Privacy Policy

Website: https://heimdall.yops.cloud
Effective: from October 10, 2026

This policy explains which personal data is processed when you visit this website or contact us through it, why, who it is shared with, and how you exercise your rights. It follows the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018).

In short: this website has no forms, no accounts or login, and uses no tracking or advertising cookies. What exists is the technical access log kept by the hosting provider and any contact you choose to start with us by WhatsApp or e-mail.

1. Who is responsible for your data

The controller of the personal data processed through this website is:

• Yops Cloud LTDA, CNPJ 30.758.604/0001-62
• Address: Rua Cravinhos, 88, Jardim Paulista, Ribeirão Preto – SP, CEP 14090-112

Data Protection Officer (Encarregado): Adolfo Fonzar — [email protected]

The DPO is the channel for any request or question about this policy and about your data.

2. What this policy does not cover

This policy covers the institutional website. Heimdall, the software, runs on the customer company's own infrastructure, and the data customers process in it is not covered by this policy.

3. What data we process, where it comes from, and why

3.1. Technical access logs

What data: IP address, browser and system identification (user agent), date and time of access, and the page requested.

Where it comes from: your browser generates it automatically when loading any page. It is recorded and stored by the hosting provider, Cloudflare (section 4).

Why: to deliver the website, keep it available, and protect it against abuse and attacks (for example, automated traffic and denial of service).

Legal basis: legitimate interest (Art. 7, IX) in operating and protecting the website and, where applicable, compliance with the legal obligation to retain application access logs (Art. 7, II, together with Art. 15 of the Brazilian Internet Civil Framework, Law No. 12,965/2014).

Fonts and scripts are served from the website's own domain. No third-party service (such as font libraries or public CDNs) receives your IP because you opened a page here.

3.2. Sales contact by WhatsApp or e-mail

How it works: the contact buttons on the website open a WhatsApp conversation with Yops (wa.me link, number +55 16 98855-3557), with a pre-written message stating which page of the website you came from. You can edit or delete that message before sending it. The website itself receives and stores nothing: contact only begins if you send the message. Alternatively, write to [email protected].

What data: whatever you give us in the conversation — usually name, phone number, e-mail, company and job title —, the content of the conversation, and the page of origin stated in the opening message. On WhatsApp we also receive your account's number and profile name.

Why: to answer your contact, present Heimdall, and conduct the commercial negotiation with your company.

Legal basis:

• carrying out preliminary procedures related to a contract, at the data subject's request (Art. 7, V) — answering what you asked and negotiating a purchase;
• legitimate interest (Art. 7, IX) — maintaining the business relationship with the company you represent, including following up on the subject you raised. You may object to this at any time (section 8).

We do not use this data to send advertising unrelated to the contact you started, and we do not sell it.

4. Who we share data with

We do not sell or rent personal data. We share it only with the providers needed for the website and the contact channels to work:

Your use of WhatsApp is also subject to WhatsApp's own terms and privacy policy, which you accepted when creating your account. Yops does not control how Meta processes the data it collects to operate its service.

We may also share data when required by law or by order of a competent authority, or to exercise rights in judicial, administrative or arbitration proceedings (Art. 7, VI).

5. International transfers

Cloudflare and Meta process data on servers outside Brazil, including in the United States; the same may apply to Google (Google Workspace). These transfers follow Art. 33 of the LGPD and ANPD regulations, based on the standard contractual clauses approved by the ANPD (Resolution CD/ANPD No. 19/2024) or on the other Art. 33 safeguards each provider offers in its data processing terms.

6. How long we keep data

When the period ends, the data is deleted or anonymized. You may ask for deletion earlier (section 8), except where the law requires us to keep it.

7. Security

The website is static: it has no database, no forms and no logged-in area, which reduces what can be exposed. All traffic uses HTTPS. Access to sales conversations and e-mails is restricted to the Yops staff who handle the contact.

No measure eliminates all risk. If a security incident occurs that may cause you relevant risk or harm, we will notify you and the ANPD, as required by Art. 48 of the LGPD.

8. Your rights

The LGPD (Art. 18) gives you, as data subject, the right to:

1. confirmation that we process your data;
2. access to the data;
3. correction of incomplete, inaccurate or outdated data;
4. anonymization, blocking or deletion of unnecessary or excessive data, or data processed unlawfully;
5. portability of the data to another provider;
6. deletion of data processed based on consent, where applicable;
7. information about who we share your data with;
8. information about the possibility of not consenting and its consequences, where processing depends on consent;
9. withdrawal of consent, where applicable;
10. objection to processing based on legitimate interest, if it does not comply with the law;
11. review of decisions made solely by automated processing (Art. 20). This website and our contact process make no such decisions.

How to exercise them: write to the DPO at [email protected]. We may ask for information to confirm your identity before acting, so as not to hand your data to someone else.

Response time: confirmation of processing or access in simplified form is provided immediately; a complete statement within 15 days of the request (Art. 19). If we cannot comply, we will tell you why.

This service is free of charge.

9. Cookies

This website uses no cookies — not for tracking, advertising or measurement — and no equivalent technology (such as pixels or browser fingerprinting) to recognize you.

If this changes, we will update this policy before the change takes effect, state which cookies will exist and why, and ask for your consent before setting any cookie that is not strictly necessary for the website to work.

10. Children and adolescents

This website is aimed at companies and professionals. It is not intended for children or adolescents, and we do not knowingly process their data. If you become aware of such a case, tell the DPO so the data can be deleted.

11. Changes to this policy

We may update this policy when the website, our providers or the law change. The version in force is always at this address, with the effective date at the top. When a change is significant — for example, a new type of data or a new use — it will be highlighted on the website.

12. Contact and the ANPD

• DPO: Adolfo Fonzar — [email protected]
• Yops Cloud LTDA: Rua Cravinhos, 88, Jardim Paulista, Ribeirão Preto – SP, CEP 14090-112

If you believe your request was not met, you may file a petition with the Brazilian National Data Protection Authority (ANPD) at https://www.gov.br/anpd.

This policy is a translation of the Portuguese original. In case of any discrepancy between the two versions, the Portuguese version prevails.