Privacy policy for Cabin Guard

Last updated: 04/11/2026

Data controller: Reodor Studios AS (org. no. 920 025 528), on behalf of Fortum

Contact: mb@reodorstudios.com

1. Introduction

Cabin Guard is a study run by Reodor Studios on behalf of Fortum in autumn 2026. Here you register interest in a service that is meant to keep an eye on the power and the weather around your cabin, and contact you when something needs doing. In this phase we do not monitor any cabin, and we do not call or text anyone about their cabin. We contact you by email when the test starts. Reodor Studios builds and runs the service on behalf of Fortum, and is responsible for your information. Fortum gets what we learn from the test, but not information about you.

This page says what information we use, why, who handles it for us, where in the world that happens, and how long we keep it. We follow the Norwegian Personal Data Act and the General Data Protection Regulation (GDPR).

When you sign up, you tick a box to say you have read this page. Read sections 4 and 5 in particular: they list the providers that get information, where they are, and what the providers themselves do with it. Several of them handle information in the US. If you are not comfortable with that, you should not sign up.

2. What we collect and why

Email:: To sign you in with a one-time code, and to tell you about changes to the test. We do not send newsletters.
The cabin:: Name, address, coordinates and altitude, to find the grid company and the weather forecast for exactly where the cabin is. Signing up does not start any monitoring of the cabin.
Name:: So we know who you are when we get in touch about the test.
Phone number:: We do not ask for your number when you sign up. If you ask for a test call, or before we call you about your cabin, you first confirm that the number is yours with a code by text message. A number you confirm for the test call after signing up is saved with your sign-up, so we can call you later without a new code. The confirmation is valid for 30 minutes. It is deleted as soon as you sign up or sign out, and by the following night at the latest. We call nobody else.
Answers to questions:: What you want to hear about and what you would pay. We use the answers to understand whether the service is worth building.
Feedback:: What you write in “Feedback?” on the thanks page, stored with your sign-up. We use it to improve the service, and it is deleted when you remove your sign-up.
Calls:: An AI agent makes the calls. What you say is turned into text, and the text is kept for 30 days. The team running the test reads the transcripts to make the agent better. We do not record the audio. We say so at the start of the calls.
Test calls:: On the front page anyone can ask for a test call to a confirmed Norwegian mobile number. An AI assistant makes the call at the request of whoever entered the number, and it is about a made-up power outage at an address you choose. Once you have signed up, you can also ask for it on the thanks page: then it is about the municipality your cabin is in, and the number you confirm is saved with your sign-up. We store no name, no cabin and no tester with the call itself. The number sits in the confirmation for 30 minutes, as for everyone. To limit how many calls one number can get, we keep a keyed hash of the number, not the number itself, for 90 days after the last test call. If you ask not to be called again, we mark the hash so the number gets no more test calls. What you say is written down and kept for 30 days, without a name.
Call statistics:: When and for how long we called, whether you answered, and what you thought of the call. Without what was said.
Use of the website:: We count page views and how many people get through the sign-up, without cookies and without storing who you are. If you arrive by a tagged link, for example from the Fortum app, we store which link it was with your sign-up.

3. The basis for processing

We process the information to provide the service you signed up for (GDPR Article 6(1)(b)). We also use transcripts and call statistics to make the service better, because that is what a beta is for (legitimate interest, Article 6(1)(f)).

We do not sell your information, do not use it for marketing, and do not use it to train AI models.

4. Who handles the information, and where

We use these providers to run the service. Each of them handles the information under an agreement with us, and gets only what it needs for its part of the job.

