OpenRouter Privacy Policy

This document is OpenRouter, Inc.'s Privacy Policy, last updated April 15, 2025, governing personal data collected through the openrouter.ai website, the OpenRouter API service, and third-party applications linking to this policy; the stated legal basis for collection is user consent established by continued use of the site or service. The policy states that OpenRouter collects name, mailing address, email address, telephone number, user Inputs to the service, transaction and Credits purchase details, IP address, operating system, browser type, location data, browsing history, search queries, and data from third-party business partners; it also states that collected data may be shared with service providers, business partners, advertising and analytics vendors, and in connection with corporate transactions such as mergers or asset sales. A notable provision discloses that OpenRouter does not control how downstream LLM providers handle user Inputs or Outputs, including for model training purposes, and directs users to review individual provider terms; the policy also reserves the right to modify its terms at any time without prior notice, with changes applying retroactively to existing data, though material changes will be communicated to registered users by email. The policy references compliance with CCPA for California residents, granting rights to know, delete, and opt out of data sale or sharing, and acknowledges GDPR-framework rights for users in the European Economic Area and UK; the document does not specify a GDPR legal basis beyond consent, and the adequacy of consent mechanisms for EU and UK users under GDPR Articles 6 and 7 may require further evaluation depending on how consent is operationalized in practice.