Privacy Policy
Last Updated: July 6, 2026
OpenRouter, Inc. ("we", "us" or "our") respects your privacy and we are committed to protecting it through our compliance with this Privacy Policy. We have created this Privacy Policy to inform you of our policies regarding the collection, use and disclosure of personal data and the choices you have associated with that information. Capitalized terms used but not defined in this Privacy Policy have the meaning given to them in our Terms of Service.
This Privacy Policy applies to all personal data collected through any written, electronic, or oral communications, as you:
- Access the website located at https://openrouter.ai/ and all corresponding webpages and websites that link to this Privacy Policy (the "Site");
- Interact with applications on third party websites and services, if those applications include links to this Privacy Policy;
- Utilize our Service.
Before using our Site and Service, please carefully read our Terms of Service(opens in new tab) and this Privacy Policy. By using this Site or Service, you consent to the collection and use of your personal data in accordance with this Privacy Policy and our Terms of Service. If you do not feel comfortable with any part of this Privacy Policy or our Terms of Service, you should not use or access our Site or Service.
We may modify this Privacy Policy at any time, without prior notice, and changes may apply to any personal data we hold about you, as well as any new personal data collected after the Privacy Policy is modified. If we make changes, a revised Privacy Policy will be posted to our Site; the date of the last revision is included at the top of the page. We will provide individuals who create an account ("Users") with advanced notice by email if we make any material changes to how we collect, use or disclose Users' personal data or that impact Users' rights under this Privacy Policy. Users are responsible for ensuring we have an up-to-date active and deliverable email address to reach them. Your continued use or revisitation of the Site or the Service following the posting or notice of a revised Privacy Policy means that you accept and agree to the changes. You are expected to check this page from time to time so you are aware of any changes, as they are binding on you.
We also may provide additional "just-in-time" disclosures or additional information about the data collection, use and sharing practices of our Service. Such notices may supplement or clarify our privacy practices or may provide you with additional choices about how we process your personal data.
1. Collection of Personal Data
We collect personal data when you use our Site and our Service. Personal data is any information that relates to you, identifies you personally or could be used to identify you including, but not limited to: your name, mailing address, email address, and telephone number. Any text or data you input into the Service ("Inputs") that include personal data will also be collected by us. We do not control, and are not responsible for, LLMs' handling of your Inputs or Outputs, including for use in their model training. To understand how your Inputs are used by LLMs, check their LLM Terms here(opens in new tab).
The types of personal data that we may collect include, but are not limited to: the personal data you provide to us, personal data collected automatically about your use of our Site or Service, and information from third parties, including our business partners.
Personal Data You Voluntarily Provide to Us
The personal data we collect from you may include:
- Information that you provide by using our Site or Service or by filling out forms on the Site. This includes information provided at the time of or after registering and creating an account, using our Service, sending Inputs through the Service, and using Shared User Content functionality. We may also ask you for information when you report a problem with our Site or Service.
- Information that you provide to our third-party partners that integrate, interoperate with, or connect to the Site or Service.
- Records and copies of your correspondence (including email addresses), if you contact us.
- Your responses to surveys that we might ask you to complete for internal purposes.
- Details of transactions you carry out through our Site and of the fulfillment of Credits purchases.
- Your search queries on the Site.
- Image, audio, video, and "biometric information". Certain Models available through our Service accept image, audio or video Inputs, or generate image, audio or video Outputs. If you submit image, audio or video files through the Service, including voice recordings and other depictions of identifiable individuals those files may contain personal data about you or others, that are considered "biometric information" under applicable laws.
Personal Data Collected Automatically
As you navigate through and interact with our Site or Service, we may use automatic data collection technologies to collect certain information about your device, browsing actions and patterns, including:
- Details of your visits to our Site, including, but not limited to, traffic data, location data, log files to understand how our Service is performing, browser history, search, information about links you click, pages you view, and other communication data and the resources that you access and use on the Site.
- Information about your computer and internet connection, including your IP address, operating system and browser type, time zone setting, and other unique personal or online identifiers.
- Information about your preferences to make your use of the Site more productive, via the use of Cookies. For more information on Cookies, please see Cookies and Other Tracking Technology.
Model Provider Data Practices
When you submit Inputs through the Service, those Inputs are transmitted to the Model Provider you select, or that is selected through automatic routing, as applicable. Different Model Providers have different data practices, including with respect to whether they retain or use your Inputs and Outputs to train, fine-tune, evaluate, or improve their Models. Some Model Providers may use your Inputs and Outputs for model training or improvement. Before using a Model, you should review the applicable Model Provider's data practices, which are linked here(opens in new tab). Where disclosed to us, we label Models that do not use your data for training. If you do not want your Inputs used for model training, select a Model or Model Provider that commits to not using your data for that purpose.
