Privacy

Last updated October 27, 2026.

RedRouter is an inference API and chat for developers and security researchers. This page explains what we collect, why, and how long we keep it.

Account

We store your email address to identify your account and send sign-in links. If you sign in with Google or GitHub, we receive only your verified email address from them. We do not receive your password, contacts, repositories, or files. We never ask for identity documents.

Payments

Stripe processes card and USDC payments. We never see or store full card numbers. We keep a record of each purchase, refund, and credit balance, and the billing country Stripe reports.

Requests and chat

To serve a request, we send its content to the inference infrastructure that runs the model. We ask that infrastructure not to log requests, but we cannot independently verify what it retains.

Zero Data Retention is off unless you turn it on in Settings. While it is off, we keep an encrypted copy of prompts and completions for up to 30 days, solely for abuse prevention, support, debugging, and billing disputes. Access to that content is restricted and audited. It is deleted automatically afterward.

While Zero Data Retention is on, we store no prompts or completions for your requests, and saving chats is off. It applies to requests made after you turn it on and adds 20% to every token price, except during a paid monthly plan.

We record usage metadata for every request (model, token counts, cost, timing, and errors) to bill you and run the service. Chats you choose to save stay in your account until you delete them.

Bug reports you submit, including attached files, are stored encrypted for up to 180 days to investigate issues.

Other services

Cloudflare provides network delivery and security for RedRouter. It processes request traffic in transit, including prompts, responses, and authentication information.

Our public pages use Cloudflare Web Analytics, which counts page views in aggregate without cookies, fingerprinting, or session recording.

We use Amazon Web Services for hosting, an email provider to deliver sign-in links, and Stripe for payments. We do not sell your data, run advertising trackers, or record your sessions.

Affiliates

A first-party attribution cookie remembers the first referral code for 90 days by default. We store keyed HMACs of your IP address and user-agent, rather than raw values, for 30 days to check self-referrals across signups, attribution and sessions. We keep referral, commission, application and promotional credit records to operate the program. The public leaderboard masks Standard codes and shows rounded referred spend, never emails.

Your choices

You can delete saved chats at any time. To delete your account or ask about your data, email support@redrouter.org.