59 Total
7 High severity
41 Medium severity
11 Low severity

Key Facts

When may Stability AI process user information without consent?
Stability AI may in exceptional cases process user information without consent where applicable law permits, including where collection is clearly in the interests of an individual and consent cannot be obtained promptly.
Does Stability AI state that no purpose described in the notice will require retention of personal information for longer than one year?
Stability AI states that no purpose described in the notice will require retention of personal information for longer than one year.
Has Stability AI disclosed or sold personal information to third parties for a business or commercial purpose in the preceding twelve months?
Stability AI has not disclosed or sold personal information to third parties for a business or commercial purpose in the preceding twelve months and will not sell personal information to visitors, users, or consumers in the future.
Will Stability AI sell personal information in the future?
Stability AI has not disclosed or sold personal information to third parties for a business or commercial purpose in the preceding twelve months and will not sell personal information to visitors, users, or consumers in the future.
What may Stability AI process user information to do?
Stability AI may process user information to develop and display personalized content and advertising tailored to users' interests and location.
May Stability AI process user information to develop and display personalized content and advertising?
Stability AI may process user information to develop and display personalized content and advertising tailored to users' interests and location.
Can Stability AI promise that hackers or other unauthorized third parties will not defeat its security?
Stability AI cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat its security.
When may Stability AI share or transfer user information?
Stability AI may share or transfer user information in connection with or during negotiations of any merger, sale of company assets, financing, or acquisition of all or a portion of its business.
May Stability AI share user information in connection with a merger or sale of company assets?
Stability AI may share or transfer user information in connection with or during negotiations of any merger, sale of company assets, financing, or acquisition of all or a portion of its business.
On whom does Stability AI place the risk of transmitting personal information?
Stability AI places the risk of transmitting personal information to and from the Services on the user.
Stay ahead of the changes
Track Stability AI and get the diff the day its terms change.
Summary

This document explains what personal information Stability AI collects about you, how it may use that information — including for personalized advertising — and your rights over it. Stability AI commits not to sell your personal information and says it will not keep it longer than one year for any of the purposes described. If you are a California resident, you can request that Stability AI stop sharing your data, and it must act on that request within fifteen days.

Analysis

This privacy policy establishes the conditions under which Stability AI collects, uses, retains, and shares user personal information. Stability AI automatically collects device and usage metadata upon access and collects voluntarily provided personal information when users express interest in its products or services. Processing purposes include personalized content and advertising tailored to users' interests and location, with an outer retention limit of one year for all stated purposes. Stability AI commits that it has not sold personal information to third parties for business or commercial purposes in the preceding twelve months and will not sell it in the future, while reserving the right to share user information during corporate transactions such as mergers or acquisitions. Security guarantees are explicitly disclaimed, and the risk of data transmission is allocated to the user.

What this means for you

Stability AI automatically collects technical data such as your IP address, browser type, and operating system simply by your accessing the Services, with no action required on your part. Your information may be used for personalized advertising and may be shared with third parties if Stability AI is involved in a merger, acquisition, or asset sale. Stability AI explicitly disclaims any guarantee against security breaches and places the risk of data transmission on you. California residents can submit an opt-out request to stop future sharing of personal information, and Stability AI must act on that request within fifteen days of submission.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

Featured, High severity
Featured, Medium severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

59 provisions
12 featured
9 clause types
7 high severity
Stay ahead of the changes

Monitoring

Stability AI has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Canadian Exceptional Processing Without Consent and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
UK GDPR
United Kingdom
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured April 19, 2026 06:30 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000330
Version ID CA-V-000820
SHA-256 0880eea64bfd95b197afa2c278769a305ad9ff06439345c85e25c447ae6df82b
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans