Privacy Policy

Last Updated: Apr 15, 2025

OpenRouter, Inc. (“we”, “us” or “our”) respects your privacy and we are committed to protecting it through our compliance with this Privacy Policy. We have created this Privacy Policy to inform you of our policies regarding the collection, use and disclosure of personal data and the choices you have associated with that information. Capitalized terms used but not defined in this Privacy Policy have the meaning given to them in our Terms of Service.

This Privacy Policy applies to all personal data collected through any written, electronic, or oral communications, as you:

  • Access the website located at https://openrouter.ai/ and all corresponding webpages and websites that link to this Privacy Policy (the “Site”);
  • Interact with applications on third party websites and services, if those applications include links to this Privacy Policy;
  • Utilize our Service.

Before using our Site and Service, please carefully read our Terms of Service, which you can view here and this Privacy Policy. By using this Site or Service, you consent to the collection and use of your personal data in accordance with this Privacy Policy and our Terms of Service. If you do not feel comfortable with any part of this Privacy Policy or our Terms of Service, you should not use or access our Site or Service.

We may modify this Privacy Policy at any time, without prior notice, and changes may apply to any personal data we hold about you, as well as any new personal data collected after the Privacy Policy is modified. If we make changes, a revised Privacy Policy will be posted to our Site; the date of the last revision is included at the top of the page. We will provide individuals who create an account (“Users”) with advanced notice by email if we make any material changes to how we collect, use or disclose Users’ personal data or that impact Users’ rights under this Privacy Policy. Users are responsible for ensuring we have an up-to-date active and deliverable email address to reach them. Your continued use or revisitation of the Site or the Service following the posting or notice of a revised Privacy Policy means that you accept and agree to the changes. You are expected to check this page from time to time so you are aware of any changes, as they are binding on you.

We also may provide additional "just-in-time" disclosures or additional information about the data collection, use and sharing practices of our Service. Such notices may supplement or clarify our privacy practices or may provide you with additional choices about how we process your personal data.

1. Collection of Personal Data

We collect personal data when you use our Site and our Service. Personal data is any information that relates to you, identifies you personally or could be used to identify you including, but not limited to: your name, mailing address, email address, and telephone number. Any text or data (excluding prompts you send to the Service, which are governed by section five of the Terms of Service section 5) you input into the Service (“Inputs”) that include personal data will also be collected by us. We do not control, and are not responsible for, LLMs’ handling of your Inputs or Outputs, including for use in their model training. To understand how your Inputs are used by AI models, check the terms of the providers here.

The types of personal data that we may collect include, but are not limited to: the personal data you provide to us, personal data collected automatically about your use of our Site or Service, and information from third parties, including our business partners.

Personal Data You Voluntarily Provide to Us

The personal data we collect from you may include:

  • Information that you provide by filling in forms on our Site or Service. This includes information provided at the time of or after registering and creating an account, using our Service, and sending Inputs through the Service. We may also ask you for information when you report a problem with our Site or Service.
  • Records and copies of your correspondence (including email addresses), if you contact us.
  • Your responses to surveys that we might ask you to complete for internal purposes.
  • Details of transactions you carry out through our Site and of the fulfillment of Credits purchases. 
  • Your search queries on the Site.

Personal Data Collected Automatically

As you navigate through and interact with our Site or Service, we may use automatic data collection technologies to collect certain information about your device, browsing actions and patterns, including:

  • Details of your visits to our Site, including, but not limited to, traffic data, location data, log files to understand how our Service is performing, browser history, search, information about links you click, pages you view, and other communication data and the resources that you access and use on the Site.
  • Information about your computer and internet connection, including your IP address, operating system and browser type, time zone setting, and other unique personal or online identifiers. 
  • Information about your preferences to make your use of the Site more productive, via the use of Cookies. For more information on Cookies, please see Cookies and Other Tracking Technology.

Cookies and Other Tracking Technology

We may use cookies, embedded scripts, and other similar tracking technologies (“Tracking Technologies”) to collect additional personal data automatically as you interact with the Site and to personalize your experience with our Site. These technologies help us recognize you, customize or personalize your experience, market additional products or services to you, and analyze the use of our Service to make them safer and more useful to you.

Cookies

Cookies are small web files that a site or its provider transfers to your device’s hard drive through your web browser that enables the site’s or provider’s system to recognize your browser and remember certain information. We use first-party and third-party cookies for the following purposes: to make our Site function properly, to improve our Site and Services, to make login to our Site or Service easier (such as by remembering your User ID), to recognize you when you return to our Site, to track your interaction with the Site, to enhance your experience with the Site and Service, to remember information you have already provided, to collect information about your activities over time and across third party websites or other online services in order to deliver content tailored to your interests; and to provide a secure browsing experience during your use of our Site. The length of time a cookie will stay on your browsing device depends on whether it is a "persistent" or "session" cookie. Session cookies will only stay on your device until you stop browsing. Persistent cookies stay on your browsing device until they expire or are deleted (i.e. after you have finished browsing).

