The policy acknowledges that California residents may have additional rights under California law regarding the use of their personal information, and references a separate CCPA privacy notice for details.
This analysis describes what OpenRouter's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that CCPA-specific rights are documented in a separate notice rather than in the main policy, requiring California residents to locate and review an additional document to understand the full scope of their data rights.
Interpretive note: The full scope of CCPA rights and mechanisms is delegated to a separate notice not reproduced in the analyzed document, limiting assessment of operational completeness.
This simplified CCPA provision removes the detailed enumeration of specific rights and instead defers to a separate CCPA privacy notice, potentially obscuring users' specific entitlements.
View full change record →California residents operate under additional data rights potentially including access, deletion, correction, and opt-out of sale or sharing, as detailed in a separate CCPA notice linked from or accessible via OpenRouter's privacy disclosures.
How other platforms handle this
If you are a California resident, you have the right to know what personal information we collect, use, and disclose about you; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; the right to correct inaccurate person...
If you are a California resident, you have the right to: Know what personal information is being collected about you; Know whether your personal information is sold or disclosed and to whom; Say no to the sale of personal information; Access your personal information; Request deletion of your person...
Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your personal information, the right to data portability, and the right to object to or withdraw consent for certain processi...
Monitoring
OpenRouter has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, visit our CCPA privacy notice.— Excerpt from OpenRouter's OpenRouter Privacy Policy
REGULATORY LANDSCAPE: The California Consumer Privacy Act, as amended by the California Privacy Rights Act, grants California residents rights including the right to know, delete, correct, and opt out of the sale or sharing of personal information. Enforcement authority rests with the California Privacy Protection Agency and the California Attorney General. The policy's delegation of CCPA disclosures to a separate notice is a common but operationally distinct structure that should be evaluated for completeness. GOVERNANCE EXPOSURE: Medium. The adequacy of the separate CCPA notice, including whether it enumerates all required categories of personal information collected, sold, or shared, and whether opt-out mechanisms are operationally functional, cannot be assessed from the main policy text alone. JURISDICTION FLAGS: California residents are the directly affected population. Businesses operating in California or serving California residents through OpenRouter's platform should assess whether their own downstream CCPA obligations are affected by OpenRouter's data practices as disclosed in the CCPA notice. CONTRACT AND VENDOR IMPLICATIONS: Vendors and enterprise customers should request a copy of OpenRouter's CCPA privacy notice and evaluate whether OpenRouter's classification as a business or service provider under CCPA is consistent with the operational relationship and the associated contractual obligations. COMPLIANCE CONSIDERATIONS: Compliance teams serving California users should review the separate CCPA notice for completeness against CPRA requirements, including whether sensitive personal information categories are disclosed, whether opt-out of sharing mechanisms are provided, and whether retention periods by data category are specified.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes that CCPA-specific rights are documented in a separate notice rather than in the main policy, requiring California residents to locate and review an additional document to understand the full scope of their data rights.
California residents operate under additional data rights potentially including access, deletion, correction, and opt-out of sale or sharing, as detailed in a separate CCPA notice linked from or accessible via OpenRouter's privacy disclosures.
ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenRouter.