OpenRouter Privacy Policy

This document is OpenRouter, Inc.'s Privacy Policy, last updated April 15, 2025, governing the collection, use, and disclosure of personal data across the openrouter.ai website, its Service, and third-party applications that link to this policy; the stated legal basis for processing is user consent established by continued use of the Site or Service. The policy authorizes collection of name, email address, mailing address, telephone number, user Inputs to the Service, transaction and Credits purchase details, search queries, IP address, operating system and browser type, location data, browsing history, and cookie-derived behavioral data across third-party sites and over time; the terms also authorize sharing with service providers, business partners, advertising and analytics partners, and in connection with corporate transactions such as mergers or acquisitions. The policy expressly disclaims responsibility for how third-party AI model providers handle user Inputs or Outputs, including for model training purposes, and reserves the right to modify the policy at any time without prior notice for non-material changes, with material changes communicated by email to registered users only. The policy references CCPA rights for California residents, including disclosure, deletion, and opt-out rights, and engages GDPR-relevant concepts such as data subject rights and cross-border data transfers, though specific transfer mechanisms are not detailed; applicability of these frameworks depends on user jurisdiction and the company's classification under each regime. Compliance teams should evaluate the adequacy of consent mechanisms under GDPR given that the policy relies on continued use as a consent signal, and should assess the scope of third-party AI provider data flows given the explicit disclaimer of responsibility for downstream handling of user Inputs.