The following types of cookies are used on our Site:

  • Strictly Necessary Cookies. These cookies are essential because they enable you to use our Site. For example, strictly necessary cookies allow you to access secure areas on our Site. Without these cookies, some elements of our Site cannot be provided. These cookies do not gather information about you for marketing purposes. This category of cookies is essential for our Site to work and they cannot be disabled.
  • Functional or Preference Cookies. We use functional cookies to remember your choices so we can tailor our Site to provide you with enhanced features and personalized content. For example, these cookies can be used to remember your name or preferences on our Site. We do not use functional cookies to target you with online marketing. While these cookies can be disabled, this may result in less functionality during your use of our Site.
  • Performance or Analytic Cookies. These cookies collect passive information about how you use our Site, including webpages you visit and links you click. We use the information collected by such cookies to improve and optimize our Site and Services. We do not use these cookies to target you with online marketing. You may choose to disable these cookies.

Changing Your Cookie Settings

Your browser may provide you with the option to refuse some or all browser cookies. You may also be able to remove cookies from your browser. You can use the browser with which you are viewing the Site to enable, disable or delete cookies. Please note, if you set your browser to disable cookies, you may not be able to access secure areas of the Site. Also, if you disable cookies other parts of the Site may not work properly. You can find more information about how to change your browser cookie settings at http://www.allaboutcookies.org.

Analytics and Other Tracking Technologies

We may use third-party Service Providers (defined below) to monitor and analyze the use of our Site. Presently, we use Google Analytics. Google Analytics is a web analytics service offered by Google LLC (“Google”) that tracks and reports Site traffic. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en. Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics, available at: https://tools.google.com/dlpage/gaoptout.

We may also use Tracking Technologies to collect "clickstream" data, such as the domain name of the service providing you with Internet access, your device type, IP address used to connect your device to the Internet, your browser type and version, operating system and platform, the average time spent on our Site, webpages viewed, content searched for, access times and other relevant statistics, and assign unique identifiers to the device or other credentials you use to access the Site for the same purposes. In collecting clickstream data, we use PostHog, a web and products analytics platform that may also utilize session replay features. You may review PostHog’s terms and conditions here: https://posthog.com/terms.

Pages of our Site and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs), and session replay tools that permit us, for example, to track purchase and transaction events, interaction with our Site, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity) and monitoring user behavior.

2. How We Use Your Personal Data

We will only use your personal data as described in this Privacy Policy or as disclosed to you prior to such processing taking place. The purposes for which we may use your personal data include:

  • Providing the Service.
  • Contacting you regarding the administration of any features or functions of the Site or Service you have registered to use.
  • Providing you with notices about your account.
  • Notifying you about changes to our Site, our policies, terms or any products or Service we offer or provide though it.
  • Sending you marketing and promotional emails.
  • Responding to your questions or other requests.
  • Allowing you to participate in the interactive features of the Site and Service.
  • Tailoring your experience on the Site or Service and/or otherwise customizing what you see when you visit and use the Site or Service.
  • Saving your user account, registration and profile data or other personal data (so you do not have to re-enter it each time you visit or use the Site or Service).
  • Tracking your return visits to and use of the Site and Service.
  • Accumulating and reporting aggregate, statistical information in connection with the Site and the Service and user activity.
  • Determining which features and services users like best to help us operate, enhance and improve our Site.
  • Keeping you secure and safe while using our Site, which requires us to process your personal data to combat spam, malware, malicious activities or security risks.
  • Improving and enforcing our security measures.
  • Maintaining legal and regulatory compliance.
  • Enforcing compliance with our Terms of Service and other policies.
  • Investigating and resolving disputes.
  • Investigating and preventing fraud, abuse, and violations of our Terms of Service and other policies, unlawful or criminal activity, unauthorized access to or use of personal data or our systems and networks.
  • Protecting you, others and our business.
  • For any other purpose disclosed to you prior to you providing us your personal data or which are reasonably necessary to provide the Service or other related products and/or services requested.

