Privacy Policy
We’re updating our Privacy Policy, effective July 31, 2025. Until then, the effective version is available here.
Effective: July 31, 2025 (see previous versions)
Stability AI (“Stability”) is a multi-modal generative AI company providing products and services you can use to create and generate content or Outputs (as defined below). This Privacy Policy explains how we collect, use, and when we may disclose your personal data when you use our website, applications, and other places where Stability acts as a data controller – for example, when you interact with our applications such as Dream Studio or Stable Audio, or our Application Programming Interface (“API”) (collectively, our “Services”).
1. Collection of Personal Data
We may collect the following categories of personal data depending on how you use our Services:
Personal data you provide to us directly
Account Information: When you use our Services, Stability collects identifiers, including your name and email address, and may also collect or generate identifiers (e.g., User123).
Payment Information: We (via our third-party partners, such as Stripe) collect your payment information if you purchase our Services.
Inputs and Outputs: Our Services allow you to insert prompts or inputs (including text, images, and audio, depending on the products you use) (“Input”), which can generate a corresponding response or output (“Output”).
Communication Information: If you communicate with us or interact with our social media pages, we collect information, including your contact information and the contents of your messages or posts. We also collect your feedback on our Services.
Personal data we receive from your use of our Services
When you use our Services, we also receive certain technical information, including:
Device Information. Depending on your device or browser permissions, your device or browser automatically sends us information about when and how you access or use our Services, such as your device type, operating system information, browser information, internet service provider (ISP), and IP address.
Usage Information. We collect information about your use of our Services, such as the dates and times of access, pages you view, and about how you use our Services.
Log Information. We collect information about how our Services are performing when you use them, including log files and information about any error.
Cookies. We and our service providers use cookies and similar technologies to manage our Services and to improve your experience. For more information, please visit our Cookie Policy.
Information We Receive from Other Sources
We receive information from our trusted partners to protect against fraud and other security threats to our Services. We also receive information from marketing vendors that provide us with information about potential customers of our business services.
2. Use of Personal Data
We use your personal data for the following purposes:
To provide our Services, including to administer your account, to process your requested payments, and to provide customer support.
To improve and develop our Services and conduct research, including to train and improve our models and develop new product features. When we use your Inputs and Outputs to train our models, you can opt-out of our use of this personal data for these training purposes. Learn more.
To communicate with you, including to send you information about our Services.
To assess your eligibility for and promote our Services, including through interest-based advertising where allowed by law.
To prevent fraud, illegal activity, and misuse of our Services, and to protect the safety, security, and integrity of our systems and Services.
To comply with legal obligations and to protect the rights, privacy, or safety of our users, Stability AI, or third parties.
We do not process sensitive personal data to infer characteristics about a consumer.
We rely on the following Legal Bases to process your data:
| Purpose | Type of Data | Legal Basis |
|---|---|---|
| To provide our Services, including to administer your account, to process your requested payments, and to provide customer support |
|
Where necessary to perform a contract with you, such as provide an Output in response to your Input. Where necessary for the legitimate interest of our users and Stability to address customer queries. We may have a legal obligation to address customer complaints. |
|
To improve and develop our Services and conduct research, including to train and improve our models and develop new product features |
|
Where necessary for the legitimate interests of third parties and Stability, such as when we develop and improve our Services. |
|
To communicate with you, including to send you information about our Services |
|
Where necessary to perform a contract with you, such as using your contact information to send you a notification about our Services. Your consent to process your personal data where required, such as for certain marketing communications. |
|
To assess your eligibility for, and offer you or promote our services, including through interest-based advertising where allowed by law |
|
Where allowed by law (including, where required, with your consent), so that we may market our services to you. Where necessary for the legitimate interests of Stability and our users to understand how our Services are being used and to explore ways to develop our business. |
|
To prevent fraud, illegal activity, and misuse of our Services, and to protect the security of our systems and Services |
|
Where necessary to comply with a legal obligation. Where necessary for the legitimate interests of Stability and third parties (such as to protect against security threats to our Services). In limited cases where the processing is necessary to protect individuals, vital interests. |
|
To comply with legal obligations and to protect the rights, privacy, or safety of our users, Stability AI, or third parties |
|
Where necessary to comply with a legal obligation, such as to comply with payments related record-keeping legal obligations. Where necessary for the legitimate interests of third parties and Stability (such to address a violation of our Terms or Acceptable Use Policy). In limited cases where the processing is necessary to protect individuals, vital interests. |
3. Disclosure of Personal Data
Stability will disclose the above categories of personal data to the following third parties and for the purposes explained in this Privacy Policy:
Affiliates & corporate partners. Stability discloses personal data between and among its affiliates and related entities.
Service providers & trusted partners. Stability may disclose personal data with service providers and trusted partners for various business purposes, including cloud services, and safety and security services.
A significant corporate event. If Stability is involved in a merger, corporate transaction, bankruptcy, or a transfer of business assets, Stability will disclose your personal data as part of these corporate transactions.
