Effective 2026-10-24. This policy covers the model endpoints operated by nova26 (the "provider") and listed on OpenRouter.
When OpenRouter routes a request to our endpoint, we receive the request body (messages and generation parameters) and process it on fleet-owned machines located in the United States.
We record operational metadata for each request: timestamp, endpoint path, HTTP status, latency, and prompt/completion token counts. We do not log, store, or retain prompt or completion content. Request and response bodies pass through memory for the duration of the request and are not written to disk.
Prompts and completions are never used for training, fine-tuning, evaluation datasets, or any other secondary purpose.
Operational metadata logs are retained for 90 days and then deleted. There is no content retention: prompt and completion content retention is zero (0) days.
We do not sell or share request data with third parties. Metadata may be visible to OpenRouter as part of normal marketplace operation (usage counts for billing), under OpenRouter's own policies.
Endpoints are served over HTTPS only. Access to serving machines is restricted to the operator's private network.
Privacy questions: [email protected]