Privacy policy

Substralis (“we”, “us”) operates substralis.com, a grid-data intelligence service for datacenter siting. Substralis is operated by Fehn Originals AS, a company registered in Norway, which is the data controller for the personal data described in this policy. Contact us at hello@substralis.com.

Account data. When you create an account, our identity provider (WorkOS) processes your email address, name, and sign-in credentials on our behalf. We use this to operate your account, scope your data entitlements, and secure the service. Legal basis: performance of a contract.

Waitlist and contact emails. If you join a waitlist or write to us, we keep your email address and message to respond and to tell you when the thing you asked about ships. Legal basis: consent; unsubscribe or ask us to delete it at any time.

Workflow data. Saved searches, watched stations, memos, and share links you create are stored against your account so the product can do its job. Legal basis: performance of a contract.

Usage analytics. We measure product usage (pages viewed, features used) to improve the service, and we collect error reports when something breaks. Legal basis: legitimate interest in operating and improving the service.

Billing data. If you purchase a paid plan, our payment processor handles your payment details — we never see your full card number. Legal basis: performance of a contract.

We do not sell personal data. We do not run third-party advertising.

The grid data we publish is sourced from public TSO, DSO, and regulator publications. Where those publications name companies or registered organisations (e.g. queue applicants), we reproduce what the source published, with provenance — see our methodology.

We use a small set of processors to run the service: identity (WorkOS), hosting and content delivery (Vercel, Fly.io, Cloudflare), managed databases and caching, product analytics (PostHog), error monitoring (Sentry), and email delivery. Each processes personal data only on our instructions under a data-processing agreement. Some processors operate outside the EEA; where they do, transfers rely on the EU Standard Contractual Clauses or an adequacy decision.

Account and workflow data: for the life of your account, then deleted or anonymised within 90 days of account closure. Waitlist emails: until you unsubscribe or the relevant launch ships. Analytics and error logs: up to 12 months. Backups expire on a rolling schedule.

Under the GDPR you can ask for access to, correction of, deletion of, or a portable copy of your personal data; you can object to or restrict processing based on legitimate interest; and where processing is based on consent you can withdraw it at any time. Write to hello@substralis.com and we will respond within 30 days. You can also complain to your local data protection authority (in Norway, Datatilsynet).

We use strictly necessary cookies for sign-in sessions and a remembered country preference. Analytics respects your browser’s settings; we do not use cross-site tracking cookies.

We will update this policy as the service evolves and change the date above when we do. Material changes affecting account holders are announced by email or in the product.