MegaRouter Privacy Policy

    Last updated: April 9, 2026

    MegaRouter ("MegaRouter", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access or use the MegaRouter platform and services (collectively, the "Services").

    By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use our Services.

    1. Information We Collect

    1.1 Information You Provide to Us

    We may collect the following information that you provide directly:

    • Account information: When you register for an account, we collect information such as your email address, username, and authentication credentials (e.g., via wallet address or OAuth provider).
    • Payment information: If you purchase credits or services, we collect billing details necessary to process your payment. We do not store full payment card numbers; payment processing is handled by third-party payment providers.
    • Communications: If you contact us for support or business inquiries, we may collect the contents of your messages, your email address, and any other information you choose to provide.
    • Organization data: If you create or join an organization on MegaRouter, we collect organization name, member information, and configuration settings you provide.

    1.2 Information Collected Automatically

    When you use the Services, we automatically collect certain information, including:

    • Usage data: API call records, token counts, model selections, routing decisions, response times, error logs, and other usage metrics associated with your account.
    • Log data: Server logs including your IP address, browser type and version, operating system, referring URLs, and timestamps of requests.
    • Cookies and similar technologies: We use cookies and similar tracking technologies (e.g., local storage) to maintain your session, remember your language preferences, and improve our Services.

    1.3 Information We Do Not Collect

    MegaRouter operates as an AI routing intermediary. We do not persistently store the content of your Prompts or the Outputs returned by AI Model Providers beyond what is necessary for billing, logging, and abuse prevention purposes. We do not use your Prompts or Outputs to train any AI models.

    2. How We Use Your Information

    We use the information we collect for the following purposes:

    • Providing and improving the Services: To operate the platform, process API requests, route Prompts to AI Model Providers, and display usage analytics.
    • Account management: To create and manage your account, authenticate your identity, and handle organization membership and permissions.
    • Billing and payments: To process transactions, manage your credit balance, and resolve billing disputes.
    • Communications: To respond to your support requests, send service notifications (e.g., quota warnings, billing alerts via Lark or Telegram if configured), and provide important updates about our Services.
    • Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorized access, and abuse of the Services.
    • Legal compliance: To comply with applicable laws, regulations, legal processes, and governmental requests.
    • Analytics: To analyze usage patterns and improve the performance, features, and user experience of our Services.

    3. How We Share Your Information

    We do not sell your personal information. We may share your information in the following circumstances:

    3.1 AI Model Providers

    When you submit a Prompt through MegaRouter, your Prompt is transmitted to the selected AI Model Provider (e.g., OpenAI, Anthropic, Google, DeepSeek, and others) for processing. Each AI Model Provider's handling of your data is governed by their respective privacy policies and terms of service. MegaRouter is not responsible for the data practices of AI Model Providers.

    3.2 Service Providers

    We may share information with trusted third-party service providers who assist us in operating the platform, processing payments, providing analytics, or delivering notifications (such as Lark or Telegram integrations you configure). These providers are contractually obligated to handle your data securely and only for the purposes we specify.

    3.3 Organization Administrators

    If you are a member of an organization on MegaRouter, your usage data (including token consumption, API key activity, and cost breakdowns) may be visible to your organization's administrators, consistent with the organization's permission settings.

    3.4 Legal Requirements

    We may disclose your information if required to do so by law or in response to valid legal process (such as a subpoena, court order, or government request), or when we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud or security issues.

    3.5 Business Transfers

    In the event of a merger, acquisition, restructuring, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

    4. Data Retention

    We retain your personal information for as long as your account is active or as needed to provide the Services. We may also retain certain information for longer periods as required to:

    • Comply with our legal obligations;
    • Resolve disputes and enforce our agreements;
    • Maintain billing records and usage logs;
    • Investigate and prevent fraud and abuse.

    When you close your account, we will delete or anonymize your personal information within a reasonable period, subject to the above retention requirements.

    5. Cookies and Tracking Technologies

    We use the following types of cookies:

    • Strictly necessary cookies: Required for the Services to function, including session authentication and security tokens.
    • Functional cookies: Used to remember your preferences such as language settings (e.g., NEXT_LOCALE).
    • Analytics cookies: Used to understand how users interact with the Services and to improve performance.

    You can control or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Services.

    6. Data Security

    We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS), access controls, and regular security assessments.

    However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a security breach that affects your personal information, we will notify you as required by applicable law.

    7. International Data Transfers

    Your information may be transferred to and processed in countries other than the country in which you reside, including countries where data protection laws may differ from those in your jurisdiction. When we transfer your data internationally, we take steps to ensure appropriate safeguards are in place in accordance with applicable data protection laws.

    8. Your Rights and Choices

    Depending on your location and applicable law, you may have the following rights regarding your personal information:

    • Access: The right to request a copy of the personal information we hold about you.
    • Correction: The right to request correction of inaccurate or incomplete personal information.
    • Deletion: The right to request deletion of your personal information, subject to certain exceptions.
    • Portability: The right to receive your personal information in a structured, commonly used, and machine-readable format.
    • Objection: The right to object to certain processing activities, including direct marketing.
    • Withdrawal of consent: Where processing is based on consent, the right to withdraw that consent at any time.

    To exercise any of these rights, please contact us at mega_care@outlook.com. We will respond to verified requests within a reasonable timeframe in accordance with applicable laws. Note that certain rights may be subject to limitations based on our legal obligations or legitimate interests.

    9. Children's Privacy

    Our Services are not directed to children under the age of 18. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we may have collected information from a minor, please contact us at mega_care@outlook.com.

    10. Third-Party Links and Services

    Our Services may contain links to or integrations with third-party websites, services, or AI Model Providers. This Privacy Policy does not apply to third-party services, and we are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you use in connection with MegaRouter.

    11. Notification Services

    MegaRouter supports optional push notification integrations via Lark and Telegram. If you configure these integrations, usage alerts (such as quota warnings and budget thresholds) will be sent through those platforms. By enabling these integrations, you agree that relevant notification data (such as your usage metrics and alert thresholds) will be transmitted to those platforms. MegaRouter does not control how those platforms process your data.

    12. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. For significant changes, we may also provide additional notice through the Services or via email.

    Your continued use of the Services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

    13. Contact Us

    If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

    For data subject rights requests or privacy-related inquiries, please include "Privacy Request" in the subject line of your email to help us respond promptly.