APIsRouter.dev Privacy Policy

When your coding agent sends a request to POST /v1/chat/completions, the request payload (your source code, system instructions, and messages) is streamed in-memory through our Cloudflare Edge Worker directly to the selected inference cluster and immediately discarded after response delivery.

• We do not log raw prompt text or generated code completions in our database.
• Our database (usage_logs) records only operational billing metadata: model ID, prompt token count, completion token count, latency (ms), HTTP status code, and USD cost.

We eliminate password-reuse risks by enforcing passwordless Google OAuth 2.0 Single Sign-On verified cryptographically against Google’s public keys.

• Information Collected at Sign-In: Your verified Google email address, display name, and Google UID.
• API Key Hashing: Every apr-sk-live-... key is hashed using SHA-256 and encrypted with AES-256-GCM at rest.
• Payment Security: All Pay-As-You-Go wallet top-ups are processed directly by PayPal Orders v2. APIsRouter.dev never sees or stores your credit card or bank numbers.

If you optionally upload context files (such as AGENTS.md, .cursorrules, or JSONL datasets) to your personal Storage Vault:

• Files are strictly isolated to your authenticated user_id and checksummed with SHA-256.
• You can permanently delete any stored file in one click from the Storage Vault tab, which immediately purges the record from our Cloudflare D1 database.

To deliver sub-200ms global inference and 99.98% uptime, we rely on the following enterprise infrastructure providers:

• Cloudflare, Inc. — Global Edge Workers, DDoS mitigation, TLS 1.3 termination, and D1 database storage.
• OpenRouter & GMI Cloud (`gmicloud.ai`) — Primary and Secondary GPU inference clusters for executing model completions.
• Google Firebase Identity — OAuth 2.0 identity verification.
• PayPal, Inc. — Secure checkout and payment capture.