10 Total
0 High severity
7 Medium severity
3 Low severity
Summary

Midjourney's privacy policy explains what personal information the company collects when you use its AI image generation service, including your prompts, uploaded images, IP address, and browsing behavior, and how it uses and shares that data. Your information may be shared with third-party advertising and analytics partners, and could be transferred if the company is sold or merged. You have rights to access, delete, or opt out of certain data sharing, which you can exercise through your account settings.

Technical Summary

Midjourney's Privacy Policy (last updated June 2, 2025) governs the collection, use, disclosure, and retention of personal data across its image generation platform, website, Discord integrations, and third-party service channels. The Policy establishes data processing obligations under multiple regulatory frameworks including GDPR (EEA, UK, Switzerland), CCPA (California), and COPPA (children under 13), and enumerates specific consumer rights including access, deletion, portability, and opt-out of data sharing. Notable provisions include the use of inference data and sensory data (uploaded images), data transfer to international jurisdictions, sharing with advertising and analytics partners via cookies, and potential data transfer in the event of a corporate merger or acquisition. Midjourney explicitly states it does not sell personal data but acknowledges sharing through advertising cookies, which may constitute 'sharing' under CCPA definitions.

Institutional Analysis

This Policy engages GDPR (EEA/UK/Switzerland), CCPA (California), and COPPA (under-13 age gate), requiring compliance teams to assess adequacy of Standard Contractual Clauses for international data t…

This Policy engages GDPR (EEA/UK/Switzerland), CCPA (California), and COPPA (under-13 age gate), requiring compliance teams to assess adequacy of Standard Contractual Clauses for international data transfers, sufficiency of consent mechanisms for non-essential cookies, and CCPA 'sharing' obligation…

🔒

Compliance intelligence locked

Regulatory exposure, material risk, and due diligence action items.

Evidence Provenance
Captured March 16, 2026 06:04 UTC
Document ID CA-D-000094
Version ID CA-V-000109
Wayback Machine View archived versions →
SHA-256 430c888f3525f9f29797996a614d261fe31a695b10e78b90896aec7bbb50987e
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Change Timeline
Medium Severity — 7 provisions
Low Severity — 3 provisions