Privacy
Privacy boundary
How the website, accounts, AI workspace, and model requests handle data.
What this site processes
Comparison, pricing estimates, and integration configuration run in your browser. API keys and request inputs are forwarded through this site’s server to the fixed Power Champion gateway when you explicitly check a balance, send a playground request, or send a chat message. These tools hold keys in page memory and do not save them in browser storage; the proxy code does not log request bodies or API keys. Playground responses, chat history, and token counts remain in page memory until navigation or reload. Chat history and customer API keys entered into these tools are not saved to the account database. Sending a chat includes its conversation history and any selected agent instructions or reference text; the model gateway processes that content. Choosing Export chat downloads a copy to your device.
Agent drafts and test transfers
Editing an agent does not automatically save it. Choosing Save draft stores its name, purpose, selected model, instructions, tone, reference text, and sample prompt in this browser’s localStorage until you delete the saved draft or clear site data. Choosing Test in chat writes a separate copy to this tab’s sessionStorage; the application accepts that transfer for 30 minutes. Expiry prevents reloading the transfer but does not erase a draft already loaded into page memory, and the stored copy may remain until the tab closes or site data is cleared. Deleting a saved draft does not clear an active conversation or its separate test transfer. Copying instructions or exporting JSON creates a copy under your control.
Optional public trial
Public trial is disabled by default. It becomes available only when an operator enables it, configures a server-side trial API key, and sets a positive site-wide daily request cap. If enabled, opening the workspace can set an essential HttpOnly trial cookie lasting up to seven days. The account service stores a hash of that trial token, session creation and expiry times, and request identifiers, UTC dates, reservation and completion timestamps, and outcomes to enforce daily limits for the session and the site. A request consumes a trial slot before the gateway is called; failed or cancelled requests also count. These trial records do not contain prompts, conversation history, model responses, or API keys. The gateway still receives and processes the model request.
Site measurement
Public pages may load Cloudflare Web Analytics when the operator enables it for the deployment. It sets no cookie, stores no identifier in your browser, and does not follow you across sites; it reports aggregate page views, referrers, country, and page performance. Signed-in areas — the account workspace, administration, sign-in and registration — never load it, and neither do preview deployments. Nothing measured here is joined to an account, an API key, or a request you send to a model.
Account and session data
When you register, the account service stores your name, email address, account role, and a salted scrypt password hash. It does not store your password in plain text. An essential HttpOnly cookie keeps you signed in, with a default lifetime of 12 hours; the server stores a hash of its session token, the account association, and creation and expiry times. Signing out invalidates that session. Account activity and authentication-protection records are retained by the account service.
Key ownership and credit requests
The account service stores the ownership, label, visible prefix, status, and timestamps of API keys managed through the workspace. It also stores credit-request amounts, reference text, review decisions and notes, reviewer identifiers, timestamps, and audit events. A credit request is a record for manual review: submitting or approving it does not process a payment or automatically add funds to the inference gateway.
Account support
For account recovery or questions about account records, contact info@powerchampion.org. Recovery is handled by an operator after checking the request; there is no self-service password-reset email flow. An operator password reset revokes existing account sessions. Do not send your password or a complete API key by email.
API usage data
Requests to the API itself are metered by the b300 gateway for billing (tokens, timestamps, model). This is operational billing data for the service you call — see the data-retention policy at powerchampion.ai/data-retention.
Background Agent tasks
When enabled, Agent tasks are a separate signed-in service. Starting a task saves its goal, references, selected agent configuration, instructions, progress, model and tool messages, and generated files to your account. Relevant content is sent to the selected model through the fixed Power Champion gateway. Task history is retained across page reloads and bounded to 50 tasks per account. Your explicitly supplied model API key is encrypted on the server so the task can continue after you close the page. The current encrypted key is cleared when the task completes, fails, or is cancelled; paused tasks retain it to resume. Access-controlled backups may retain earlier records. Keys are not saved in browser storage. Public web reads require approval of the exact URL and send no account cookies or model credentials to that website. Contact support for account data removal requests.
Future changes
If a future release changes data handling, the public privacy notice and the relevant service controls will be updated before that release.