If you use Luma through an enterprise customer's deployment, this privacy policy does not protect you; instead, the enterprise customer controls how your data is handled under a separate agreement.
This analysis describes what Luma AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Users accessing Luma through an employer or enterprise customer may have substantially different privacy protections than consumer users, and Luma explicitly disclaims responsibility for enterprise customer data practices.
If you interact with Luma through a workplace or enterprise deployment, your personal data is governed by your employer's or the enterprise customer's privacy policies and agreements with Luma, not by this document. This means the rights and protections described in this policy may not apply to you in that context.
How other platforms handle this
Where ZipRecruiter processes your Personal Data in the capacity of a service provider (data processor), and you seek access, or want to correct, amend, or delete your Personal Data...we will provide you with the data controller's contact information, so you can contact them directly.
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
When you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide some of our Services, you may not be able to use those Services.
"This Privacy Policy does not apply where Luma acts as a processor or service provider on behalf of enterprise customers. In that context, our processing of your personal information is subject to our agreements with the enterprise customer. In those cases, the enterprise customer is the data controller, and its privacy policies will apply to the processing of your personal information. We are not responsible for the privacy or data security practices of our enterprise customers, which may differ from those explained in this Privacy Policy.Excerpt from Luma AI's Privacy Policy
REGULATORY LANDSCAPE: This provision engages GDPR's controller-processor distinction under Articles 4, 26, and 28, which require that data processing agreements between controllers and processors include specific mandatory provisions.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Users accessing Luma through an employer or enterprise customer may have substantially different privacy protections than consumer users, and Luma explicitly disclaims responsibility for enterprise customer data practices.
If you interact with Luma through a workplace or enterprise deployment, your personal data is governed by your employer's or the enterprise customer's privacy policies and agreements with Luma, not by this document. This means the rights and protections described in this policy may not apply to you in that context.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Luma AI.