Provision record
Leonardo AI · Leonardo AI Privacy Policy · View original document ↗

User Data Rights and Opt-Out Mechanisms

Medium severity Medium confidence Explicit document language Common · 289 of 352 platforms
Stay ahead of the changes
Track Leonardo AI and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

The policy states that users may have rights to access, correct, delete, or export their personal data depending on jurisdiction, and that California residents may opt out of the sale or sharing of personal information, with all requests submitted to privacy@leonardo.ai.

This analysis describes what Leonardo AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes the procedural mechanism for exercising data subject rights, requiring email contact rather than an in-platform self-service tool, which is the primary avenue for users to exercise GDPR, CCPA, and Australian Privacy Act entitlements.

Interpretive note: The policy does not specify response timelines or the verification process for rights requests, creating uncertainty about whether the mechanism fully satisfies GDPR Article 12 procedural requirements.

Consumer impact (what this means for users)

Under this clause, users may submit access, correction, deletion, or portability requests by emailing privacy@leonardo.ai, with the specific rights available depending on the user's jurisdiction. California residents may additionally opt out of the sale or sharing of personal information through the same contact mechanism.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Email privacy@leonardo.ai with your account details and a description of the right you wish to exercise (access, correction, deletion, portability, or opt-out of sharing). The company will respond in accordance with the applicable regulatory timeline for your jurisdiction.
  • Export Your Data
    Email privacy@leonardo.ai to request a portable copy of your personal data. Include your account information and specify that you are requesting data portability.

How other platforms handle this

Square Medium

You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties.

Instacart Medium

By providing your mobile phone number, you consent to receive automated text (SMS) messages from Instacart...To opt out, reply STOP. For help, reply HELP or contact us directly...

Glassdoor Medium

We will also provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
Depending on your location, you may have certain rights regarding your personal information, including the right to access, correct, delete, or port your data. To exercise these rights, please contact us at privacy@leonardo.ai. For California residents, you may also have the right to opt out of the sale or sharing of your personal information.

Excerpt from Leonardo AI's Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

REGULATORY LANDSCAPE: This provision engages GDPR Chapter III (data subject rights including access, rectification, erasure, and portability), CCPA/CPRA (rights to know, delete, correct, and opt out of sale/sharing), and the Australian Privacy Act 1988 APP …

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • State Attorney General
    State AGs in California, New York, Texas, and other states can investigate violations of state consumer protection and privacy laws, including CCPA (California), SHIELD Act (New York), and equivalents.
    Who can file: Residents of states with comprehensive privacy laws — primarily California, Virginia, Colorado, Connecticut, and Utah
    What you need: Evidence of the violation, explanation of how your state rights were affected, and your account or contact information with the company
    What to expect: Outcomes vary by state. May result in investigation, enforcement action, or requirement for the company to change practices. No direct individual compensation in most cases.

    Search "[your state] attorney general consumer complaint" to find your state's direct complaint form

Applicable regulations

EU AI Act
European Union
CCPA/CPRA
California, USA
Colorado AI Act
US-CO
Connecticut Data Privacy Act Amendments
US-CT
EU AI Act - High Risk Provisions
EU
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Leonardo AI Privacy Policy
Entity
Leonardo AI
Document last updated
May 5, 2026
Tracking information
First tracked
May 20, 2026
Last verified
May 20, 2026
Record ID
CA-P-012585
Document ID
CA-D-00480
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
0ba9b7d269b5cd0431aa2c34babd080d0a40f42bd0ba3161212af22698b0b17f
Analysis generated
May 20, 2026 23:09 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Leonardo AI
Document: Leonardo AI Privacy Policy
Record ID: CA-P-012585
Captured: 2026-05-20 23:09:47 UTC
SHA-256: 0ba9b7d269b5cd04…
URL: https://conductatlas.com/platform/leonardo-ai/leonardo-ai-privacy-policy/provision/CA-P-012585/user-data-rights-and-opt-out-mechanisms/
Accessed: Sept. 12, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Leonardo AI's User Data Rights and Opt-Out Mechanisms clause do?

This provision establishes the procedural mechanism for exercising data subject rights, requiring email contact rather than an in-platform self-service tool, which is the primary avenue for users to exercise GDPR, CCPA, and Australian Privacy Act entitlements.

How does this clause affect you?

Under this clause, users may submit access, correction, deletion, or portability requests by emailing privacy@leonardo.ai, with the specific rights available depending on the user's jurisdiction. California residents may additionally opt out of the sale or sharing of personal information through the same contact mechanism.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.

Is ConductAtlas affiliated with Leonardo AI?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Leonardo AI.