Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
California residents have the right to know what personal data Midjourney holds, ask for it to be deleted, and opt out of data sales, and can make these requests by emailing privacy@midjourney.com.
This analysis describes what Midjourney's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause operationalizes statutory CCPA obligations by designating a contact mechanism and specifying the four core rights California residents may exercise under state law, establishing the procedural pathway for rights assertion.
The updated terms establish a Community Localization program that permits users to submit translations and localization content. By submitting translations, users irrevocably assign all rights, title, and interest (including intellectual property and moral rights waiver where applicable) to Midjourney. The terms state that Midjourney may use, modify, monetize, or reject translations for any reason, and may suspend or terminate participation at any time. Users provide translations voluntarily without expectation of compensation or attribution. You can choose whether or not to participate in the Community Localization program; submission of translations is optional and governed by these new terms.
View change record →California residents can exercise CCPA rights by contacting privacy@midjourney.com to request data access, deletion, or opt-out of data sales, providing a concrete mechanism to manage their personal information held by Midjourney.
How other platforms handle this
You may make a verifiable consumer request related to your personal information twice per 12-month period.
When you exercise any of your applicable legal rights to access, amend, or delete your personal information, we may request additional information from you for the purpose of confirming your identity.
Any disclosures We provide will only cover the 12-month period preceding the verifiable request's receipt.
Monitoring
Midjourney has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, use, and disclose; the right to request deletion of your personal information; the right to opt out of the sale of your personal information; and the right to non-discrimination for exercising these rights. To submit a request to know, delete, or opt out, please contact us at privacy@midjourney.com.Excerpt from Midjourney's Terms of Service
REGULATORY LANDSCAPE: This provision engages the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). The California Privacy Protection Agency (CPPA) and California Attorney General share enforcement authority. The provision's assertion that Midjourney does not sell personal information in the traditional sense should be assessed against CPRA's expanded definition of 'sharing' for cross-context behavioral advertising purposes. GOVERNANCE EXPOSURE: Medium. The CCPA/CPRA compliance disclosure is present and identifies the key rights, but the interaction between the AI training data license (irrevocable) and the CCPA deletion right creates potential tension that requires legal analysis. If deletion of personal data is technically constrained by the irrevocable training license, Midjourney's deletion response processes should be assessed for adequacy. JURISDICTION FLAGS: California residents have the most clearly defined rights under this provision. Other US states with comprehensive privacy laws, including Virginia, Colorado, and Texas, may have similar rights not explicitly addressed in the terms, which may create gap compliance risks. CONTRACT AND VENDOR IMPLICATIONS: Vendors and partners receiving data from Midjourney should assess whether their data processing activities are covered by Midjourney's service provider agreements. Enterprise customers should verify whether submitting employee or customer personal data through the platform creates CCPA service provider obligations that require contractual documentation. COMPLIANCE CONSIDERATIONS: Legal teams should verify that Midjourney's privacy@midjourney.com contact and response processes satisfy CCPA's 45-day response requirement and that deletion requests are technically honored in the context of the irrevocable AI training license. Multi-state privacy compliance should be assessed for users in states beyond California.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
The clause operationalizes statutory CCPA obligations by designating a contact mechanism and specifying the four core rights California residents may exercise under state law, establishing the procedural pathway for rights assertion.
California residents can exercise CCPA rights by contacting privacy@midjourney.com to request data access, deletion, or opt-out of data sales, providing a concrete mechanism to manage their personal information held by Midjourney.
ConductAtlas has identified this type of provision across 295 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Midjourney.