New provision creates a significant carve-out where enterprise customers' own privacy policies supersede Luma's stated commitments, limiting user protections in B2B contexts.

New provision explicitly authorizes data collection from external third parties and data brokers, expanding the sources of personal information beyond direct user interactions.

Separates and reframes conversation data collection into a distinct provision with reduced severity, making it less prominent despite the sensitivity of chat content including multimedia materials.

New provision articulates data retention and deletion practices, providing transparency about how long personal information is retained.

Removal of explicit partner and affiliate data sharing clause may represent narrowing of permitted disclosures or reframing under different provisions.

Removal of the explicit Do Not Track disclaimer may indicate compliance improvement or simply streamlining of privacy policy language.

Removal of COPPA compliance statement may obscure the service's position on child data protection or indicate the policy was relocated elsewhere in the document.

Removal of the high-severity 'Legitimate Interests' legal basis provision eliminates transparency around broad processing justifications, potentially obscuring reliance on legitimate interests for data use.

Severity downgraded from high to medium, and the provision was split—conversation/input data collection details moved to separate 'Conversation and Input Data Collection' provision, removing the explicit statement about Outputs reproducing Input information.

Text is identical; provision retained with no changes.

Provision name slightly revised from 'Broad Data Collection — Device, Location, and Usage Tracking' to 'Broad Device and Usage Data Collection' but excerpt text appears identical.

Text is identical; provision retained with no changes.