Enterprise and API Users
If you have a Data Processing Agreement with us, the terms of that agreement and our separate agreements with Model Providers govern how your data is handled by each Model Provider, including any restrictions on model training.
OpenRouter does not use your Inputs or Outputs for model training.
Biometric Data Processing
Some Models perform processing that may constitute biometric data processing under applicable law. This includes, but is not limited to:
- Voice cloning: creating a synthetic replica of a speaker's voice from audio samples, which requires extracting unique vocal characteristics (a voiceprint).
- Voice changer: transforming or altering a speaker's voice in real time, which involves analyzing unique vocal features.
- Speaker identification: distinguishing or identifying individual speakers based on voice characteristics.
- Voice-preserving audio translation: translating audio while retaining the acoustic and tonal characteristics the original speaker's voice.
- Face cloning: generating a digital replica of a person's face from a photograph, video or other sample, which requires extracting facial geometry that may constitute a faceprint.
When using these features, the Model Provider will process your audio or visual data to extract biometric identifiers, including without limitation voice prints, voice models, and face prints. This data is treated as biometric data under the EU and UK GDPR, as sensitive personal information under the CCPA, and as biometric identifiers under the Illinois Biometric Information Privacy Act ("BIPA") and similar state laws.
If you submit image, audio or video data containing the voice or image of another person to a Model that performs biometric processing, you are responsible for ensuring that you have obtained appropriate notice and consent from that individual as required by applicable law. You should not submit another person's voice or image data to a biometric processing feature without their informed consent. OpenRouter acts as an intermediary, passing source image, audio and visual data to Models, and does not independently process or store this biometric data, or generate any biometric identifiers.
Cookies and Other Tracking Technology
We may use cookies, embedded scripts, and other similar tracking technologies ("Tracking Technologies") to collect additional personal data automatically as you interact with the Site and to personalize your experience with our Site. These technologies help us recognize you, customize or personalize your experience, market additional products or services to you, and analyze the use of our Service to make them safer and more useful to you. We also may use these technologies to collect information about your online activities over time and across third party websites or other online services (known as "behavioral tracking").
Cookies
Cookies are small web files that a site or its provider transfers to your device's hard drive through your web browser that enables the site's or provider's system to recognize your browser and remember certain information. We use first-party and third-party cookies for the following purposes: to make our Site function properly, to improve our Site and Services, to make login to our Site or Service easier (such as by remembering your User ID), to recognize you when you return to our Site, to track your interaction with the Site, to enhance your experience with the Site and Service, to remember information you have already provided, to collect information about your activities over time and across third party websites or other online services in order to deliver content tailored to your interests; and to provide a secure browsing experience during your use of our Site. The length of time a cookie will stay on your browsing device depends on whether it is a "persistent" or "session" cookie. Session cookies will only stay on your device until you stop browsing. Persistent cookies stay on your browsing device until they expire or are deleted (i.e. after you have finished browsing).
The following types of cookies are used on our Site:
- Strictly Necessary Cookies. These cookies are essential because they enable you to use our Site. For example, strictly necessary cookies allow you to access secure areas on our Site. Without these cookies, some elements of our Site cannot be provided. These cookies do not gather information about you for marketing purposes. This category of cookies is essential for our Site to work and they cannot be disabled.
- Functional or Preference Cookies. We use functional cookies to remember your choices so we can tailor our Site to provide you with enhanced features and personalized content. For example, these cookies can be used to remember your name or preferences on our Site. We do not use functional cookies to target you with online marketing. While these cookies can be disabled, this may result in less functionality during your use of our Site.
- Performance or Analytic Cookies. These cookies collect passive information about how you use our Site, including webpages you visit and links you click. We use the information collected by such cookies to improve and optimize our Site and Services. We do not use these cookies to target you with online marketing. You may choose to disable these cookies.
Changing Your Cookie Settings
Your browser may provide you with the option to refuse some or all browser cookies. You may also be able to remove cookies from your browser. You can use the browser with which you are viewing the Site to enable, disable or delete cookies. Please note, if you set your browser to disable cookies, you may not be able to access secure areas of the Site. Also, if you disable cookies other parts of the Site may not work properly. You can find more information about how to change your browser cookie settings at http://www.allaboutcookies.org(opens in new tab).
