Effective: January 15, 2026 · Last updated: March 1, 2026
AIRouter, Inc. ("we", "us") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. It applies to all users of the AIRouter platform and API.
| Data Category | Examples | Stored | Purpose |
|---|---|---|---|
| Account data | Email address, user ID | Yes | Authentication, account management |
| API keys | Your AIRouter API key | Yes (hashed) | Request authentication |
| Provider credentials | Third-party API keys | Yes (encrypted) | Proxying requests to providers |
| Agent configuration | Name, model, system prompt | Yes | Agent functionality |
| Request metadata | Timestamps, token counts, agent ID | Yes (90 days) | Billing, usage analytics |
| Request/response content | Messages, completions | No | Passed through only, never stored |
| Technical data | IP address, user agent, country | Yes (30 days) | Security, rate limiting, abuse prevention |
We use collected data exclusively for the following purposes:
We implement industry-standard security measures to protect your data:
Account data is retained for the lifetime of your account. Request metadata is retained for 90 days for billing purposes and then automatically deleted. Technical logs (IP addresses, access patterns) are retained for 30 days. Upon account deletion, all associated data is purged within 30 days.
When you send requests through AIRouter, your message content is transmitted to the AI provider you selected (e.g., Anthropic, OpenAI). These providers process your data under their own privacy policies. We encourage you to review:
Our infrastructure is hosted on third-party cloud providers. We select providers that maintain SOC 2 compliance and appropriate data protection standards.
Depending on your jurisdiction, you may have the following rights:
To exercise these rights, contact us at privacy@airouter.us. We will respond within 30 days.
Our servers are located in the United States. If you access the Service from outside the US, your data may be transferred to and processed in the US. By using the Service, you consent to this transfer. We rely on Standard Contractual Clauses where required for transfers from the EEA/UK.
The Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be communicated via email at least 14 days before they take effect. The "last updated" date at the top of this page reflects the most recent revision.
For privacy-related inquiries, contact our data protection team:
AIRouter, Inc.
Attn: Privacy Team
Email: privacy@airouter.us