Deleting your Luma account stops future data collection but does not cancel any rights you already granted Luma over content that has been used in its AI models or data systems.
This analysis describes what Luma AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision directly limits the practical effect of account deletion as a privacy remedy, meaning users cannot fully remove their content's influence from Luma's AI systems even after closing their account.
Interpretive note: The enforceability of this provision against EU and California users may be limited by GDPR Article 17 and CCPA statutory deletion rights; applicable law may override the contractual license persistence assertion in these jurisdictions.
Even if you delete your Luma account and request removal of your personal data, any content you submitted that was already incorporated into Luma's AI models, systems, or aggregated datasets will continue to be covered by the licenses you granted, with no mechanism described for removing it.
How other platforms handle this
Descript may terminate or suspend your account and access to the Services at any time, for any reason, with or without notice. Upon termination, your right to use the Services will immediately cease. If you wish to terminate your account, you may do so by following the instructions on the Services. ...
Some operating system developers, such as Apple, allow mobile application users to request deletion of accounts created within an application. If you request deletion of your account, State Farm may still retain your information for legal, auditing, regulatory and business purposes. Retention period...
If your payment method is no longer valid at the time a renewal Subscription Fee is due, then Anysphere reserves the right to delete your account and any information associated with your account without any liability to you.
Monitoring
Luma AI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Note that deletion of your Account does not affect any licenses you have granted to Luma under this Agreement with respect to Input or Output that has already been incorporated into Luma's systems, models, or Aggregated Data prior to deletion.— Excerpt from Luma AI's Luma AI Terms of Service
(1) REGULATORY LANDSCAPE: This provision directly engages GDPR Article 17 (right to erasure) and the CCPA right to deletion. The tension between this assertion and statutory deletion rights is material. Under GDPR, a controller must erase personal data upon request unless an exception applies; the assertion that a contractual license survives deletion does not automatically constitute a valid exemption under GDPR. The California Privacy Protection Agency and EU Data Protection Authorities are the relevant enforcement bodies. The FTC also has jurisdiction over deceptive practices related to deletion representations. (2) GOVERNANCE EXPOSURE: High. This is one of the most legally significant provisions in the document because it carves out an exception to account deletion that directly conflicts with the reasonable consumer expectation that deleting an account removes their data. The provision's enforceability against EU and California users is uncertain and may require regulatory guidance or litigation to resolve. (3) JURISDICTION FLAGS: EU/EEA users have the strongest statutory claims that this assertion is unenforceable as applied to personal data, given GDPR Article 17's erasure right. California residents have parallel rights under CCPA. In jurisdictions without comparable statutory deletion rights, this provision is more likely to be enforced as written. (4) CONTRACT AND VENDOR IMPLICATIONS: Organizations that have entered into Data Processing Agreements with Luma should review whether those agreements address the persistence of training licenses post-deletion and whether Luma's processing post-deletion is consistent with the DPA's scope. This provision should be flagged in any enterprise procurement review as a potential gap in data governance controls. (5) COMPLIANCE CONSIDERATIONS: Privacy teams should evaluate whether this provision is adequately disclosed in Luma's account deletion flow and privacy notice. If Luma is used in an EU context, a legitimate interest assessment or specific contractual basis for continued model training use post-deletion should be identified and documented. Organizations should include this provision in their third-party data processor risk assessments.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision directly limits the practical effect of account deletion as a privacy remedy, meaning users cannot fully remove their content's influence from Luma's AI systems even after closing their account.
Even if you delete your Luma account and request removal of your personal data, any content you submitted that was already incorporated into Luma's AI models, systems, or aggregated datasets will continue to be covered by the licenses you granted, with no mechanism described for removing it.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Luma AI.