openrouter prompt and i/o logging is off by default https://openrouter.ai/docs/guides/privacy/data-collection

the providers you route to will of course have their own policies, which openrouter surfaces to you through the webui and api. you can even configure automatic routing to select providers based on your policy preferences.