Analytics and Other Tracking Technologies
We may use third-party Service Providers (defined below) to monitor and analyze the use of our Site. Presently, we use Google Analytics. Google Analytics is a web analytics service offered by Google LLC ("Google") that tracks and reports Site traffic. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en(opens in new tab). Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics, available at: https://tools.google.com/dlpage/gaoptout(opens in new tab).
We may also use Tracking Technologies to collect "clickstream" data, such as the domain name of the service providing you with Internet access, your device type, IP address used to connect your device to the Internet, your browser type and version, operating system and platform, the average time spent on our Site, webpages viewed, content searched for, access times and other relevant statistics, and assign unique identifiers to the device or other credentials you use to access the Site for the same purposes. In collecting clickstream data, we use PostHog, a web and products analytics platform that may also utilize session replay features. You may review PostHog's terms and conditions here: https://posthog.com/terms.
Pages of our Site and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs), and session replay tools that permit us, for example, to track purchase and transaction events, interaction with our Site, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity) and monitoring user behavior.
2. How We Use Your Personal Data
We will only use your personal data as described in this Privacy Policy or as disclosed to you prior to such processing taking place. The purposes for which we may use your personal data include:
- Providing the Service.
- Transmitting your Inputs to third-party Model Providers for inference, and depending on the Model selected, for model training and improvement purposes.
- Contacting you regarding the administration of any features or functions of the Site or Service you have registered to use.
- Providing you with notices about your account.
- Notifying you about changes to our Site, our policies, terms or any products or Service we offer or provide though it.
- Sending you marketing and promotional emails.
- Responding to your questions or other requests.
- Allowing you to participate in the interactive features of the Site and Service.
- Tailoring your experience on the Site or Service and/or otherwise customizing what you see when you visit and use the Site or Service.
- Saving your user account, registration and profile data or other personal data (so you do not have to re-enter it each time you visit or use the Site or Service).
- Tracking your return visits to and use of the Site and Service.
- Accumulating and reporting aggregate, statistical information in connection with the Site and the Service and user activity.
- Determining which features and services users like best to help us operate, enhance and improve our Site.
- Keeping you secure and safe while using our Site, which requires us to process your personal data to combat spam, malware, malicious activities or security risks.
- Improving and enforcing our security measures.
- Maintaining legal and regulatory compliance.
- Enforcing compliance with our Terms of Service and other policies.
- Investigating and resolving disputes.
- Investigating and preventing fraud, abuse, and violations of our Terms of Service and other policies, unlawful or criminal activity, unauthorized access to or use of personal data or our systems and networks.
- Protecting you, others and our business.
- For any other purpose disclosed to you prior to you providing us your personal data or which are reasonably necessary to provide the Service or other related products and/or services requested.
- Delivering interest-based ads (also known as personalized ads or targeted ads). We show you interest-based ads to display aspects of our Site and Services that might be of interest to you. We use cookies, pixels, IP addresses and other technologies ("Advertising Technologies"), which enable us to understand the effectiveness of the interest-based ads we show you by measuring what ads are clicked or viewed, and to provide you with more useful and relevant ads. We also work with third parties, such as advertisers, social media networks, search engines, ad serving companies, and advertising companies working on their behalf, to improve the relevance of ads we serve. In providing you interest-based ads we do not associate your interactions on unaffiliated sites with information which on its own identifies you, such as name or email address, and we do not provide any such information to advertisers or to third-party sites that display our interest-based ads. Third party advertisers or advertising companies working on their behalf sometimes use Advertising Technologies in the process of delivering content, including ads, directly to your browser or device, and they may automatically receive an IP address when this happens. They may also use advertising technologies to measure the effectiveness of their ads, show you more relevant advertising content, and perform services on our behalf.
Aggregated and De-identified Information
We may process personal data in an aggregated or de-identified form to analyze the effectiveness of our Services, study user behavior, and to share with corporate partners, including in the following ways:
- To process Feedback. In so doing, we disassociate Inputs and Outputs from your user ID.
- To create analytics reports to share on our Site, such as through our Rankings page. We disassociate Inputs and Outputs from your user ID and assign a topic category to each Input.
- To improve the user experience. We may analyze and aggregate general user behavior and usage data. This information does not identify individual users. However, for purposes of de-bugging, we may re-identify your user ID with any stored Inputs.
- With corporate partners. With your consent, we may disclose Inputs in aggregated, de-identified form, where those Inputs are disassociated from your user ID, in connection with a contractual relationship with corporate partners.
3. How We Share and Disclose Your Personal Data
We may share or disclose your personal data in the following circumstances:
- Website Service Providers. We may employ other companies and individuals to facilitate our Site and Service ("Service Providers"), provide the Service on our behalf, perform Service-related services or assist us in analyzing how our Site and Service are used. The Service Providers have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. The Service Providers are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them.
- Affiliates and Corporate Partners. We may share your personal data with our subsidiaries, affiliates, and partners.
- Corporate Transactions. To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal data held by us about our Site users and Users is among the assets transferred, and you agree to and do hereby consent to our assignment or transfer of rights to your personal data.
- Analytics. We may share aggregated, de-identified information (for example, aggregated trends about the general use of our Service) publicly and with our affiliates, subsidiaries, and partners.
- Consent. We may disclose your personal data for any purpose with your consent.
- As Required by Law. Under certain circumstances your personal data may be subject to processing pursuant to laws, regulations, judicial or other government subpoenas, warrants, or orders. We may be required to disclose personal data in coordination with regulatory authorities in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We will preserve and disclose any and all information to law enforcement agencies or others if required to do so by law or in the good faith belief that such preservation or disclosure is reasonably necessary to: (a) comply with legal or regulatory process (such as a judicial proceeding, court order, or government inquiry) or obligations that we may owe pursuant to ethical and other professional rules, laws, and regulations; (b) enforce our Terms of Service and other policies; (c) respond to claims that any content violates the rights of third parties; or (d) protect the rights, property, or personal safety of OpenRouter, its employees, its users, its clients, and the public.
- With Model Providers. When you use our Service, we transmit your Inputs to the Model Provider(s) you select. Model Providers process your Inputs to generate Outputs and may, depending on their own terms and data practices, retain and use your Inputs and Outputs for their own purposes, such as model training and improvement. We contractually require Model Providers to comply with applicable data protection laws, but the Model Provider's own terms govern their independent use of your data to the extent permitted by our agreements. A list of Model Providers and links to their data practices is available here(opens in new tab).
4. Your Rights and Choices
Marketing Communications
We strive to provide you with choices regarding the personal data you provide to us. If you do not wish to have your email address or other contact information used by us to promote our Service, you can opt-out by sending an email stating your request to [email protected]. You may also choose to stop receiving our promotional or marketing communications by following the "unsubscribe" instructions included in these messages. This opt out does not apply to information provided by us as a result of your participation in our product release, product service experience or other transactions. Please note that "opt-out" and "unsubscribe" requests may not take effect immediately and may take a reasonable amount of time to receive, process and apply, during which time your information shall remain subject to the prior privacy settings. Additionally, you should be aware that any information provided to third parties prior to your election to opt-out or unsubscribe will not be retrieved or rescinded, unless required by applicable law.
Advertising Preferences
You can update your advertising preferences on your account page and choose not to receive interest-based ads from us. You can also generally opt out of receiving personalized ads from third party advertisers and ad networks who are members of the Network Advertising Initiative (NAI)(opens in new tab) or who follow the Digital Advertising Alliance's Self-Regulatory Principles for Online Behavioral Advertising(opens in new tab) by visiting the opt out pages at the links provided above.
Keeping Your Personal Data Accurate and Deletion
We are committed to ensuring that your personal data is kept accurate and up to date. However, it is up to you to update it with any changes. You can review and change your personal data by logging into the Site and visiting your account profile page. You may also send us an email at [email protected] to request access to, or to correct any personal data that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.
If you no longer wish to use our Service, or no longer wish to have your personal data be processed, you may request to delete your account and the information in your account, subject to certain limitations, by emailing us at [email protected]. Once you submit your request, we will send an email to the email address linked to your account requesting that you confirm your deletion request. Once you confirm your request to delete your account and data, your account will no longer be accessible while we process your request. Once you confirm your request, this process cannot be canceled, undone, withdrawn, or reversed. When your account is deleted, all associated personal data is deleted, unless we are required to maintain it for regulatory and compliance purposes or for a legal or business necessity.
Rights Regarding Your Personal Data
Depending on where you live and the laws that apply in your country of residence, you may have certain rights regarding your personal data, as described here. While we strive to prioritize the protection of personal data and comply with all applicable laws, we may decline a request from you if we have a lawful reason for doing so.
To exercise your rights, you or your authorized agent may submit a request by email at [email protected]. We may first request additional information to verify your identity before processing your request.
- Right to know. You have the right to know what personal data OpenRouter processes about you, including categories of personal data, the categories of sources from which it is collected, the business or commercial purposes for collection, and categories of third parties to whom we disclose it.
- Access and data portability. You have the right to request a copy of the personal data we process about you, subject to certain exceptions and conditions. You may also have the right to export your information in certain cases.
- Deletion. You have the right to request that we delete personal data we have collected from you when you use our Service, subject to certain exceptions.
- Correction. You have the right to request that we correct inaccurate personal data we have retained about you, subject to certain exceptions.
- Objection. You have the right to object to processing of your personal data, subject to certain exceptions. You can opt out of marketing and advertising communications by following the directions in this section.
- Restriction. You have the right to restrict our processing of personal data in certain circumstances.
- Withdrawal of consent. Where our processing of your personal data is based on your consent, you have the right to withdraw consent, but that withdrawal does not affect the lawfulness of processing based on consent provided before your withdrawal.
- Sale and targeted marketing of our products and Services. We do not "sell" your personal data as that term is defined by applicable laws and regulations. You can opt out of sharing your personal data for targeted advertising by following the directions in this section.
Under the California Consumer Privacy Act ("CCPA"), you may exercise your right to opt out of "sharing" as defined in the CCPA by selecting Model Providers that do not use your personal data for training. OpenRouter cannot control Model Provider-side training once user data is transmitted to a training-permitted Model Provider.
5. Data Security
We have implemented measures designed to secure your personal data from accidental loss and from unauthorized access, use, alteration and disclosure. All personal data you provide to us is stored on our secure servers behind firewalls.
The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Site, you are responsible for keeping this password confidential. You should not share your password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our Site. Any transmission of personal data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Site.
6. Integration of Third-Party Platforms and Services
The Site may be linked to, rely on and be integrated with websites, applications, interfaces, services and platforms operated by other companies, including Third-Party Services. We are not responsible for the privacy practices of such websites, applications, interfaces, services and platforms operated by third parties that are linked to, rely on and/or integrated with the Site or for the privacy practices of third party advertising companies. Once you leave this Site via a link or access a third-party service, you should check applicable privacy policies to determine, among other things, how related companies process personal data they may collect about you. This Privacy Policy applies solely to information collected by OpenRouter.
7. Personal Data Retention
We are subject to applicable laws on the retention of information and will retain your information for as long as is reasonably necessary to comply with our business and legal obligations and to meet regulatory and compliance requirements. When the personal data we have collected is no longer required by us, we and our service providers will perform the necessary procedures for destroying, deleting, erasing or converting it into an anonymous form as permitted or required by applicable laws.
Image, Audio, and Video Data
Image, audio, and video data submitted through the Service is transmitted to the applicable Model Provider for inference. We do not persist image, audio or video files beyond the duration necessary to route the request, except as required for abuse detection, security, billing, or legal compliance. Model Providers' retention practices vary; check the applicable provider's data practices. You may request deletion of your data by contacting us at [email protected].
8. Eligibility
This Site is offered and available to users who are 13 years of age or older. By using the Site, you represent and warrant that you are at least 13 years old and that your parent or guardian has granted you permission to use the Site, or that you are of legal age to form a binding contract with us. If you do not meet all of these requirements, you must not access or use our Site.
9. Data Transfers
When you access our Site or Service, your personal data may be transferred to our servers in the US, or to other countries outside the European Economic Area ("EEA") and the UK. This may be a direct provision of your personal data to us, or a transfer that we or a third party make. When information is transferred outside the EEA or UK, we ensure it benefits from an adequate legal protection by relying on (1) adequacy decisions from the European Commission under Article 45 of the European Union's General Data Protection Regulation (GDPR) where they recognize that a country outside of the EEA offers an adequate level of data protection, and (2) standard contractual clauses approved by the European Commission under Article 46 of the GDPR, which allows companies in the EEA to transfer data outside the EEA.
10. Governing Law
All disputes arising out of or relating to the Privacy Policy or the purchase, registration, or use of any OpenRouter product or Service shall be governed by New York law regardless of where you access the Site or the Service, and notwithstanding any conflicts of law principles, except to the extent applicable privacy laws provide rights or obligations that cannot be waived or varied by contract.
11. Additional U.S. State Disclosures and Legal Bases for Processing Under the GDPR
The GDPR and some U.S. state privacy laws require specific disclosures. The below provides additional information about the categories of personal data we collect and how we use and disclose that information. You can read more about the personal data we collect and where we collect it from in the "Collection of Personal Data" above, how we use personal data in "How We Use Your Personal Data" above, and how we retain personal data in "Personal Data Retention" above. You can read more about your rights regarding the personal data collected in the "Rights Regarding Your Personal Data" above.
| Categories of Personal Data | Use of Personal Data | Disclosure of Personal Data |
|---|---|---|
We collect the following information, as described above:
| We use this information for the following purposes, as described above:
| We may disclose this information in the following circumstances, as described above:
|