GenAgent Trust Hub
Menu

Luma

FTier FHighest risk · 25/100
  • The policy allows AI training; it does not describe an opt-out.
  • Your data is used for personalized ads, including by third-party ad companies.
  • Data is shared with partners and affiliates; you can opt out.
  • Staff may review your content; the policy does not describe an opt-out.

Your uploads train their AI under a license; they can close you anytime.

Highest riskMedium riskLow risk

Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.

Privacy policy · April 20, 2026 ↗Terms · May 14, 2026 ↗15 min read · professional or legal expert level23 lines verified word for word
  • Uses your content for AI training with no opt-out

Collected

What is collected

Account info, uploads, chats, device IDs, usage, cookies, and data from partners and logins.

Read the exact line

Privacy policy

“We collect images, videos, and other files you upload to our Services.”

Training

How it is used

They use your content to run the product and to train and improve their AI models.

Read the exact line

Privacy policy

“Train, develop, and improve the artificial intelligence, machine learning, and models that we use to support our Services;”

Sharing

Who may see it

Vendors, affiliates, analytics and ad partners, and connected apps can get your information.

Read the exact line

Privacy policy

“We may disclose information we receive to our current or future partners and affiliates for any of the purposes described in this Privacy Policy.”

Kept

How long it is kept

They keep data as long as they think they need it, including backups after you delete.

Read the exact line

Privacy policy

“we may retain information for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.”

Controls

Your controls

You can delete your account in settings and email them for access or deletion requests.

Read the exact line

Terms of service

“You may delete your Account at any time through your account settings or by contacting Luma at support@lumalabs.ai.”

Fine print

The fine print

They can close you anytime; fees usually non-refundable.

Read the exact line

Terms of service

“Luma may, in its sole discretion, terminate this Agreement or Customer’s Account on the Services, or suspend or terminate Customer’s access to the Services, at any time for any reason or no reason, with or without notice”

Expand “Read the exact line” to see the source alongside the explanation.

What you can turn off

The controls and opt-outs their own documents describe, and where they say to find them.

  1. Delete your account

    Account settings or email support@lumalabs.ai

  2. Cancel a subscription at least one day before renewal

    Account settings or email support@lumalabs.ai

  3. Request access, deletion, or ad-sharing opt-out

    Email hello@lumalabs.ai or write 380 Hamilton Ave, P.O. Box 102, Palo Alto, CA, 94301

If a switch is not where they say, the deletion request above still applies.

Line by line

The lines that matter most, worst first.

1 · How it is used

They take a license to use what you upload to train their AI, and the documents do not describe a way to turn that off.

Read the exact line

Terms of service

“create, test, improve, train, or otherwise develop the artificial intelligence or machine learning models, systems, architecture, weights, or related technology used by Luma”

For example, a video you generate on the free plan can be used to train future Luma models.

2 · How it is used

Once your content is mixed into outputs or data, their rights do not end when you leave.

Read the exact line

Terms of service

“The foregoing license will be and with respect to any Input contained, incorporated, embodied, or otherwise reflected in Output, Usage Data, or Data.”

For example, deleting your account does not pull your old clips out of models they already trained.

3 · The fine print

They can shut your account without warning and without giving a reason.

Read the exact line

Terms of service

“Luma may, in its sole discretion, terminate this Agreement or Customer’s Account on the Services, or suspend or terminate Customer’s access to the Services, at any time for any reason or no reason, with or without notice”

For example, you could lose access overnight and only have a limited window to export files if a paid term just ended.

4 · The fine print

Paid plans auto-renew and they generally will not refund you.

Read the exact line

Terms of service

“All Fees are final and non-refundable unless otherwise determined by Luma.”

For example, if you forget to cancel one day before renewal, you are charged again with no refund.

5 · The fine print

If someone sues them over what you uploaded or what the AI made, you may have to pay their legal costs.

Read the exact line

Terms of service

“Customer will defend or at its option settle any claims, demands, or actions brought by a third party (“Claims”) against Luma, its affiliates, and their respective directors, officers, employees, agents, successors and assigns (collectively “Luma Parties”) arising out of or in connection with: (1) the Input or Output;”

For example, if a generated video looks like a real person and they get sued, you could be on the hook.

6 · How it is used

Staff can look at your inputs and outputs; there is no opt-out described.

Read the exact line

Terms of service

“Luma reserves the right to monitor any information transmitted or received through the Services (including Input and Output) for operational and other purposes”

For example, a private chat with an AI agent could be reviewed while they screen content.

7 · How it is used

Ad and analytics companies can track you on this site and elsewhere.

Read the exact line

Privacy policy

“Our third-party partners, such as analytics, advertising, and security partners, may also use these technologies to collect information about your online activities over time and across different services.”

For example, an advertising ID from your phone can be used to profile you across apps.

8 · How it is used

They can share your information with related companies, not only with vendors who run the product.

Read the exact line

Privacy policy

“We may disclose information we receive to our current or future partners and affiliates for any of the purposes described in this Privacy Policy.”

For example, a future partner could get data collected from your account for marketing listed in the policy.

9 · How long it is kept

You can close the account yourself in settings or by emailing support.

Read the exact line

Terms of service

“You may delete your Account at any time through your account settings or by contacting Luma at support@lumalabs.ai.”

For example, you open account settings and delete, then email hello@lumalabs.ai if you also want a privacy deletion request.

Words to know

Legal words from the lines above, in plain English.

affiliates
Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
retention
How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
model training
Using your content and conversations as examples to teach an AI system, which can then echo them in future answers. For example, a story you write in a chatbot may be studied by the company to make the next version of the bot.
perpetual
Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
irrevocable
Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
inputs and outputs
Inputs are what you type, say or upload to an AI; outputs are what it gives back to you. For example, the question you ask a chatbot is an input and its answer is an output, and both may be stored.
de-identified
Data with your name and obvious identifiers removed, though it can sometimes still be traced back to you. For example, your chats with names stripped out may still be kept and studied after you delete your account.
third parties
Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
How we got here · grade F · score 25/100 · 15 of 15 policy answers backed by a verified quote · 1 not stated
  • What does the app collect beyond what it needs to work?

    They collect account data, uploads, chats, device and advertising IDs, inferred location, usage and browsing on the service, cookies, social-login data including friends lists, and data from marketing partners.

  • Does it record your voice, face or body, and what happens to that?

    Photos, video, and audio you upload count as Input and can be used to train their models under the license in the terms.

  • Are your chats and uploads used to train AI models, and is that off by default?

    They say they use collected information and a license over Input and Output to train AI models, and they do not describe an opt-out.

  • Can employees or contractors read your conversations, and when?

    They reserve the right to monitor Input and Output for operational and other purposes, with no review opt-out described.

  • Are you profiled or tracked for advertising?

    They and advertising partners use cookies and advertising identifiers, and they mention opting out of sharing for targeted ads in some regions.

  • Do they sell or share your data, and can you opt out?

    They share with vendors, affiliates, and partners, and list a right to opt out of sharing for targeted advertising where local law applies.

  • What rights do they take over what you type and what the AI makes?

    You keep copyright in Input and they assign Output to you, but you grant a worldwide, irrevocable, sublicensable license that stays perpetual for content baked into models or aggregated data. Free-tier licenses also allow public display.

  • How long do they keep your data after you delete it, and can you delete it in the app?

    You can delete the account in settings, but they may keep backups and anything already in models, and they do not promise a short wipe deadline.

  • Does it build a lasting memory or profile of you, and can you see, edit or turn it off?

    Not stated in the documents.

  • Do they commit to basic security, and have they leaked data?

    They say they use reasonable organizational, technical, and administrative measures, but they do not guarantee security.

  • Is there a real age gate, and are teens protected?

    You must be 18, or 13–17 with a parent’s consent; under 13 is not allowed. Age is based on your statement, not a described ID check.

  • Will they tell you when the rules change, and is the policy specific?

    The privacy policy is dated; material privacy changes are posted by updating the date. Terms may change with notice, often at the next subscription term.

  • Can they close your account without warning, and can you get your data out first?

    They may terminate your account at any time for any reason or no reason, with or without notice. After a paid term ends you may have 30 days to export Input.

  • If something goes wrong, who pays?

    The service is as-is, liability is capped around $50 or six months of fees, and you must indemnify them for claims about your Input or Output.

  • Do subscriptions renew on their own, and can you get a refund?

    Subscriptions auto-renew unless you cancel at least one day before; all fees are final and non-refundable unless they decide otherwise. Price changes get at least 30 days’ notice.

The privacy policy is 3,258 words at a professional or legal expert level (Flesch reading ease 19.6); the terms are 9,488 words at a professional or legal expert level.

Your privacy
has an agent now

Be in control of your online privacy in the AI Era with confidence.

Gen

From Gen, the Company BehindNorton