Privacy policy
⚠️ This page is a docs-site mirror; the canonical version is on the main site at https://primerouter.ai/privacy-policy. In conflict, the main site wins.
Last sync: see "Last updated" at the bottom.
Our commitments
primerouter wires privacy into architecture, not marketing:
- Prompts not stored by default: unless you or the site admin explicitly enables log retention, prompts and replies are not persistently stored
- Your content is yours: we don't claim any rights over your submissions
- No training: prompts are not used by primerouter for training. Upstream providers' training policies vary — see each provider's official statement
- Independently verifiable: core code is auditable — privacy isn't a promise, it's engineering
What we collect
Required for registration
- Email (login, notifications)
- Username (publicly displayed)
- Password (hashed, never plaintext)
- OAuth provider (if you choose GitHub / Discord login)
Required for usage
- API call metadata: trace_id, model, token counts, upstream provider, status, timestamp
- Top-up and billing records: amount, method, tx hash (for crypto)
- IP address (rate limiting and anti-fraud)
- User-Agent (browser characteristics, rate limit and triage)
What we do not collect
- Your prompt content (unless explicitly enabled)
- Model reply body (same)
- Bank card / credit card numbers (handled by Stripe etc.; we only see tokens)
- Crypto wallet private keys (your on-chain identity is just a public address)
How we use this
| Use | Purpose |
|---|---|
| Service | Routing, billing, rate limiting |
| Security | Anti-abuse, anti-DDoS, anomaly detection |
| Notifications | Quota alerts, security warnings, important service updates |
| Compliance | Government legal demands; see "Legal disclosure" below |
We do not:
- Sell your data to third parties
- Use your data for targeted advertising
- Share your identity with upstream providers (only the necessary request content)
Upstream providers
Each API call requires forwarding to upstream (OpenAI / Anthropic / DeepSeek / etc.) to get a model response. This means:
- Request content is sent to upstream
- Upstream has its own data policy — we prefer training-opt-out-friendly upstreams
- Upstream may keep its own request logs (see each provider's policy)
If you have strong privacy requirements for a specific upstream, check that upstream's official policy before selecting it in Available models.
Data retention
| Data | Retention |
|---|---|
| Account basics | 30-day grace period after account deletion, then purge |
| Call metadata logs | Default 90 days, auto-purged |
| Billing / financial records | At least 5 years (compliance) |
| Security audit logs | 1 year |
| Cookies / sessions | Cleared on session expiry or logout |
Your rights
You can:
- View / export all account data (Console → Personal → Export my data)
- Edit / delete editable fields
- Cancel account (30-day soft-delete window)
- Disable log retention (off by default)
- Request data portability (JSON export)
Cookies
We only use:
- Necessary cookies: login session, anti-CSRF
- Preferences cookies: language, theme
We do not use third-party analytics / advertising cookies.
Crypto top-up specifics
Crypto top-ups are by nature permanently visible on the public chain — anyone can see your wallet's transfer to our address. This is the chain's nature, not primerouter's.
We:
- Don't proactively associate your wallet address with real-world identity
- Don't publicize your top-up amount or frequency
If you require higher on-chain privacy, mixers / privacy coins are options outside our control.
Legal disclosure
When receiving lawful demands from authorities with jurisdiction, we may have to provide some of your information. We:
- Provide only the legally-required minimum
- Don't proactively over-comply
- Notify you when legally permitted (unless gagged)
Security
We use:
- Site-wide HTTPS
- Password hashing (bcrypt / argon2)
- Encrypted DB connections
- API keys hashed at rest
- Periodic penetration testing
In a data-breach event, all affected users will be notified by email within a reasonable time.
Internationalization
primerouter serves global users. Depending on the operating entity's jurisdiction, GDPR / CCPA etc. may apply — see the main-site canonical version.
Contact
- Privacy: privacy@primerouter.ai
- Security disclosure: security@primerouter.ai
- General support: see About