Deleting your Luma account stops future data collection but does not cancel any rights you already granted Luma over content that has been used in its AI models or data systems.
This analysis describes what Luma AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision directly limits the practical effect of account deletion as a privacy remedy, meaning users cannot fully remove their content's influence from Luma's AI systems even after closing their account.
Interpretive note: The enforceability of this provision against EU and California users may be limited by GDPR Article 17 and CCPA statutory deletion rights; applicable law may override the contractual license persistence assertion in these jurisdictions.
Provision was renamed from 'Revoke' to 'Terminate' for more precise legal terminology, though substance remains identical.
View full change record →Even if you delete your Luma account and request removal of your personal data, any content you submitted that was already incorporated into Luma's AI models, systems, or aggregated datasets will continue to be covered by the licenses you granted, with no mechanism described for removing it.
How other platforms handle this
After your account is deleted, we keep data about interactions you've had on our service to prevent abuse, ban evaders and others in an effort to protect and ensure the safety and security of our service and our members.
If you do not have a social security number you may still be eligible to open a limited Revolut personal account. Depending on your immigration status, we may ask you to provide us with a copy of your supported U.S. visa and may limit your access to certain products and features.
We keep information for as long as we need it to provide our products, comply with legal obligations, or for other legitimate purposes, such as to maintain safety, security, and integrity.
Monitoring
Luma AI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Note that deletion of your Account does not affect any licenses you have granted to Luma under this Agreement with respect to Input or Output that has already been incorporated into Luma's systems, models, or Aggregated Data prior to deletion.— Excerpt from Luma AI's Luma AI Terms of Service
(1) REGULATORY LANDSCAPE: This provision directly engages GDPR Article 17 (right to erasure) and the CCPA right to deletion. The tension between this assertion and statutory deletion rights is material. Under GDPR, a controller must erase personal data upon request unless an exception applies; the assertion that a contractual license survives deletion does not automatically constitute a valid exemption under GDPR. The California Privacy Protection Agency and EU Data Protection Authorities are the relevant enforcement bodies. The FTC also has jurisdiction over deceptive practices related to deletion representations. (2) GOVERNANCE EXPOSURE: High. This is one of the most legally significant provisions in the document because it carves out an exception to account deletion that directly conflicts with the reasonable consumer expectation that deleting an account removes their data. The provision's enforceability against EU and California users is uncertain and may require regulatory guidance or litigation to resolve. (3) JURISDICTION FLAGS: EU/EEA users have the strongest statutory claims that this assertion is unenforceable as applied to personal data, given GDPR Article 17's erasure right. California residents have parallel rights under CCPA. In jurisdictions without comparable statutory deletion rights, this provision is more likely to be enforced as written. (4) CONTRACT AND VENDOR IMPLICATIONS: Organizations that have entered into Data Processing Agreements with Luma should review whether those agreements address the persistence of training licenses post-deletion and whether Luma's processing post-deletion is consistent with the DPA's scope. This provision should be flagged in any enterprise procurement review as a potential gap in data governance controls. (5) COMPLIANCE CONSIDERATIONS: Privacy teams should evaluate whether this provision is adequately disclosed in Luma's account deletion flow and privacy notice. If Luma is used in an EU context, a legitimate interest assessment or specific contractual basis for continued model training use post-deletion should be identified and documented. Organizations should include this provision in their third-party data processor risk assessments.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision directly limits the practical effect of account deletion as a privacy remedy, meaning users cannot fully remove their content's influence from Luma's AI systems even after closing their account.
Even if you delete your Luma account and request removal of your personal data, any content you submitted that was already incorporated into Luma's AI models, systems, or aggregated datasets will continue to be covered by the licenses you granted, with no mechanism described for removing it.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Luma AI.