The policy authorizes sharing of personal data with vendors, service providers, agents, and business partners for purposes including data analytics, business analytics, customer service, marketing, distribution, and promotional offers.
This analysis describes what OpenRouter's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that personal data may be disclosed to an unspecified number of third-party vendors and business partners across analytics, marketing, and distribution functions, without enumerating specific recipients or requiring individual user consent at each disclosure.
Language refined: added 'vendors' and 'agents or contractors,' removed 'advertising services' and 'communicate with users' references, added explicit mention of sharing for 'products, services or promotions' with business partners.
View full change record →Under these terms, personal data including identifiers, behavioral data, and transaction information may be shared with third-party analytics and marketing vendors as well as business partners for promotional purposes, as described in the policy.
How other platforms handle this
You and your organization's administrator can access several types of Service Data directly from Google Cloud, including your account information, billing contact information, payment and transaction information, as well as product and communication settings and configurations.
If you registered to use Notion's Services with such an email address, but you do not use the Services in connection with your organization...you may transfer your account to a different email address.
We will also provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected.
"We may share your personal data with our vendors, service providers, agents or contractors who perform services on our behalf, including data analytics, business analytics, customer service, marketing, distribution, and other services. We may also share your personal data with our business partners to offer you certain products, services or promotions.Excerpt from OpenRouter's Privacy Policy
REGULATORY LANDSCAPE: GDPR requires that data sharing with third-party processors be governed by data processing agreements meeting Article 28 requirements, and that sharing with independent controllers be supported by a separate lawful basis.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that personal data may be disclosed to an unspecified number of third-party vendors and business partners across analytics, marketing, and distribution functions, without enumerating specific recipients or requiring individual user consent at each disclosure.
Under these terms, personal data including identifiers, behavioral data, and transaction information may be shared with third-party analytics and marketing vendors as well as business partners for promotional purposes, as described in the policy.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenRouter.