Luma AI · Luma AI Terms of Service · View original document ↗

Account Deletion Does Not Revoke Input Licenses

High severity High confidence Explicitdocumentlanguage Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Luma AI recorded 6 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Luma AI Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

The agreement states that deleting a Luma account does not terminate the licenses granted over Input or Output that Luma has already incorporated into its systems, AI models, or aggregated data before the deletion request was made.

This analysis describes what Luma AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes that the account deletion right does not function as a complete data rights mechanism where Input has already been used in model training or aggregated data. The operational scope of this carve-out depends on Luma's internal data pipeline timelines, which are not disclosed in the document.

Consumer impact (what this means for users)

Under this clause, users who delete their accounts retain no ability under this agreement to revoke licenses over Input already processed into Luma's AI models or aggregated datasets prior to deletion. The agreement separately states that Luma will cease using personal data for its own purposes upon deletion, subject to retention obligations required by law or the Privacy Policy.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Contact support@lumalabs.ai or use account settings to request deletion. The agreement states personal data use for Luma's own purposes will cease, subject to retention obligations, but licenses over already-incorporated Input survive deletion.

How other platforms handle this

Telegram Medium

By issuing a chargeback or refund request for Premium subscriptions paid for through a third party, you agree to allow Telegram to release necessary data to that third party regarding your account status and Telegram Premium purchases.

MetaMask Medium

We may share your personal information with our affiliates, meaning entities that control, are controlled by, or are under common control with Consensys. We also share information with service providers who assist in operating our services, subject to confidentiality obligations.

Ledger Medium

At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.

See all platforms with this clause type →

Monitoring

Luma AI has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Note that deletion of your Account does not affect any licenses you have granted to Luma under this Agreement with respect to Input or Output that has already been incorporated into Luma's systems, models, or Aggregated Data prior to deletion.

— Excerpt from Luma AI's Luma AI Terms of Service

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: This provision may create tension with GDPR Article 17's right to erasure, which in certain circumstances requires deletion of personal data used for AI training purposes, subject to exceptions for legitimate interests or legal obligations. The interaction between the contractual irrevocable license carve-out and statutory erasure rights is an active area of regulatory interpretation in the EU. The California Consumer Privacy Act also grants deletion rights that may not be fully addressed by this contractual carve-out. Enforcement authorities include EU data protection authorities and the California Privacy Protection Agency. (2) GOVERNANCE EXPOSURE: High for EU/EEA and California operations. The provision creates a defined limitation on the practical scope of the account deletion right, which may not align with regulatory expectations for data subject rights fulfillment under GDPR or CCPA. The absence of information about pipeline timing (when Input becomes 'incorporated') increases uncertainty about the scope of this limitation in practice. (3) JURISDICTION FLAGS: EU/EEA users face the most significant exposure, as GDPR Article 17 erasure rights apply to personal data processed for AI training with limited exceptions. California residents have statutory deletion rights under CCPA that may not be fully contractually waivable. The enforceability of the carve-out in these jurisdictions requires legal analysis beyond what the document itself establishes. (4) CONTRACT AND VENDOR IMPLICATIONS: B2B customers with data return or deletion obligations in their own downstream contracts should evaluate whether Luma's carve-out creates a gap in fulfillment of those obligations. Vendor assessments should document this limitation explicitly. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether the Data Subject Rights fulfillment process accounts for this carve-out, and whether privacy notices adequately disclose the limitation on deletion rights with respect to AI-incorporated Input. A data mapping exercise should identify the typical pipeline from Input submission to model incorporation to assess practical exposure windows.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has jurisdiction over consumer data rights disclosures and unfair or deceptive practices related to the practical scope of deletion rights offered to consumers.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Luma AI Terms of Service
Entity
Luma AI
Document last updated
May 5, 2026
Tracking information
First tracked
May 21, 2026
Last verified
May 21, 2026
Record ID
CA-P-012703
Document ID
CA-D-00498
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
1da3bb14f86647d0b3eff05ca1ae2daf91ff0bfd6e9aa59b03a66bfe8591b1d4
Analysis generated
May 21, 2026 00:31 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Luma AI
Document: Luma AI Terms of Service
Record ID: CA-P-012703
Captured: 2026-05-21 00:31:47 UTC
SHA-256: 1da3bb14f86647d0…
URL: https://conductatlas.com/platform/luma-ai/luma-ai-terms-of-service/account-deletion-does-not-revoke-input-licenses/
Accessed: May 25, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Luma AI's Account Deletion Does Not Revoke Input Licenses clause do?

This provision establishes that the account deletion right does not function as a complete data rights mechanism where Input has already been used in model training or aggregated data. The operational scope of this carve-out depends on Luma's internal data pipeline timelines, which are not disclosed in the document.

How does this clause affect you?

Under this clause, users who delete their accounts retain no ability under this agreement to revoke licenses over Input already processed into Luma's AI models or aggregated datasets prior to deletion. The agreement separately states that Luma will cease using personal data for its own purposes upon deletion, subject to retention obligations required by law or the Privacy Policy.

Is ConductAtlas affiliated with Luma AI?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Luma AI.