Supabase
What they do
Database and sign-in
What they get
Everything in section 2, except page views
Where
Germany (EU)
Vercel
What they do
The website and the page view count
What they get
What you type on the website, and your IP address
Where
Runs in Germany (EU), logs and statistics in the US
Resend
What they do
Sends the sign-in code by email
What they get
Your email address
Where
US
Railway
What they do
Runs the risk engine and the phone agent
What they get
The cabin's location, the phone number, and the call while it is going on
Where
Netherlands (EU)
Twilio
What they do
Makes calls, sends text messages and confirms the phone number
What they get
The phone number, the call audio, and the text of the messages
Where
US, with traffic entering through Ireland
Speechmatics
What they do
Turns what you say into text
What they get
The audio of what you say
Where
EU
Anthropic (Claude)
What they do
The language model that holds the conversation
What they get
What you say, as text, plus the cabin's name, municipality and the power and weather situation
Where
US and other countries
ElevenLabs
What they do
Turns the agent's replies into speech
What they get
What the agent says, which may mention the cabin's name and municipality
Where
US
Sentry
What they do
Troubleshooting
What they get
Technical error reports, without names, phone numbers or addresses
Where
Germany (EU)

Provider	What they do	What they get	Where
Supabase	Database and sign-in	Everything in section 2, except page views	Germany (EU)
Vercel	The website and the page view count	What you type on the website, and your IP address	Runs in Germany (EU), logs and statistics in the US
Resend	Sends the sign-in code by email	Your email address	US
Railway	Runs the risk engine and the phone agent	The cabin's location, the phone number, and the call while it is going on	Netherlands (EU)
Twilio	Makes calls, sends text messages and confirms the phone number	The phone number, the call audio, and the text of the messages	US, with traffic entering through Ireland
Speechmatics	Turns what you say into text	The audio of what you say	EU
Anthropic (Claude)	The language model that holds the conversation	What you say, as text, plus the cabin's name, municipality and the power and weather situation	US and other countries
ElevenLabs	Turns the agent's replies into speech	What the agent says, which may mention the cabin's name and municipality	US
Sentry	Troubleshooting	Technical error reports, without names, phone numbers or addresses	Germany (EU)

We also look things up in public Norwegian services. They do not learn who you are, only the place we ask about:

Kartverket (Norwegian Mapping Authority)
What we look up
The address and the altitude
What they get
The address you search for, and the cabin's coordinates
NVE (Norwegian Water Resources and Energy Directorate)
What we look up
Which grid company the cabin belongs to
What they get
The cabin's coordinates
Norwegian Meteorological Institute
What we look up
Weather forecasts and warnings
What they get
The cabin's location, rounded to about 100 metres

Service	What we look up	What they get
Kartverket (Norwegian Mapping Authority)	The address and the altitude	The address you search for, and the cabin's coordinates
NVE (Norwegian Water Resources and Energy Directorate)	Which grid company the cabin belongs to	The cabin's coordinates
Norwegian Meteorological Institute	Weather forecasts and warnings	The cabin's location, rounded to about 100 metres

We get power cuts from the grid companies' own maps, without sending anything about you.

5. What the providers do with the data

This is what each provider says it does with what it gets from us, according to its terms in October 2026:

Supabase: Stores the database in Frankfurt. Backups are taken daily and kept for up to 7 days, so what we delete is fully gone after a week. Privacy at Supabase
Vercel: Runs the website in Frankfurt, but stores logs and statistics in the US. Logs are deleted after a day. Page views are counted without cookies, and the code that tells visitors apart is deleted after 24 hours. Vercel does not train on the content on the plan we use. Privacy at Vercel
Resend: Sends the email with the sign-in code, and keeps the email and its log in the US for 30 days. Does not train on the content. Privacy at Resend
Railway: The servers are in Amsterdam, but the company is run from the US. Our logs never contain names, phone numbers or addresses, and are deleted after 30 days at most. Privacy at Railway
Twilio: Handles and stores calls and text messages in the US. We delete Twilio's log of every call and every message a few minutes after it ends, and log every deletion. Twilio still keeps the phone number internally for up to 120 days, and the text of the messages for up to 30 days, and removes it from its backups within 30 days after that. When you confirm your number with a code, Twilio keeps the attempt, with the number, for 30 days. We never record the audio. Privacy at Twilio
Speechmatics: Streams the audio through and stores neither audio nor text. Does not train on the data unless we agree to it, and we have not. Privacy at Speechmatics
Anthropic (Claude): Does not train on the data. Deletes what it receives within 30 days. Content flagged for misuse may be kept for up to two years. Our contracting party is Anthropic Ireland. Privacy at Anthropic
ElevenLabs: Does not keep what the agent says in our account's history. We checked this with a data export. ElevenLabs may still hold it for a while in logs for troubleshooting and moderation, and in backups for up to 30 days, in the US. We have turned off ElevenLabs' use of our data to train its models. ElevenLabs only gets what the agent says, never what you say. Privacy at ElevenLabs
Sentry: Stores technical error reports in Frankfurt, without names, phone numbers or addresses, and keeps them for 30 to 90 days. Does not train generative AI models on them. Privacy at Sentry

