7 Total
2 High severity
5 Medium severity
0 Low severity
Summary

This is Stability AI's privacy policy explaining what personal data the company collects when you use its AI image and content generation tools, including your account details, prompts, usage data, and device information. The most important thing to know is that your prompts and interactions with Stability AI's models may be used to train and improve its AI systems, which means creative inputs you submit could influence future AI model development. If you are based in the EU, UK, or California, you have the right to request access to, correction of, or deletion of your personal data by contacting Stability AI's privacy team.

Technical Summary

This document is Stability AI's privacy policy governing the collection, use, and disclosure of personal data for users of its AI-powered services, websites, and APIs, with legal basis rooted in legitimate interests, contractual necessity, and consent under GDPR and UK GDPR frameworks given its GB-registered entity. The policy obligates Stability AI to respond to data subject access requests (DSARs), deletion requests, and portability requests, while committing to data retention limits and security safeguards; users are simultaneously required to accept broad data use for service improvement and AI model training. A notable deviation from industry standard is the policy's explicit acknowledgment that user-submitted content — including prompts and generated outputs — may be used to improve and train AI models, with limited granularity on opt-out mechanisms for this use case, creating ambiguity around consent under GDPR Art. 6(1)(a) and Art. 22 for automated processing. The policy engages GDPR (UK and EU), CCPA/CPRA for California residents, and implicitly the EU AI Act given Stability AI's generative AI products; material compliance considerations include cross-border data transfers (SCCs or adequacy decisions post-Brexit), the absence of a clearly articulated Data Protection Officer contact, and the broad legitimate interests basis claimed for AI training purposes.

Evidence Provenance
Captured April 19, 2026 06:30 UTC
Document ID CA-D-000330
Version ID CA-V-000820
Wayback Machine View archived versions →
SHA-256 0880eea64bfd95b197afa2c278769a305ad9ff06439345c85e25c447ae6df82b
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Institutional Analysis

🔒 Institutional analysis locked

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Upgrade to Professional — $149/mo
Change Timeline
View full version history (0 captures) →
Analyzed Changes

1 change analyzed since monitoring began.

What changed Stability AI updated their Stability AI Privacy Policy on April 14, 2026. Change detected: 1 sentence(s) modified. Document contained 204 sentences after update.
Consumer impact Stability AI changed the title/header label of their Privacy Policy page on April 14, 2026, adding the phrase 'Understand Privacy & Protect Data.' This is a cosmetic or SEO-related update with no change to the actual rights, data practices, or protections described in the policy. No action is needed from consumers as a result of this change.
Why it matters This change is limited to the document title and has no practical impact on how Stability AI collects, uses, or shares user data. Users' rights and protections remain unchanged.

Recent Clause-Level Changes Apr 14, 2026

8 provisions unchanged.

View full change record →
High Severity — 2 provisions
Medium Severity — 5 provisions

Cross-platform context

See how other platforms handle AI Model Training Use of User Content and similar clauses.

Compare across platforms →

Applicable Regulations

EU AI Act
European Union
CCPA/CPRA
California, USA
CFAA
United States Federal
CAN-SPAM
United States Federal
DMCA
United States Federal
DSA
European Union
GDPR
European Union
UK GDPR
United Kingdom