Privacy
Last updated October 2026
This page describes, factually, what the Time to Power site does with the information you give it and which services it passes that information to. It is written from the site's own code. It is a draft for the operator's legal review, not legal advice, and it states no legal conclusion.
What is stored
- The free capacity check. The numbers you enter, the optional site name, hall id, metro, country, platform, your name, company and email if you give them, and the engine's result (racks, binding constraint, completeness) are stored in the database. The result has a private link: anyone who holds it can read that stored read. An anonymised, aggregated comparison across stored reads is shown to others only above a minimum number of halls.
- Enquiries and chat. The audit form and the scoping chat can store a lead: capacity, location, urgency, message, name, company and email, as you gave them.
- Engagements and projects. What you buy, the intake you submit, the documents produced for you, the projects and comparisons you save, and the accepted supplier quotations recorded against them.
- API accounts. Your email, company, plan, the identifier of your current key (never the key itself), billing identifiers from Stripe, and a ledger of metered calls with the endpoint, units and any project label you send.
- Server logs. The site keeps its own logs to a deliberate minimum: error categories, with email addresses and private link tokens removed. Your host keeps its own request logs.
Services that receive it
These are the third-party services this site's code sends data to, and what each one receives.
Supabase : Database and sign-in.
Everything the site stores: qualifier runs, enquiries and chat leads, engagements, projects, API accounts, usage records, notification records, and the email address used for passwordless sign-in.
Stripe : Payments and invoices.
Your email, company name where given, and the card details you type on Stripe's own checkout page. Card details never reach this site's servers. Stripe sends back payment status, invoices and the identifiers we store against your account.
Resend : Transactional email.
The recipient address and the text of the message: links to your private pages (API access, engagement, deliverable, watch), receipts, notices and enquiry confirmations.
Anthropic : The AI scoping chat, the siting analyst and the extraction of lead details from a chat.
What you type into the chat or the siting analyst, the conversation so far, and the results of the engine calls the assistant makes on your behalf. A chat can also be processed to pull out structured lead fields (capacity, location, name, company, email) if you give them.
Vercel : Hosts the website and its server routes.
Every request to the site, including the request logs a host keeps, and the data in forms you submit while it passes through.
Fly.io : Hosts the capacity engine (configured in this repository with Amsterdam as its primary region).
The figures sent to the engine to be solved: the seven qualifier numbers and the platform, the intake of a paid engagement, and calls made with an API key or by an AI client over MCP. The engine's usage ledger records the account, endpoint, units, and the optional project label you send.
If an operator has configured one, a notification about a high-scoring enquiry, including the company, capacity, location and email you gave, can also be posted to an internal Slack channel. Released documents, which you open from a private link, load their fonts from Google Fonts, so opening one makes a request from your browser to Google.
The code of this site includes no advertising or analytics scripts. Nothing in it sells personal data.
In your browser
Signing in stores a session in your browser. The workspace keeps your conversation and the last project link you used in your browser's local storage. After a Stripe checkout for pay-as-you-go, a cookie that lasts one hour carries you back to your account page and is then cleared. Private links (API access, engagement, deliverable, watch, project) are the credential for what they open: anyone holding one can open it.
Keeping and deleting
No automatic deletion is built into the site: records stay until they are removed. To ask what is held about you, to have it corrected or removed, write to power@timetopower.ai.
This is a good-faith starting point, not legal advice. Before launch, complete the registered entity details and have it reviewed by counsel in your operating jurisdictions (Canada / EU / US as applicable).