Legal

Privacy Policy

This page is being finalised with counsel. In the meantime, here is what is verifiably true about how CallHeim handles data — stated as facts, not as a policy.

2 of the 4 documents a security review usually asks for are published today. The two that are not are the two on these legal routes, and they are marked pending rather than filled with placeholder text that reads like a contract.

This page is being finalised with counsel. CallHeim is pre-customer, card payments are not switched on, and no contract has been signed with anyone. Rather than publish text nobody has reviewed, this page says what is true today instead.

What is true today, regardless

These are facts about how the platform handles data, verified against the running system. They are not a privacy policy and do not substitute for one.

  • Application data is stored in AWS us-east-1. Page e-mail is sent through Resend and contains the recipient address, the incident title and alert text and an acknowledge link. Phone-number verification codes are sent through Twilio, and if a responder enables SMS or voice notifications, those messages, which carry the incident title and alert text, also pass through Twilio. The sign-in page at app.callheim.com loads its fonts from Google Fonts. No incident data is sent to an external language model.
  • Reads and writes are scoped by the API authorization rule to the caller’s tenant, or to the caller’s own user for personal records, and custom operations enforce the tenant in server-side code. CallHeim is multi-tenant on a shared database.
  • The audit log is append-only: no client can modify or delete an entry.
  • callheim.com is a static site that sets no cookies and loads no third-party scripts, fonts or trackers. We use no advertising or behavioural-tracking scripts on the site.

Where your data goes, in full →

Need this before we do?

If you are evaluating CallHeim and need reviewed a privacy policy to proceed, that is a legitimate blocker and we would rather hear it than lose the evaluation quietly.

No contact address is published yet. Start with the security page or the FAQ — most evaluation questions are answered on one of those two.

See also Terms of Service.

CallHeim

The legal text is not finished. The facts above are.

CallHeim helps teams stay in control when critical systems are not. Explore the platform, connect one source, and send yourself a page.

Explore the platformRead the FAQ

Early access · every workspace starts with a 14-day trial for up to 5 seats, no card required