Last updated: June 9, 2026
What we collect
- Account data — name, email, and a password hash.
- Billing data — handled by Stripe; we never see full card numbers.
- Usage metadata — for each API call: tool category, chosen provider, latency, status, units, and price. This powers your usage dashboard and our routing statistics.
- Request content — queries, URLs, prompts, documents, and code are forwarded to the selected provider to fulfil your request. We do not store request or response bodies after the request completes.
Third-party providers
Fulfilling a request means sending its content to one or more underlying providers (e.g. Brave for search, Mistral for OCR). Each provider processes that content under its own privacy policy. The docs list the providers per category, and the response always tells you which provider served your call.
What we don't do
- We don't sell your data.
- We don't use your request content to train models.
- We don't run third-party advertising or tracking scripts.
Security
- All traffic is TLS end to end; the service runs on Cloudflare's edge.
- API keys are stored hashed and are displayed exactly once, at creation.
- Provider keys you bring (BYOK) are encrypted at rest with AES-256-GCM and are only decrypted in-memory to sign the outbound provider request.
- The router, catalog, and pricing are open source — audit the exact code that handles your requests.
Retention and deletion
Usage metadata is retained for billing and abuse prevention. Delete your account by emailing support@route.tools and we will remove your personal data within 30 days, except records we must keep for accounting.