GenAgent Trust Hub
Menu

Midjourney

FTier FHighest risk · 31/100
  • The documents do not say whether your data trains AI.
  • Your data is used for personalized ads, including by third-party ad companies.
  • Data is shared with partners and affiliates; you can opt out.
  • The documents do not say who can read your content.

Your prompts and images are public by default, licensed forever; they can ban you anytime.

Highest riskMedium riskLow risk

Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.

Privacy policy · September 3, 2026 ↗Terms · May 27, 2026 ↗17 min read · college graduate level24 lines verified word for word

Collected

What is collected

Account info, prompts, uploads, IP and location, usage data, cookies, and sometimes partner data.

Read the exact line

Privacy policy

“Personal Data may include, but is not limited to: • Your username, display name, and profile picture for the Services • Prompts that You provide”

Training

How it is used

They use your data to run the service, market to you, analyze trends, and for ads cookies.

Read the exact line

Privacy policy

“For marketing and advertising purposes: Cookies and similar tracking technologies are used for marketing and advertising purposes with Your consent, where applicable.”

Sharing

Who may see it

Service providers, ad partners, and anyone in public rooms can see content; they say they do not sell it.

Read the exact line

Privacy policy

“This may also include third party payment processors and analytics and advertising partners that use cookies or similar technologies to help measure performance and deliver more relevant ads”

Kept

How long it is kept

They keep personal data as long as they say they need it; no clear delete-by date.

Read the exact line

Privacy policy

“Midjourney will retain Your Personal Data only for as long as is necessary for the purposes set out in this Policy.”

Controls

Your controls

You can delete your account and data, export data, and opt out of ad sharing in Account Settings.

Read the exact line

Privacy policy

“To manage your privacy preferences or export your data, please visit your Account Settings page.”

Fine print

The fine print

They can ban you anytime, no current-period refunds, and a forever content license.

No exact line could be verified.

Expand “Read the exact line” to see the source alongside the explanation.

What you can turn off

The controls and opt-outs their own documents describe, and where they say to find them.

  1. Opt out of ad sharing

    Account Settings page

  2. Delete your account and data

    www.midjourney.com/account, instructions at the bottom of the page

  3. Export your data

    Account Settings page

  4. Use Stealth if you paid for Pro or Mega

    Stealth feature on Pro or Mega plans

If a switch is not where they say, the deletion request above still applies.

Line by line

The lines that matter most, worst first.

1 · How it is used

They get a forever license to copy, show, and your prompts and images even after you leave.

Read the exact line

Terms of service

“You grant to Midjourney, its affiliates, successors, and assigns a , worldwide, non-exclusive, no-charge, , copyright license”

For example, if you cancel, they can still keep and reuse an image you generated last year.

2 · How it is used

Unless you pay for Stealth, other people can see and remix what you make.

Read the exact line

Terms of service

“By default, Your Content is publicly viewable and remixable.”

For example, a prompt you type in a public room can be copied and remixed by strangers.

3 · The fine print

They can shut your account without warning and without a listed reason.

Read the exact line

Terms of service

“Midjourney reserves the right to suspend or ban Your access to the Services at any time, and for any reason.”

For example, you could lose access mid-project with no notice.

4 · The fine print

If someone sues them over how you used the service, you may have to pay their legal bills.

Read the exact line

Terms of service

“you will and hold us harmless, our affiliates, and our personnel, from and against any costs, losses, liabilities, and expenses (including attorneys’ fees)”

For example, if a generated image causes a lawsuit, you might have to cover their lawyers.

5 · The fine print

You can cancel, but you do not get money back for the month or year you already paid.

Read the exact line

Terms of service

“You will not be refunded for the current subscription period, but You will not be charged after the current subscription period has ended.”

For example, if you cancel on day two of a yearly plan, they keep that year’s payment.

6 · How it is used

They say they do not sell data, but ad partners can still get cookie data unless you opt out.

Read the exact line

Privacy policy

“While Midjourney does not sell Your information, We may share it, for example, through advertising cookies that allow Our third party partners to deliver relevant and personalized ads.”

For example, an ad network may use site cookies to show you ads elsewhere.

7 · How it is used

Training their models is listed as a way they collect personal data, but they do not give a clear off switch.

