This analysis describes what OpenRouter's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
OpenRouter transfers legal compliance obligations for third-party biometric consent to the user, meaning the user — not OpenRouter — bears responsibility for satisfying applicable biometric privacy laws regarding other individuals.
The updated policy establishes a new Files API feature allowing you to upload and store files for use with inference requests. Files are encrypted at rest and in transit, retained until you delete them or close your account, and transmitted to the model provider you select for processing. OpenRouter states it does not use uploaded file content to train its own models, for unrelated analytics, or for marketing. The policy also raises the minimum age requirement from 13 to 18 years old, meaning users under 18 are no longer eligible to use the service.
View change record →The updated policy discloses that when you submit text, audio, video, or image data to OpenRouter's service, that data is transmitted to third-party AI model providers, which may use your inputs for model training and improvement unless you select a model provider that commits to not using data for training. The policy now explicitly describes biometric processing features (voice cloning, face cloning, speaker identification) that certain models perform, and states that you are responsible for obtaining consent from any identifiable individuals whose voice or image you submit to these features. You can review model provider data practices linked in the policy and select a model or provider that does not use data for training if you prefer not to have your inputs used for model improvement.
View change record →If you submit another person's voice or image to a biometric-processing Model through OpenRouter, the legal obligation to obtain that person's appropriate notice and consent rests with you.
How other platforms handle this
You may not assign your rights under the Agreement, by operation of law or otherwise, without our consent.
Teladoc Health may assign, transfer, or delegate any of its rights and obligations hereunder without your consent.
We may process your Data where you have consented to certain processing of your Data. For example, we may process your Data to use cookies where you have consented to such use.
"If you submit image, audio or video data containing the voice or image of another person to a Model that performs biometric processing, you are responsible for ensuring that you have obtained appropriate notice and consent from that individual as required by applicable law.Excerpt from OpenRouter's Privacy Policy
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
OpenRouter transfers legal compliance obligations for third-party biometric consent to the user, meaning the user — not OpenRouter — bears responsibility for satisfying applicable biometric privacy laws regarding other individuals.
If you submit another person's voice or image to a biometric-processing Model through OpenRouter, the legal obligation to obtain that person's appropriate notice and consent rests with you.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenRouter.