Stability AI
- Your data trains their AI unless you opt out by form or email.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
They can train on your prompts unless you opt out, share for ads.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, payments, your prompts and files, device details, usage logs, and partner data.
Read the exact line
Privacy policy
“When you use our Services, Stability collects identifiers, including your name and email address, and may also collect or generate identifiers (e.g., User123).”
Training
They run the service, train models unless you opt out, market to you, and fight fraud.
Read the exact line
Privacy policy
“To improve and develop our Services and conduct research, including to train and improve our models and develop new product features.”
Sharing
Affiliates, vendors, ad partners, and others in a sale or legal request may see your data.
Read the exact line
Privacy policy
“We may provide the personal data of individuals who visit our website to third-party partners, such as advertising partners, analytics providers, and social networks”
Kept
They keep it as long as they think they need it; deletion is by email request.
Read the exact line
Privacy policy
“Stability retains your personal data for as long as reasonably necessary for the purposes outlined in this Privacy Policy”
Controls
Email privacy@stability.ai for access or deletion; you can opt out of training and some ads.
Read the exact line
Privacy policy
“To exercise your rights, you or an authorized agent may submit a request by emailing us at privacy@stability.ai.”
Fine print
They can close you anytime; no refunds.
No exact line could be verified.
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Opt out of model training
Privacy policy training section (“Learn more”) and related opt-out they link from there
or a copy of your data
Email privacy@stability.ai
Cancel a subscription
Terms say cancel recurring payment “by going here” on their site
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can use what you type and generate to train their AI unless you opt out.
Read the exact line
Privacy policy
“To improve and develop our Services and conduct research, including to train and improve our models and develop new product features.”
For example, a private image prompt could be used to improve their image models.
If someone sues them because of how you used the app, you may have to pay their legal bills.
Read the exact line
Terms of service
“YOU AGREE TO , DEFEND, AND HOLD THE STABILITY PARTIES HARMLESS AGAINST ANY LIABILITIES, DAMAGES, AND COSTS (INCLUDING REASONABLE ATTORNEYS’ FEES) ARISING OUT OF OR RELATING TO: (A) YOUR USE OF OUR SERVICES”
For example, if an output you share causes a lawsuit, they can ask you to cover their lawyers.
They can shut your account without warning.
Read the exact line
Terms of service
“We may also suspend or terminate your access to our Services (including any subscriptions) at any time without advance notice”
For example, you could lose access overnight and not get a chance to export first.
If you pay or subscribe, you usually cannot get money back.
Read the exact line
Terms of service
“All payments are non-refundable, except where required by law.”
For example, canceling mid-month typically does not return unused days.
Website visits can be shared with ad and analytics companies in a way some laws call a sale.
Read the exact line
Privacy policy
“This may be considered a data “sale” or “sharing” as those terms are defined under the (“”)”
For example, visiting the site could help partners show you Stability ads elsewhere.
Shared Brand Studio add-on models can be used by them forever even if you later change your mind.
Read the exact line
Terms of service
“If you choose to share your LoRA, you grant to Stability a nonexclusive, worldwide, , license to host, use, reproduce, and make available to others on the Services”
For example, a LoRA you shared could stay available after you want it taken down.
Audio and images you upload are treated as inputs they collect and may train on.
Read the exact line
Privacy policy
“Our Services allow you to insert prompts or inputs (including text, images, and audio, depending on the products you use)”
For example, a voice clip you upload for Stable Audio can be stored and used unless you opt out of training.
You keep ownership of what you upload, and they assign you rights in the output.
Read the exact line
Terms of service
“As between you and Stability, and to the extent permitted by applicable law, you retain your ownership right in the Inputs that you submit.”
For example, a picture you generate is yours as between you and them, not theirs to claim as their art.
They say the service is for adults 18 and up, but it is based on you stating your age.
Read the exact line
Privacy policy
“Our Services are not directed towards, and we do not knowingly collect personal data from children under the age of 18.”
For example, a 16-year-old who types that they are 18 could still create an account.
Words to know
Legal words from the lines above, in plain English.
- model training
- Using your content and conversations as examples to teach an AI system, which can then echo them in future answers. For example, a story you write in a chatbot may be studied by the company to make the next version of the bot.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- CCPA
- California's privacy law, which gives residents the right to see, delete and stop the sale of their data. For example, a Californian can ask the app to stop selling their data and it must comply.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- worldwide license
- You let the company use your content anywhere on earth, usually for free and for as long as it likes. For example, a video you post can be shown in ads in any country without asking you again.
- prompt
- What you type or say to an AI to get a response. For example, asking a chatbot to write a birthday message is a prompt, and it may be stored.
- inputs and outputs
- Inputs are what you type, say or upload to an AI; outputs are what it gives back to you. For example, the question you ask a chatbot is an input and its answer is an output, and both may be stored.
How we got here · grade C · score 41/100 · 15 of 15 policy answers backed by a verified quote · 2 not stated
What does the app collect beyond what it needs to work?
They collect account and payment details, your inputs and outputs, plus device, usage, log, cookie, and some partner data.
Does it record your voice, face or body, and what happens to that?
Audio can be submitted as an input and, like other inputs, may be used to train models unless you opt out.
Are your chats and uploads used to train AI models, and is that off by default?
Training on inputs and outputs is on unless you opt out; they point to a learn-more opt-out, not an in-app switch described here.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use interest-based ads and give website data to advertising partners, analytics, and social networks.
Do they sell or share your data, and can you opt out?
They say they do not sell for money, but ad sharing may count as a CCPA sale or share, with an opt-out where required.
What rights do they take over what you type and what the AI makes?
You keep rights in inputs and they assign you their rights in outputs; shared LoRAs get a broad extra license.
How long do they keep your data after you delete it, and can you delete it in the app?
They keep data as long as they think they need it; deletion is by emailing privacy@stability.ai, not an in-app timer.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they use technical and organizational measures matched to risk, with no audit named.
Is there a real age gate, and are teens protected?
You must be 18 or older; they do not knowingly collect from kids under 18, with no extra age check described.
Will they tell you when the rules change, and is the policy specific?
The privacy policy is dated July 31, 2025 and they say they will notify you of material changes.
Can they close your account without warning, and can you get your data out first?
They can suspend or terminate access at any time without advance notice and may delete your data.
If something goes wrong, who pays?
The service is as-is with a low liability cap, and you must indemnify them for your use and content.
Do subscriptions renew on their own, and can you get a refund?
Subscriptions auto-renew until you cancel; they say all payments are non-refundable except where law requires.
The privacy policy is 2,187 words at a college graduate level (Flesch reading ease 30.3); the terms are 4,121 words at a college level.