Aggregated and De-identified Information

We may process personal data in an aggregated or de-identified form to analyze the effectiveness of our Services, study user behavior, and to share with corporate partners, including in the following ways:

  • To process Feedback. In so doing, we disassociate Inputs and Outputs from your user ID.
  • To create analytics reports to share on our Site, such as through our Rankings page. We disassociate Inputs and Outputs from your user ID and assign a topic category to each Input.
  • To improve the user experience. We may analyze and aggregate general user behavior and usage data. This information does not identify individual users. However, for purposes of de-bugging, we may re-identify your user ID with any stored Inputs.
  • With corporate partners. With your consent, we may disclose Inputs in aggregated, de-identified form, where those Inputs are disassociated from your user ID, in connection with a contractual relationship with corporate partners.

3. How We Share and Disclose Your Personal Data

We may share or disclose your personal data in the following circumstances:

  • Website Service Providers. We may employ other companies and individuals to facilitate our Site and Service (“Service Providers”), provide the Service on our behalf, perform Service-related services or assist us in analyzing how our Site and Service are used. The Service Providers have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. The Service Providers are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them.
  • Affiliates and Corporate Partners. We may share your personal data with our subsidiaries, affiliates, and partners.
  • Corporate Transactions. To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal data held by us about our Site users and Users is among the assets transferred, and you agree to and do hereby consent to our assignment or transfer of rights to your personal data.
  • Analytics. We may share aggregated, de-identified information (for example, aggregated trends about the general use of our Service) publicly and with our affiliates, subsidiaries, and partners.
  • Consent. We may disclose your personal data for any purpose with your consent.
  • As Required by Law. Under certain circumstances your personal data may be subject to processing pursuant to laws, regulations, judicial or other government subpoenas, warrants, or orders. We may be required to disclose personal data in coordination with regulatory authorities in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We will preserve and disclose any and all information to law enforcement agencies or others if required to do so by law or in the good faith belief that such preservation or disclosure is reasonably necessary to: (a) comply with legal or regulatory process (such as a judicial proceeding, court order, or government inquiry) or obligations that we may owe pursuant to ethical and other professional rules, laws, and regulations; (b) enforce our Terms of Service and other policies; (c) respond to claims that any content violates the rights of third parties; or (d) protect the rights, property, or personal safety of OpenRouter, its employees, its users, its clients, and the public.

4. Your Rights and Choices

Marketing Communications

We strive to provide you with choices regarding the personal data you provide to us. If you do not wish to have your email address or other contact information used by us to promote our Service, you can opt-out by sending an email stating your request to [email protected]. You may also choose to stop receiving our promotional or marketing communications by following the “unsubscribe” instructions included in these messages. This opt out does not apply to information provided by us as a result of your participation in our product release, product service experience or other transactions. Please note that "opt-out" and "unsubscribe" requests may not take effect immediately and may take a reasonable amount of time to receive, process and apply, during which time your information shall remain subject to the prior privacy settings. Additionally, you should be aware that any information provided to third parties prior to your election to opt-out or unsubscribe will not be retrieved or rescinded, unless required by applicable law.

Keeping Your Personal Data Accurate and Deletion

We are committed to ensuring that your personal data is kept accurate and up to date. However, it is up to you to update it with any changes. You can review and change your personal data by logging into the Site and visiting your account profile page. You may also send us an email at [email protected] to request access to, or to correct any personal data that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

If you no longer wish to use our Service, or no longer wish to have your personal data be processed, you may request to delete your account and the information in your account, subject to certain limitations, by emailing us at [email protected]. Once you submit your request, we will send an email to the email address linked to your account requesting that you confirm your deletion request. Once you confirm your request to delete your account and data, your account will no longer be accessible while we process your request. Once you confirm your request, this process cannot be canceled, undone, withdrawn, or reversed. When your account is deleted, all associated personal data is deleted, unless we are required to maintain it for regulatory and compliance purposes or for a legal or business necessity.

Rights Regarding Your Personal Data

Depending on where you live and the laws that apply in your country of residence, you may have certain rights regarding your personal data, as described here. While we strive to prioritize the protection of personal data and comply with all applicable laws, we may decline a request from you if we have a lawful reason for doing so.

To exercise your rights, you or your authorized agent may submit a request by email at [email protected]. We may first request additional information to verify your identity before processing your request.

  • Right to know. You have the right to know what personal data OpenRouter processes about you, including categories of personal data, the categories of sources from which it is collected, the business or commercial purposes for collection, and categories of third parties to whom we disclose it.
  • Access and data portability. You have the right to request a copy of the personal data we process about you, subject to certain exceptions and conditions. You may also have the right to export your information in certain cases.
  • Deletion. You have the right to request that we delete personal data we have collected from you when you use our Service, subject to certain exceptions.
  • Correction. You have the right to request that we correct inaccurate personal data we have retained about you, subject to certain exceptions.
  • Objection. You have the right to object to processing of your personal data, subject to certain exceptions. You can opt out of marketing and advertising communications by following the directions in this section.
  • Restriction. You have the right to restrict our processing of personal data in certain circumstances.
  • Withdrawal of consent. Where our processing of your personal data is based on your consent, you have the right to withdraw consent, but that withdrawal does not affect the lawfulness of processing based on consent provided before your withdrawal.
  • Sale and targeted marketing of our products and Services. We do not “sell” your personal data as that term is defined by applicable laws and regulations.

