1. Introduction
Welcome to AnRouter. This Privacy Policy ("Policy") describes how AnRouter, Inc. ("AnRouter," "we," "us," or "our") collects, uses, and discloses information about you when you access or use our website, API gateway, and related services (collectively, the "Services").
By using the Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please discontinue use of the Services.
Data Controller: AnRouter, Inc. is the data controller for personal data processed through the Services. For questions, contact us at privacy@anrouter.com.
2. Data We Collect
We collect information in the following ways:
2.1 Information You Provide
- Account Data. When you register, we collect your email address, name, and password (stored as a hash).
- API Usage. Prompts, model requests, and responses transmitted through our gateway. We do not store prompt content beyond what is necessary to route and deliver the response.
- Billing Information. Payment method details are handled by our payment processor and are not stored on AnRouter servers.
- Communications. Messages you send us via support channels or contact forms.
2.2 Automatically Collected Data
- Log Data. IP address, browser type, operating system, request timestamps, HTTP status codes, and referring URLs.
- Usage Metrics. Token counts, model selections, latency, and error rates—used for billing, capacity planning, and reliability monitoring.
- Cookies & Local Storage. Session tokens and preference settings. We do not use third-party advertising cookies.
2.3 Data from Third Parties
If you sign in via a third-party OAuth provider (e.g., Google), we receive your name and email address from that provider as permitted by your authorization.
3. How We Use Your Data
We use the information we collect to:
- Provide, operate, and improve the Services, including routing API requests to appropriate model providers.
- Manage your account, authenticate requests, and enforce rate limits or usage quotas.
- Process payments and generate invoices.
- Monitor system health, detect abuse, and troubleshoot technical issues.
- Send transactional communications (account confirmations, billing alerts, security notices).
- Comply with legal obligations and respond to lawful requests from public authorities.
- Conduct aggregate, anonymized analytics to understand usage patterns and inform product decisions.
We do not use your API prompts or responses to train AI models. We do not engage in automated profiling that produces legal or similarly significant effects on you.
5. Data Retention
We retain your account and billing data for as long as your account remains active, plus an additional period required by applicable law or our legitimate business interests (typically 7 years for financial records).
API request logs (excluding prompt content) are retained for up to 90 days for debugging and billing verification, then deleted or anonymized. You may request earlier deletion by contacting us.
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access & Portability. Request a copy of the personal data we hold about you.
- Correction. Request correction of inaccurate or incomplete data.
- Deletion. Request deletion of your personal data, subject to legal retention obligations.
- Restriction. Request that we limit processing of your data in certain circumstances.
- Objection. Object to processing based on our legitimate interests.
- Withdraw Consent. Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, email privacy@anrouter.com. We will respond within 30 days.
7. Security
We implement industry-standard technical and organizational measures to protect your data, including TLS encryption in transit, AES-256 encryption at rest, access controls, and regular security audits.
No method of transmission over the Internet is 100% secure. If you believe your account has been compromised, contact us immediately at support@anrouter.com.
8. International Data Transfers
AnRouter is headquartered in the United States. By using the Services, you acknowledge that your data may be processed in the United States and other countries that may have different data protection laws than your home country.
Where required, we rely on appropriate transfer mechanisms such as Standard Contractual Clauses (SCCs) or equivalent safeguards to transfer data from the European Economic Area, United Kingdom, or Switzerland.
9. Children's Privacy
The Services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will promptly delete it.
10. Changes to This Policy
We may update this Policy from time to time. When we do, we will update the "Last Updated" date at the top. For material changes, we will notify you by email or by posting a prominent notice in the console dashboard.
Continued use of the Services after the effective date of any change constitutes acceptance of the updated Policy.
11. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us: