The gateway has its own policy

OpenRouter says prompt/response storage is off by default unless relevant logging or data-use options are enabled; it separately retains request metadata. That distinction shows why 'no training' should not be treated as a blanket promise of no records.

The upstream is another layer

Its provider-logging page explains that model suppliers have separate policies, with training preferences distinct from the gateway's own policy. Third-party tools and plugins may introduce additional services. One company's policy cannot establish what every participant does.

Questions before sending sensitive work

Our checklist: who receives the text, who can inspect logs, how long records remain, and what changes during fallback? Test with redacted material until those answers are clear. A privacy badge or the original model vendor's logo does not answer these questions.