Read the exact line

Privacy policy

“This Policy applies to Personal Data that Midjourney collects, uses, and discloses about You and which may include: (i) data collected through the Services, (ii) data collected through the process of training Midjourney machine learning algorithms”

For example, data used to train their image models may include personal data they collected.

8 · How it is used

California-style ad sharing can be turned off in account settings.

Read the exact line

Privacy policy

“You can opt-out of such sharing at any time by updating Your preferences in the Account Settings page.”

For example, you can open Account Settings and turn off sharing used for personalized ads.

9 · How long it is kept

You can delete your account and data from the account page.

Read the exact line

Privacy policy

“please visit www.midjourney.com/account and follow the instructions listed at the bottom of the page to delete Your account and data”

For example, you go to midjourney.com/account and use the delete instructions at the bottom.

10 · The fine print

The age floor is 13 and they rely on you saying you are old enough.

Read the exact line

Terms of service

“By accessing the Services, You confirm that You are at least 13 years old and meet the minimum age of digital consent in Your country.”

For example, a 14-year-old can sign up by confirming they are 13 or older.

Words to know

Legal words from the lines above, in plain English.

personal data
Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
prompt
What you type or say to an AI to get a response. For example, asking a chatbot to write a birthday message is a prompt, and it may be stored.
cookies
Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
tracking pixels
Tiny invisible images or bits of code in a page, app or email that report back when and where you opened it. For example, a pixel in a marketing email tells the sender the moment you read it.
consent
Your clear agreement to something, given by an action like ticking a box or tapping Accept. For example, a pop-up asking if the app may use your location is asking for consent.
third parties
Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
service providers
Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
retention
How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
data portability
Your right to get a copy of your data in a file you can take to another service. For example, you can download all your playlists and upload them to a rival music app.
affiliates
Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
perpetual
Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
sublicensable
The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
How we got here · grade F · score 31/100 · 15 of 15 policy answers backed by a verified quote · 3 not stated
  • What does the app collect beyond what it needs to work?

    They collect account details, prompts and uploads, IP and location, usage data, cookies, browsing-style activity, inferences, and data from third parties and the public internet.

  • Does it record your voice, face or body, and what happens to that?

    Not stated in the documents.

  • Are your chats and uploads used to train AI models, and is that off by default?

    Not stated in the documents.

  • Can employees or contractors read your conversations, and when?

    Not stated in the documents.

  • Are you profiled or tracked for advertising?

    Cookies and similar tools are used for marketing and ads, including third-party advertising partners.

  • Do they sell or share your data, and can you opt out?

    They say they do not sell information but may share it via advertising cookies, with an opt-out in Account Settings.

  • What rights do they take over what you type and what the AI makes?

    You own assets in many cases, but you grant a perpetual sublicensable license and content is public and remixable by default.

  • How long do they keep your data after you delete it, and can you delete it in the app?

    You can delete account and data from the account page, but they do not say it is gone within 30 or 90 days and otherwise keep data as long as needed.

  • Does it build a lasting memory or profile of you, and can you see, edit or turn it off?

    The California table says they collect inferences that could create a profile, with no memory on/off controls described.

  • Do they commit to basic security, and have they leaked data?

    They say they use commercially acceptable means to protect data but cannot guarantee absolute security. No audit or leak history is described.

  • Is there a real age gate, and are teens protected?

    You must be at least 13 and you confirm that yourself; parents must agree if you cannot consent.

  • Will they tell you when the rules change, and is the policy specific?

    Policies are dated. Privacy says they will email or post notice before some changes, but terms also say continued use means you accept, and retention is vague.

  • Can they close your account without warning, and can you get your data out first?

    They can suspend or ban you at any time for any reason, with no promise of notice or export first.

  • If something goes wrong, who pays?

    The service is as-is, liability is capped at what you paid in 12 months, and you must indemnify them for third-party claims from your use.

  • Do subscriptions renew on their own, and can you get a refund?

    You can cancel anytime, but they will not refund the current subscription period and they can change pricing.

The privacy policy is 3,820 words at a college graduate level (Flesch reading ease 35.7); the terms are 3,457 words at a college level.

Your privacy
has an agent now

Be in control of your online privacy in the AI Era with confidence.

Gen

From Gen, the Company BehindNorton