OpenRouter keeps your personal data for as long as your account is open and for as long as needed for legal, dispute, and business purposes, without specifying a maximum retention period.
This analysis describes what OpenRouter's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The policy does not specify defined maximum retention periods for specific data categories, meaning personal data including account information, transaction records, and browsing data may be retained indefinitely for broad business purposes.
Interpretive note: The policy does not specify retention periods by data category, making it difficult to assess the practical duration of data retention; application may vary based on jurisdiction and data type.
Removal of data retention provisions eliminates transparency about how long personal data is kept and under what circumstances.
View full change record →Personal data collected by OpenRouter, including account details, transaction history, and browsing activity, may be retained for an unspecified period tied to open-ended criteria such as legitimate business purposes, which may result in data being held beyond what users might expect.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"We will retain your personal data for as long as your account is active or as needed to provide you with our Services, comply with our legal obligations, resolve disputes, enforce our agreements, and carry out our legitimate business purposes.Excerpt from OpenRouter's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The policy does not specify defined maximum retention periods for specific data categories, meaning personal data including account information, transaction records, and browsing data may be retained indefinitely for broad business purposes.
Personal data collected by OpenRouter, including account details, transaction history, and browsing activity, may be retained for an unspecified period tied to open-ended criteria such as legitimate business purposes, which may result in data being held beyond what users might expect.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenRouter.