Luma AI Privacy Policy

This is Luma AI's privacy policy, explaining how the company collects and uses your personal data when you use its AI video and image generation services. The most important thing to know is that Luma uses the content you upload — including images, videos, and your chat conversations with AI agents — to train and improve its AI models, and there is no clear opt-out for this use. If you are in the EU or UK, you can contact Luma to request deletion or restriction of your personal data by emailing hello@lumalabs.ai.

This Privacy Policy governs Luma AI, Inc.'s collection, use, disclosure, and processing of personal information from users of its website, applications, and AI-powered services, operating under a consent, contractual necessity, legitimate interests, and legal obligation framework for EEA/UK users per GDPR. The policy creates obligations for Luma to collect extensive personal data categories including user content (images, videos, AI conversation inputs/outputs), device data, location, collaboration data, and usage information, while explicitly reserving the right to use this data to train and improve AI and machine learning models. Notably, the policy permits sharing personal information with 'current or future partners and affiliates for any of the purposes described in this Privacy Policy' without restriction on affiliate scope, and explicitly states AI conversation inputs may be 'reproduced in the Outputs,' creating unusual risk around sensitive data inadvertently submitted by users. The policy engages GDPR (Arts. 6, 13, 17, 20), UK GDPR, CCPA/CPRA (California residents), COPPA (children under 13 excluded), and FTC Act Section 5; material compliance considerations include the breadth of AI training data use relying on 'legitimate interests' as legal basis, which faces heightened scrutiny from EU supervisory authorities, and the absence of explicit opt-out mechanisms for AI training use of personal data.