Terms of service

These terms govern the use of Heimdal, a face-recognition clock-in and clock-out service. By using Heimdal — as an organization administrator, a manager, or an enrolled member — you agree to them. Plain words are used on purpose; where these terms and the law disagree, the law wins.

The service

Heimdal lets an organization enroll its members and record their clock-in and clock-out events through a browser-based kiosk using face recognition. It includes enrollment links, watch links, reports, and CSV exports. Organizations are set up by us after a request — there is no self-serve registration.

Accounts and responsibilities

• The organization is responsible for enrolling only people it has authority to enroll, for the wording of its consent notice, and for obtaining any consent the law requires — including a parent or guardian's consent where members are minors.
• Administrators must keep their sign-in credentials and their kiosk, invite, and watch links reasonably protected, and rotate a link they believe has leaked.
• The service may not be used to monitor people without their knowledge, or for any unlawful purpose.

Payment

• Plans are prepaid per member seat for 1, 3, 6, or 12 months at the rates shown at checkout. There is no card on file and nothing renews automatically.
• When a prepaid period ends without renewal, clocking and enrollment pause. Records are kept and everything resumes when the plan is renewed.
• Payments are processed by PayMongo (Philippines) or Lemon Squeezy (elsewhere, as merchant of record). Amounts already paid cover the period they bought; we do not offer pro-rated refunds for unused time, except where the law requires one.

Attendance records

Face recognition is a strong deterrent, not an infallible witness. Clock events include snapshots precisely so that disputes can be settled by a person looking at the evidence. The organization — not Heimdal — remains responsible for decisions it makes based on attendance records, such as payroll or disciplinary action.

Data

How personal data is collected, used, and deleted is described in the privacy policy, which is part of these terms. In short: consent precedes enrollment, snapshots delete themselves after 90 days, and removing a member permanently erases their biometric data.

Availability and liability

We work to keep Heimdal available and dependable, but it is provided as-is, and an internet service cannot promise zero interruptions. To the extent the law allows, our total liability for any claim is limited to the amount the organization paid for the service in the three months before the claim arose.

Ending the service

An organization can stop using Heimdal at any time and request deletion of its data. We may suspend an account that violates these terms — where practical, with notice and a chance to fix the problem first.

Contact

Questions about these terms: heimdal@bearlog.app.