6. Transfers outside the EU and EEA

Twilio, Anthropic, ElevenLabs and Resend handle information in the US, and Vercel and Railway partly do. The transfers rest on the EU-US Data Privacy Framework or the EU standard contractual clauses, set out in each provider's data processing agreement.

We chose them because they give the best conversation in Norwegian today. The database with your information is in the EU. By signing up, you accept that your information goes through these providers.

7. How long we keep it

We keep the information for these periods:

Information	Kept
Calls, transcribed	30 days, then deleted automatically
Test call: the number, the hash of the number and what was said	The number sits in the confirmation for 30 minutes, as above. The hash of the number (not the number itself) is deleted 90 days after the last test call, and what was said is deleted after 30 days, without a name.
Call audio	Not stored by us
Call statistics, without content	Until three months after the beta ends
Account, cabin and phone number	Until you remove your sign-up or ask us to delete them, and at the latest 30 days after the beta ends
A number you confirmed but did not sign up with	The confirmation is valid for 30 minutes and is deleted by the following night at the latest, or as soon as you sign up or sign out
Call log and messages at Twilio	Deleted a few minutes after the call or message. The phone number stays internally at Twilio for up to 120 days.
Deletion log: when something was deleted, with ids and counts, no personal data	Until 12 months after the beta ends
Technical error reports	Deleted after 30 to 90 days at Sentry

You can remove your sign-up yourself: sign in with the email code at /logg-inn and choose “Remove my sign-up”. We then delete your name, email, mobile number, cabin and answers straight away. You can also write to mb@reodorstudios.com and we will delete everything about you within 30 days. Until the test starts, we do not call or text you about your cabin.

We log every deletion, both in our own systems and at Twilio. The log holds only ids and counts, never phone numbers, names or content, so we can show you when your information was deleted.

8. Security

The address of an empty cabin is sensitive information. That is why we never send the address or the coordinates to the language model, and we do not write them in logs. You see only your own information, and only the team running the test has access to the rest. Everything is encrypted when it is sent and when it is stored.

If information should go astray, we tell the Norwegian Data Protection Authority within 72 hours, and you if it may affect you.

9. Cookies

We use only the cookies the website needs to work: one that keeps you signed in, one that remembers the language you chose, and one (cg_phone_proof) that remembers that you confirmed your phone number before signing up. That last one holds no number, only a random id. It lasts at most 30 minutes and is deleted when you sign up, sign out or remove your sign-up. We use no tracking and no ads.

10. Your rights

Access:: You can ask to see the information we hold about you.
Correction:: You can ask us to correct information that is wrong.
Deletion:: You can remove your sign-up yourself, or ask us to delete everything about you.
Portability:: You can get your information in a machine-readable format.
Objection:: You can object to us using your calls to make the service better. Since that is what the test is about, we will then take you out of it.
Complaints:: If you think we handle your information wrongly, you can complain to Datatilsynet, the Norwegian Data Protection Authority.

11. Changes

If we change something that matters, for example start using a new provider, we update this page and tell you by email before the change applies. The date at the top shows when the page last changed.