Privacy Policy

We collect the minimum information needed to operate the Service:

• Account data — username, email address (if provided), and password (stored only as a salted hash).
• Billing data — top-up amounts, balance, redemption codes, and order records. Card and payment details are handled by our payment processors and are never stored on our servers.
• Usage data — API requests you make through the gateway, including timestamps, target model, token counts, and computed cost. This is used for billing and to show your usage history.
• Technical data — IP address, browser/agent type, and request metadata used for security, rate limiting, and abuse prevention.

OmniRouter is a gateway: when you call the API, your request payload (prompts, messages, and parameters) is forwarded to the upstream model provider you select — such as Anthropic, OpenAI, or Google — so they can generate a response.

Your prompt and completion content is processed in transit to fulfill the request. We retain request metadata (model, tokens, cost, timestamp) for billing and usage history, but we do not use your prompt or completion content to train any models. Upstream providers process your content under their own privacy policies and data-handling terms.

• To provide, maintain, and route the gateway Service.
• To process top-ups, track balance, and prevent fraud.
• To show you usage, spend, and request history.
• To secure the Service, enforce rate limits, and investigate abuse.
• To send essential service communications (for example, email verification codes or account notices).

We do not sell your personal information. We share data only with:

• Upstream AI model providers, to fulfill your API requests.
• Payment processors, to complete top-ups and orders.
• Infrastructure providers that host the Service.
• Authorities, where required by applicable law or to protect our rights and users.

We retain account and usage records for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account, after which we remove or anonymize your personal data except where retention is legally required.

We use industry-standard measures including encryption in transit (HTTPS/TLS), hashed passwords, and access controls. API keys are secrets — treat them like passwords. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below.

We use a small number of cookies that are necessary for the Service to function — for example, to keep you signed in and to remember your language preference. We do not use advertising cookies.

The Service and our providers may process data in countries other than your own. Where we transfer data internationally, we take steps to ensure it remains protected consistent with this Policy.

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us information, contact us and we will delete it.

We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by additional notice.

Questions about this Policy? Email us at support@omnirouter.cc.