Controller
Substring AG, Lindenhofstrasse 1, CH-3048 Worblaufen, Switzerland. Data protection questions: hello@substring.ch.
Representative in the EU under Art. 27 GDPR: Eric Rufer, c/o Andrea Schilling, Zum Wehr 3, 64739 Höchst im Odenwald, Germany.
What we process and why
- Account: email address, password (stored only as a hash), interface and target languages, time zone, notification settings — to provide the service, on the basis of the contract with you.
- Campaigns, company profile and your feedback on matches — to find the tenders you asked for.
- Team: the email addresses of colleagues you invite — to send the invitation and give them access.
- Billing: company name, billing address, country and, if you provide it, VAT number. Stripe collects these at checkout; we keep the customer number, plan and subscription status. Card details never reach us.
- Operation: error and access logs, sign-in attempts — legitimate interest in running the service securely. Logs are deleted after 30 days.
Contact persons in contract notices
Contract notices contain contact persons of the contracting authority — name, email, telephone. We keep them in the raw data because the source delivers them as part of the record, but we do not display them, do not include them in search results and do not send them to any translation or AI model. You find them at the source.
Service providers
We work with the following processors, each bound by a data processing agreement:
- Infomaniak Network SA, Geneva, Switzerland — hosting, backups and the AI models for translation and search, all in data centres in Switzerland. The AI models receive notice texts, your campaign texts and your company profile — never contact persons.
- Nuntly — delivery of our emails (invitations, confirmations, match alerts). Servers in the EU (Amazon Web Services, Ireland).
- Stripe Payments Europe Ltd., Dublin, Ireland — payment and invoicing. Where Stripe processes data outside Switzerland and the EU, it does so on the basis of standard contractual clauses.
Cookies and analytics
The app keeps your sign-in in your browser’s local storage; we set no cookies. There are no advertising trackers and no third-party analytics, which is why there is no consent banner.
To measure reach, the website (not the app) uses Plausible Analytics, run on our own infrastructure in Switzerland. Plausible sets no cookies and does not recognise you across devices; it records only aggregated figures — page viewed, referrer, device type, country. IP addresses are not stored and no user profiles are created.
Retention
- Your account and its data are kept for as long as the account exists. Cancelling a paid plan deletes nothing — the account continues on the free plan.
- If you delete your account, access is blocked immediately and all data is erased permanently after 30 days, including your entries in our logs.
- Invoices are kept for the statutory retention period of ten years.
Your rights
In the settings you can export all your campaigns and matches as JSON and delete your account yourself. You also have the right to information, rectification, restriction and objection. Write to hello@substring.ch. You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or with the supervisory authority in your EU member state.
