Terms of Service
1. The service
Heimdall is an uptime monitoring service operated by Warewave Teknoloji Sanayi ve Ticaret Limited Şirketi ("we"). By creating an account you agree to these terms on behalf of yourself and the organisation you register.
2. Accounts
You must give accurate information and keep your password safe. The account owner is responsible for the users they invite and for the plan.
3. Plans, add-ons and fair use
Plans and prices are listed on the pricing page and are charged monthly or yearly in Turkish lira, plus 20 % VAT. Prices are set in US dollars and converted to a TL list price every quarter; your subscription keeps the TL price it started the period with. Add-ons renew with your subscription.
Each plan includes a monthly SMS and call quota under fair use, counted per calendar month. Above 80 % we warn the owner; above 100 % only the first SMS or call per recipient and incident change goes by phone; above 300 % SMS and calls pause until the next month. Confirmation messages never count.
Alerts that do not go by phone because of fair use are delivered through your other channels (e-mail, chat) and shown as such on the incident; they are never silently dropped.
"Unlimited" means no fixed limit under normal use; we may contact you about usage far beyond what is typical. Upgrades take effect immediately and are charged pro rata. A cancellation takes effect at the end of the paid period; to move to a lower plan, cancel and choose the lower plan when the period ends. Nothing is deleted when a plan gets smaller: what exceeds the new limits is paused.
4. SMS and calls
SMS and calls are sent only to Turkish (+90) numbers whose owners accepted our confirmation link. Add only numbers of people who expect alerts from you.
Delivery depends on mobile operators and networks outside our control. Heimdall is not an emergency service, and alerts may be delayed or not delivered; configure more than one channel for critical systems.
5. Acceptable use
Monitor only systems you are authorised to monitor, at reasonable intervals. Do not use Heimdall to attack, overload or probe third-party systems, to send messages other than alerts, or to break the law.
6. Private locations
If you run the Heimdall probe in your own environment, you are responsible for that environment and for keeping probe tokens secret. Results from your private locations only affect your own monitors.
7. Your data
You keep ownership of the data you put into Heimdall. We process it only to provide the service, as your processor, under the data processing terms in section 12. Personal data is handled as described in the Privacy Policy and the KVKK Privacy Notice.
8. Availability
We aim for high availability but give no service level guarantee unless agreed in writing. Status pages are served separately so they keep working if the control plane is down.
9. Cancellation and termination
You can cancel at any time; the plan stays active until the end of the paid period. Refunds are described in the Cancellation and Refund Policy; a purchase is also subject to the Pre-Information Form and the Distance Sales Contract shown before payment. We may suspend accounts that break these terms. After termination you can export your data for 30 days.
10. Liability
To the extent permitted by law, our liability is limited to the fees you paid in the 12 months before the claim, and we are not liable for indirect damages or for losses caused by alerts that were delayed or not delivered.
11. Law and changes
These terms are governed by the laws of the Republic of Türkiye; the courts and enforcement offices of İstanbul (Çağlayan) are competent, without prejudice to mandatory consumer protection rules. We announce material changes by e-mail at least 30 days in advance.
12. Data processing terms
This section applies to the personal data your organisation puts into Heimdall (for example your colleagues' names and e-mail addresses, incident texts and status-page subscribers). For that data your organisation is the data controller and Warewave Teknoloji Sanayi ve Ticaret Limited Şirketi is the data processor.
We process that data only to provide the service and on your documented instructions — the settings you make in the product are such instructions — and for no purpose of our own.
Everybody who has access to the data on our side is bound to confidentiality. We protect the data with technical and organisational measures appropriate to the risk: encryption in transit, encryption of phone numbers at rest, access limited to the people who need it, logging of administrative access, and backups.
We use the sub-processors named in the KVKK Privacy Notice (hosting, e-mail delivery, payments, mobile operators) and tell you before we add or replace one; if you object on reasonable grounds you may end the contract.
We help you answer requests of the people concerned and meet your obligations under the law, as far as this is possible for us. If we learn of a breach of that data we tell you without undue delay, and no later than 48 hours after we became aware of it, with what we know.
When the contract ends you can export your data for 30 days; after that we delete it, except for what the law requires us to keep.