5. Data Security

We have implemented measures designed to secure your personal data from accidental loss and from unauthorized access, use, alteration and disclosure. All personal data you provide to us is stored on our secure servers behind firewalls. 

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Site, you are responsible for keeping this password confidential. You should not share your password with anyone. 

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our Site. Any transmission of personal data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Site.

6. Integration of Third-Party Platforms and Services

The Site may be linked to, rely on and be integrated with websites, applications, interfaces, services and platforms operated by other companies, including Third-Party Services. We are not responsible for the privacy practices of such websites, applications, interfaces, services and platforms operated by third parties that are linked to, rely on and/or integrated with the Site or for the privacy practices of third party advertising companies. Once you leave this Site via a link or access a third-party service, you should check applicable privacy policies to determine, among other things, how related companies process personal data they may collect about you. This Privacy Policy applies solely to information collected by OpenRouter.

7. Personal Data Retention

We are subject to applicable laws on the retention of information and will retain your information for as long as is reasonably necessary to comply with our business and legal obligations and to meet regulatory and compliance requirements. When the personal data we have collected is no longer required by us, we and our service providers will perform the necessary procedures for destroying, deleting, erasing or converting it into an anonymous form as permitted or required by applicable laws.

8. Eligibility

This Site is offered and available to users who are 13 years of age or older. By using the Site, you represent and warrant that you are at least 13 years old and that your parent or guardian has granted you permission to use the Site, or that you are of legal age to form a binding contract with us. If you do not meet all of these requirements, you must not access or use our Site.

9. Data Transfers

When you access our Site or Service, your personal data may be transferred to our servers in the US, or to other countries outside the European Economic Area (“EEA”) and the UK. This may be a direct provision of your personal data to us, or a transfer that we or a third party make. When information is transferred outside the EEA or UK, we ensure it benefits from an adequate legal protection by relying on (1) adequacy decisions from the European Commission under Article 45 of the European Union’s General Data Protection Regulation (GDPR) where they recognize that a country outside of the EEA offers an adequate level of data protection, and (2) standard contractual clauses approved by the European Commission under Article 46 of the GDPR, which allows companies in the EEA to transfer data outside the EEA.

10. Governing Law

All disputes arising out of or relating to the Privacy Policy or the purchase, registration, or use of any OpenRouter product or Service shall be governed by New York law regardless of where you access the Site or the Service, and notwithstanding any conflicts of law principles.

11. Additional U.S. State Disclosures and Legal Bases for Processing Under the GDPR

The GDPR and some U.S. state privacy laws require specific disclosures. The information below provides additional information about the categories of personal data we collect and how we use and disclose that information. You can read more about the personal data we collect and where we collect it from in the “Collection of Personal Data” above, how we use personal data in “How We Use Your Personal Data” above, and how we retain personal data in “Personal Data Retention” above. You can read more about your rights regarding the personal data collected in the “Rights Regarding Your Personal Data” above.

  • Categories of Personal Data:
    • We collect the following information, as described above: Identifiers, such as your name, contact details, IP address, and other device identifiers Commercial information, such as your transaction history Network activity information, such as how you interact with our Service Communication information, such as your contact information when you send us email Geolocation data, such as the general area from which your device accesses our Service based on information like its IP address, or precise location information you choose to provide Your account credentials
  • Use of Personal Data
    • We use this information for the following purposes, as described above: Provide, analyze, and maintain our Service. The legal basis is to perform a contract with you. Improve and develop our Service and conduct research. The legal basis is a legitimate interest. Communicate with you, including to send you information about our Service and events. The legal basis is your consent. Prevent fraud, illegal activity, or misuses of our Service, and to protect the security of our systems and Service. The legal basis is legitimate interest and legal obligation. Comply with legal obligations and protect the rights, privacy, safety, or property of our users, OpenRouter or third parties. The legal basis is legitimate interest and legal obligation.
  • Disclosure of Personal Data
    • We may disclose this information in the following circumstances, as described above: Vendors, service providers, and affiliates to process in accordance with our instructions Government authorities or other third parties for the legal reasons described above Parties involved in corporate transactions Other users and third parties you interact or share information with