OctaRouter

Privacy Policy

Last updated: May 26, 2026

This Privacy Policy explains how OctaRouter ("we", "us") collects, uses, and protects information when you use our website, dashboard, and API gateway ("Service").

1. Information we collect

Account information: email address, password (stored hashed), and profile data you provide at signup.

Billing information: payment events and top-up history via Stripe. We do not store full card numbers on our servers.

Usage data: API request metadata such as timestamps, model IDs, token counts, latency, status codes, and cost — for billing, rate limiting, and dashboard logs.

Technical data: IP address, browser type, and cookies needed for authentication and security.

2. How we use information

We use collected data to:

  • Provide and secure the Service
  • Process payments and maintain prepaid credit balances
  • Show usage logs in your dashboard
  • Detect abuse, enforce limits, and improve reliability
  • Communicate about your account (e.g. verification codes, service notices)

We do not sell your personal information.

3. AI request content

Depending on configuration, request and response payloads may transit our gateway to upstream LLM providers. Treat sensitive data accordingly. Retention of full message bodies, if any, follows our operational policies and provider agreements.

4. Sharing

We may share information with:

  • Infrastructure and payment processors (e.g. hosting, Stripe) to operate the Service
  • LLM providers necessary to fulfill routed requests
  • Authorities when required by law or to protect rights and safety

5. Retention

We retain account and billing records as long as your account is active and as needed for legal, tax, and fraud-prevention obligations. Usage logs are kept for operational and billing purposes for a limited period.

6. Security

We use industry-standard measures including encryption in transit, access controls, and secure credential handling. No method of transmission or storage is 100% secure.

7. Your choices

You may update account details in the dashboard. You may request account deletion by contacting support; some records may be retained where required by law.

8. International transfers

If you access the Service from outside our primary operating region, your data may be processed in other countries with different data protection laws.

9. Changes

We may update this Policy. The "Last updated" date will change when we do. Continued use after updates means you accept the revised Policy.

10. Contact

Privacy questions: reach us through official OctaRouter support channels listed on the website.