any more.

7. What you can do

One of those is honestly marked unavailable. Publishing a notice that promised rights the system cannot yet deliver would be worse than admitting the gap: it is the kind of claim a regulator checks.

You can also complain to a supervisory authority. In Brazil that is the ANPD . If you are in the EEA, it is your national data protection authority — the GDPR applies to this service, and the rights in this notice are yours under it as well as under the LGPD.

If you ask to be erased and you are the last administrator of an organisation’s scope, the request is still recorded and the clock still runs, but it cannot be completed until that organisation appoints another administrator. You will be told if that applies to you.

8. Changes

This notice is versioned. Material changes raise the version, and the version you were shown is recorded against your account.