Privacy Policy
Last updated: August 20, 2026
The short version
We do not store the content of your prompts or the model's responses. Request bodies pass through our gateway to the upstream provider and are not written to our database or logs. We record only metadata needed to bill you and keep the service running: token counts, model name, timing, and status.
What we collect
Account data
- Email address (and name, if you sign in with Google)
- A hashed password, if you register with email and password
- Account status and creation date
Usage metadata
- Per request: model, token counts (input, output, cache read, cache write), latency, HTTP status, and which API key was used
- Aggregated daily totals per model
Not collected: prompt text, system prompts, completions, file contents, tool inputs, or tool results.
Payment data
Payments are processed by our payment provider acting as merchant of record. We never see or store your full card number. We receive only the transaction amount, currency, status, and an order reference.
Technical data
- IP address and user agent, retained briefly for abuse prevention and rate limiting
- Essential cookies for keeping you signed in. We do not use advertising or cross-site tracking cookies.
How we use it
- To operate the Service, authenticate requests, and meter usage
- To bill you accurately and show you your own usage
- To detect fraud, abuse, and runaway spend
- To send transactional email (verification, receipts, balance and service alerts)
We do not sell your data, and we do not use your data to train models.
Who we share it with
- Upstream model providers — your request content is transmitted to them to fulfil the request, subject to their own terms and privacy practices.
- Payment provider — to process payments and refunds.
- Infrastructure providers — hosting, database, and email delivery.
- Legal — where required by valid legal process.
Retention
- Usage metadata: 12 months, then aggregated or deleted
- Billing records: as required by tax and accounting law
- Account data: until you delete your account
- Prompt and completion content: not retained
Your rights
Depending on where you live (including under the GDPR and CCPA) you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Email support@globalrouterai.com and we will respond within 30 days. You can delete your account at any time from your dashboard; unused credits are refunded under our Refund Policy.
International transfers
The Service is operated internationally and your data may be processed outside your country of residence, including in jurisdictions with different data protection laws.
Children
The Service is not directed to anyone under 18 and we do not knowingly collect their data.
Changes
Material changes will be posted here with an updated date.