Third-Party Websites and Services. Our Services may involve integrations with, or may direct you to, third-party websites, apps, and services. By interacting with these third parties, you are providing information directly to that third party. As such, you should review the third party’s privacy policy.
Third-Party Partners. We may provide the personal data of individuals who visit our website to third-party partners, such as advertising partners, analytics providers, and social networks, who may assist us in advertising our Services to you. See our Cookie Policy. Where legally required, we provide you with the option to opt out of targeted advertising on our site and honor Global Privacy Controls (GPC).
Regulatory or legal requirements, safety and security, rights of others, or to enforce our rights. We may disclose personal data to governmental regulatory authorities as required by law, in response to their requests for information or to assist in investigations. We may also disclose personal data to third parties in connection with disputes or litigation, or if we determine its disclosure is necessary to protect the health and safety of any person, to prevent fraud, credit risk, or illegal activity, to enforce our or others’ legal rights, or as otherwise required or permitted by applicable law.
With an individual’s consent. Stability will disclose personal data when an individual gives us permission or directs us to disclose this information.
4. Your Rights and Choices
Depending on where you live and the laws that apply in your country of residence, you may have certain rights regarding your personal data. To exercise your rights, you or an authorized agent may submit a request by emailing us at privacy@stability.ai. When we receive your request, we may ask for additional information to confirm your identity. Stability will not discriminate based on the exercising of privacy rights you may have. You may also have the right to appeal requests that we deny by emailing privacy@stability.ai. Below is a summary of the rights which you may have, subject to certain conditions and exceptions and depending on the laws that apply in your country of residence.
Right to know: The right to know what personal data Stability processes about you and the categories of third parties to whom we disclose it.
Access & data portability: The right to request a copy of the personal data Stability processes about you and also the right to port your information to a third party.
Deletion: The right to request that we delete your personal data.
Correction: While we cannot guarantee the factual accuracy of any outputs due to the technical complexity of our models, you have the right to request that we correct your personal data when it is inaccurate, subject to certain exceptions.
Objection: You have the right to object to how we process your personal data. If we use your information for marketing, you can opt out of future marketing messages using the unsubscribe link in those messages.
Restriction: You have the right to restrict our processing of your personal data in certain circumstances.
Withdrawal of consent: Where Stability’s processing of your personal data is based on consent, you have the right to withdraw your consent.
Right to complain to a regulatory authority: Under many countries’ laws, you have the right to file a complaint with the supervisory authority in the place in which you live or work.
Sale & targeted advertising: We do not sell or share your personal data with third parties in exchange for payment. However, we may provide the personal data of individuals who visit our website to third-party partners, such as advertising partners, analytics providers, and social networks, who may assist us in advertising our Services to you. This may be considered a data “sale” or “sharing” as those terms are defined under the California Consumer Privacy Act (“CCPA”) and other applicable US privacy laws. Where legally required, we provide you with the option to opt out of targeted advertising on our site and honor Global Privacy Controls (GPC).
5. Data Transfers
Stability processes your personal data on servers located outside of the European Economic Area (“EEA”), Switzerland, and the UK, including processing your personal data in our servers in the US. Where information is transferred outside the EEA, Switzerland, or the UK, we rely on:
Adequacy decisions: We rely on the European Commission adequacy decisions under Article 45 GDPR where they recognise that a country outside of the EEA offers an adequate level of data protection; or
Standard contractual clauses (“SCCs”): We rely on the SCCs as approved by the European Commission under Article 46 GDPR (and their approved equivalent for the UK and Switzerland) that allows companies in the EEA to transfer data outside the EEA.
6. Data Retention and Security Controls
Stability retains your personal data for as long as reasonably necessary for the purposes outlined in this Privacy Policy, depending on factors such as the terms of your agreement, our purposes for processing the data (including whether the data is needed to resolve disputes and to enforce our agreements), and any legal requirements that we are subject to.
The security of your personal data is important to us. We implement appropriate technical and organizational security measures designed to protect personal data from loss, misuse, and unauthorized access or disclosure. Our security measures are designed to provide the level of security appropriate to the underlying level of risk associated with the data processing.
7. Children
Our Services are not directed towards, and we do not knowingly collect personal data from children under the age of 18. If you are the parent or guardian of a child under the age of 18 who you have reason to believe has provided any personal data to us, please email us at privacy@stability.ai.
8. Contact Information and Data Controller
If you live in the European Economic Area (EEA), UK, or Switzerland (the “European Region”), the data controller responsible for your personal data is Stability AI Ltd. If you live outside the European Region, the data controller responsible for your personal data is Stability AI US Services Corporation.
If you have any questions about this Privacy Policy, or have any questions, complaints or requests regarding your personal data, you can email us at privacy@stability.ai. You can also write to us as described below:
Stability AI US Services Corporation c/o Legal, 10250 Constellation Blvd., Suite 2300, Los Angeles, CA 90067 (United States).
Stability AI Ltd., FORA-United House, 9 Pembridge Road, London W11 3JY, England, UK.
9. Changes to Our Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes to this Privacy Policy, and update the Effective Date at the top of this page.