OpenRouter's two-hop architecture
OpenRouter is a routing layer that exposes one API and one billing relationship while forwarding requests to dozens of downstream model providers (Anthropic, OpenAI, Mistral, Groq, and many open-weight hosts). This is convenient for model experimentation and cost management, but it changes the privacy model.
Every OpenRouter request crosses two administrative boundaries:
- Your client to OpenRouter (api.openrouter.ai).
- OpenRouter to the downstream provider you selected.
OpenRouter sees the prompt to route and log usage. The downstream provider receives the prompt to generate the response. The retention and training defaults that apply to your data are the union of both parties' policies.
Retention and training defaults
OpenRouter itself does not train models. Its privacy policy emphasizes that "we do not control, and are not responsible for, LLMs' handling of your Inputs or Outputs, including for use in their model training." The downstream provider's policy governs whether your prompt is used for training and how long it is retained at that provider.
For OpenRouter-side data (account, billing, usage metadata, and any logging it performs), retention follows their general business and legal-obligations policy.
Zero data retention
ZDR through OpenRouter is not a single toggle. It requires:
- The downstream provider to support ZDR on the endpoint you call.
- Your OpenRouter and provider account to be eligible.
- The provider-specific endpoint to be one of the ZDR-eligible endpoints listed in their documentation.
OpenRouter exposes provider-by-provider data policies in their docs. For high-assurance no-retention workloads, calling the provider directly is usually cleaner than going through OpenRouter.
How Meetily uses OpenRouter
Meetily routes OpenRouter traffic through your own API key. Both OpenRouter's terms and the downstream provider's terms apply. The transcript text is sent over TLS to api.openrouter.ai, forwarded to the downstream provider you selected, and the response is returned to Meetily and stored locally on your device. Audio is never transmitted to OpenRouter at any point.
For production summary traffic with strict privacy requirements, calling the underlying provider directly (or running local Ollama) removes the OpenRouter administrative boundary entirely.