“If you submit image, audio or video data containing the voice or image of another person to a Model that performs biometric processing, you are responsible for ensuring that you have obtained appropriate notice and consent from that individual as required by applicable law.”
This analysis describes what OpenRouter's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
OpenRouter transfers legal compliance obligations for third-party biometric consent to the user, meaning the user — not OpenRouter — bears responsibility for satisfying applicable biometric privacy laws regarding other individuals.
The updated policy raises the minimum age to use OpenRouter from 13 to 18 years old, meaning users under 18 are no longer eligible. For users who upload files through the Files API feature, the revised terms establish specific handling procedures: files are encrypted at rest and in transit, transmitted to model providers you select, retained until deletion or account closure, and not used for training or marketing purposes. The policy specifies that access is restricted to automated systems necessary to operate the service, and manual access occurs only for investigating violations, responding to legal process, or providing support. You can delete uploaded files at any time, which triggers removal efforts from active systems and backups within timeframes specified in the Data Processing Agreement.
View change record →If you submit another person's voice or image to a biometric-processing Model through OpenRouter, the legal obligation to obtain that person's appropriate notice and consent rests with you.
How other platforms handle this
You are responsible for all content, including any images, videos, and prompts, that you input or generate when using Editor and/or Video.
Any time you click on a link (including advertising banners) or submit your personal information to a third-party website, you will be subject to that third party's privacy policies.
In case of such an assignment by us, you are entitled to terminate the agreement with immediate effect by deactivating your account. We will provide you with reasonable notice of any such assignment.
"If you submit image, audio or video data containing the voice or image of another person to a Model that performs biometric processing, you are responsible for ensuring that you have obtained appropriate notice and consent from that individual as required by applicable law.Excerpt from OpenRouter's Privacy Policy
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
OpenRouter transfers legal compliance obligations for third-party biometric consent to the user, meaning the user — not OpenRouter — bears responsibility for satisfying applicable biometric privacy laws regarding other individuals.
If you submit another person's voice or image to a biometric-processing Model through OpenRouter, the legal obligation to obtain that person's appropriate notice and consent rests with you.
ConductAtlas has identified this type of provision across 298 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenRouter.