Image / Video / Audio Generation · leonardo.aiLeonardo.AI
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“**9.5** When you use our Services, we may create anonymised statistical data from your usage of our Services (for example, through aggregation). Once anonymised, we own that data and may use it for our own purposes, such as to provide and improve our Services, to develop new services or product offerings, to identify business trends, and for other uses we…”
Watch: Data retention
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
The absence of a defined maximum retention period and the broad 'valid purpose' standard give the platform wide latitude to retain personal data. The backup archive carve-out means deleted-account data may persist in storage for an unspecified duration.
Restricts the user from assigning or transferring the Terms without prior written consent, while granting the platform a unilateral right to assign the Terms or transfer debt to third parties, creating an asymmetric assignment regime.
Clause 15.1 creates an asymmetric assignment right: users cannot assign without consent, but the platform can assign freely to any third party. This means the platform's obligations (including data handling commitments) could transfer to a new entity whose data practices are unknown to the user, without the user's agreement.
Scores derived from 65 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Leonardo.AI's terms explicitly protect your inputs from training use — the policy is affirmatively favorable on this point.
- Your outputs and prompts are explicitly yours — Leonardo.AI's terms include affirmatively protective IP language.
- Data handling is conditional — 17 privacy or retention clauses warrant review before using Leonardo.AI at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Leonardo.AI's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 279 verified, verbatim-cited findings below — read the citations.
Based on 328 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Terms of ServiceVerified - read in full - 139 citationsLast captured 2026-08-07
- Privacy PolicyVerified - read in full - 98 citationsstatic-revalidatedLast captured 2026-08-07
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Grants the provider a non-exclusive, irrevocable, royalty-free, worldwide, non-sublicensable licence to use private content solely for performing its contractual obligations and explicitly restricts the provider from using, retaining, analysing, or processing private content for AI training or new product development without express written consent.
"**8.5** You grant us a non-exclusive, irrevocable, royalty-free, worldwide, non-sublicensable (other than to our related bodies corporate, and non-transferable right and licence to use any Private Content solely for the purpose of performin..."
Vests intellectual property ownership of all content created by paid subscribers in those subscribers upon creation and includes an assignment by the provider of any IP interest it may hold in that content, establishing the user's ownership right conditional on paid subscription status and terms compliance.
"**8.3** If you are on one of our paid Subscriptions (Paid Subscriber), as between the Parties, subject to your compliance with these Terms and to the extent permitted by law, ownership of all Intellectual Property Rights in any Content you,..."
Free-tier users' content is used for model training with no opt-out mechanism. Paid users can avoid training use only by explicitly generating content privately, creating a significant tier-based disparity in data rights.
"For Service improvement (including analytics and machine learning):** We may analyse your Content and related data in your account to improve the Service, and to train our algorithms, models, and AI products and services using machine learn..."
Permits the company to analyze user Content and account data to train algorithms, models, and AI products via machine learning, while providing an exception allowing paid subscribers to generate private Content excluded from model training.
"- **For Service improvement (including analytics and machine learning):** We may analyse your Content and related data in your account to improve the Service, and to train our algorithms, models, and AI products and services using machine l..."
Discloses that Leonardo.Ai and its third-party partners place cookies on users' devices to track usage, navigation, and usage trends over time, establishing the legal basis and purposes for cookie-based data collection and sharing with business partners.
"When you visit the Service, we, and our third-party partners, will send cookies to your computer that uniquely identifies your browser and lets us do things like help you log in faster, enhance your navigation through the site, remember you..."
Defines 'legitimate interests' as a lawful basis, enumerating specific processing activities including machine learning, predictive analytics, research and development, and platform usage analysis, which directly implicate AI training and data use practices, and notes the balancing requirement against user interests.
"- **Legitimate interests:** It is necessary for our legitimate interests for example, providing a useful and customized Service, sending you relevant marketing messages, displaying advertising and tracking its effectiveness, using informati..."
Permits use of account, interaction, and support-related information to resolve technical issues and improve the service for all users via the customer service function.
"- **Customer service:** We use information about you, information that we collect or and from within your account, information that you provide to our customer service team, and information about your interactions with the Service to resolv..."
Grants the provider the right to create anonymised statistical data from user activity, asserts provider ownership of that anonymised data, and permits its use for service improvement, new product development, trend identification, and public disclosure, provided it cannot identify individual users.
"**9.5** When you use our Services, we may create anonymised statistical data from your usage of our Services (for example, through aggregation). Once anonymised, we own that data and may use it for our own purposes, such as to provide and i..."
Clause A assures that data will always remain protected through adequate measures and safeguards during transfers, while Clause B warns that some destination countries may have data protection laws that are not as protective, creating conflicting expectations about the actual level of data security.
"However, we always take steps to ensure that your data will remain protected in accordance with this Policy and applicable data protection laws. These measures include transferring your data to a country that the European Commission or UK authorities (as applicable) have determined provides an adequate level of protection for personal information, or by implementing appropriate transfer mechanisms and safeguards with our group companies, service providers and partners to protect your data."
"By using the Service, you understand and agree that Leonardo Interactive Pty Ltd (an entity in Australia) will receive and process your personal data. We may transfer your personal data to other countries where our affiliates and service providers are located. Please note that some of these countries may have data protection laws that are different from your country (and, in some cases, may not be as protective). For individuals in the EEA, Switzerland or UK, where we transfer your information to a third-party service provider that is not located in Europe, and is not in a country that benefits from an adequacy decision by the European Commission, UK or Swiss authorities, we will require those third party providers to enter into an agreement that provides appropriate safeguards for your information, including by using the EU Model Clauses and the UK International Data Transfer Addendum."
Within one documentClause A assures that data will always remain protected through adequate measures and safeguards during transfers, while Clause B warns that some destination countries may have data protection laws that are not as protective, creating conflicting expectations about the actual level of data security.
"However, we always take steps to ensure that your data will remain protected in accordance with this Policy and applicable data protection laws. These measures include transferring your data to a country that the European Commission or UK authorities (as applicable) have determined provides an adequate level of protection for personal information, or by implementing appropriate transfer mechanisms and safeguards with our group companies, service providers and partners to protect your data."
"By using the Service, you understand and agree that Leonardo Interactive Pty Ltd (an entity in Australia) will receive and process your personal data. We may transfer your personal data to other countries where our affiliates and service providers are located. Please note that some of these countries may have data protection laws that are different from your country (and, in some cases, may not be as protective). For individuals in the EEA, Switzerland or UK, where we transfer your information to a third-party service provider that is not located in Europe, and is not in a country that benefits from an adequacy decision by the European Commission, UK or Swiss authorities, we will require those third party providers to enter into an agreement that provides appropriate safeguards for your information, including by using the EU Model Clauses and the UK International Data Transfer Addendum."
Within one documentClause A assures data will always remain protected during international transfers, while Clause B warns that destination countries may have data protection laws that are not as protective.
"However, we always take steps to ensure that your data will remain protected in accordance with this Policy and applicable data protection laws. These measures include transferring your data to a country that the European Commission or UK authorities (as applicable) have determined provides an adequate level of protection for personal information, or by implementing appropriate transfer mechanisms and safeguards with our group companies, service providers and partners to protect your data."
"By using the Service, you understand and agree that Leonardo Interactive Pty Ltd (an entity in Australia) will receive and process your personal data. We may transfer your personal data to other countries where our affiliates and service providers are located. Please note that some of these countries may have data protection laws that are different from your country (and, in some cases, may not be as protective). For individuals in the EEA, Switzerland or UK, where we transfer your information to a third-party service provider that is not located in Europe, and is not in a country that benefits from an adequacy decision by the European Commission, UK or Swiss authorities, we will require those third party providers to enter into an agreement that provides appropriate safeguards for your information, including by using the EU Model Clauses and the UK International Data Transfer Addendum."
Within one documentClause A assures data will always remain protected during international transfers, while Clause B warns that destination countries may have data protection laws that are not as protective.
"However, we always take steps to ensure that your data will remain protected in accordance with this Policy and applicable data protection laws. These measures include transferring your data to a country that the European Commission or UK authorities (as applicable) have determined provides an adequate level of protection for personal information, or by implementing appropriate transfer mechanisms and safeguards with our group companies, service providers and partners to protect your data."
"By using the Service, you understand and agree that Leonardo Interactive Pty Ltd (an entity in Australia) will receive and process your personal data. We may transfer your personal data to other countries where our affiliates and service providers are located. Please note that some of these countries may have data protection laws that are different from your country (and, in some cases, may not be as protective). For individuals in the EEA, Switzerland or UK, where we transfer your information to a third-party service provider that is not located in Europe, and is not in a country that benefits from an adequacy decision by the European Commission, UK or Swiss authorities, we will require those third party providers to enter into an agreement that provides appropriate safeguards for your information, including by using the EU Model Clauses and the UK International Data Transfer Addendum."
Within one documentClause A assures data will always remain protected during international transfers, while Clause B warns that destination countries may have data protection laws that are not as protective.
"However, we always take steps to ensure that your data will remain protected in accordance with this Policy and applicable data protection laws. These measures include transferring your data to a country that the European Commission or UK authorities (as applicable) have determined provides an adequate level of protection for personal information, or by implementing appropriate transfer mechanisms and safeguards with our group companies, service providers and partners to protect your data."
"By using the Service, you understand and agree that Leonardo Interactive Pty Ltd (an entity in Australia) will receive and process your personal data. We may transfer your personal data to other countries where our affiliates and service providers are located. Please note that some of these countries may have data protection laws that are different from your country (and, in some cases, may not be as protective). For individuals in the EEA, Switzerland or UK, where we transfer your information to a third-party service provider that is not located in Europe, and is not in a country that benefits from an adequacy decision by the European Commission, UK or Swiss authorities, we will require those third party providers to enter into an agreement that provides appropriate safeguards for your information, including by using the EU Model Clauses and the UK International Data Transfer Addendum."
Within one documentClause A assures that data will always remain protected through adequate measures and safeguards during transfers, while Clause B warns that some destination countries may have data protection laws that are not as protective, creating conflicting expectations about the actual level of data security.
"However, we always take steps to ensure that your data will remain protected in accordance with this Policy and applicable data protection laws. These measures include transferring your data to a country that the European Commission or UK authorities (as applicable) have determined provides an adequate level of protection for personal information, or by implementing appropriate transfer mechanisms and safeguards with our group companies, service providers and partners to protect your data."
"By using the Service, you understand and agree that Leonardo Interactive Pty Ltd (an entity in Australia) will receive and process your personal data. We may transfer your personal data to other countries where our affiliates and service providers are located. Please note that some of these countries may have data protection laws that are different from your country (and, in some cases, may not be as protective). For individuals in the EEA, Switzerland or UK, where we transfer your information to a third-party service provider that is not located in Europe, and is not in a country that benefits from an adequacy decision by the European Commission, UK or Swiss authorities, we will require those third party providers to enter into an agreement that provides appropriate safeguards for your information, including by using the EU Model Clauses and the UK International Data Transfer Addendum."
Within one documentClause A assures data will always remain protected during international transfers, while Clause B warns that destination countries may have data protection laws that are not as protective.
"However, we always take steps to ensure that your data will remain protected in accordance with this Policy and applicable data protection laws. These measures include transferring your data to a country that the European Commission or UK authorities (as applicable) have determined provides an adequate level of protection for personal information, or by implementing appropriate transfer mechanisms and safeguards with our group companies, service providers and partners to protect your data."
"By using the Service, you understand and agree that Leonardo Interactive Pty Ltd (an entity in Australia) will receive and process your personal data. We may transfer your personal data to other countries where our affiliates and service providers are located. Please note that some of these countries may have data protection laws that are different from your country (and, in some cases, may not be as protective). For individuals in the EEA, Switzerland or UK, where we transfer your information to a third-party service provider that is not located in Europe, and is not in a country that benefits from an adequacy decision by the European Commission, UK or Swiss authorities, we will require those third party providers to enter into an agreement that provides appropriate safeguards for your information, including by using the EU Model Clauses and the UK International Data Transfer Addendum."
Within one documentClause A assures data will always remain protected during international transfers, while Clause B warns that destination countries may have data protection laws that are not as protective.
"However, we always take steps to ensure that your data will remain protected in accordance with this Policy and applicable data protection laws. These measures include transferring your data to a country that the European Commission or UK authorities (as applicable) have determined provides an adequate level of protection for personal information, or by implementing appropriate transfer mechanisms and safeguards with our group companies, service providers and partners to protect your data."
"By using the Service, you understand and agree that Leonardo Interactive Pty Ltd (an entity in Australia) will receive and process your personal data. We may transfer your personal data to other countries where our affiliates and service providers are located. Please note that some of these countries may have data protection laws that are different from your country (and, in some cases, may not be as protective). For individuals in the EEA, Switzerland or UK, where we transfer your information to a third-party service provider that is not located in Europe, and is not in a country that benefits from an adequacy decision by the European Commission, UK or Swiss authorities, we will require those third party providers to enter into an agreement that provides appropriate safeguards for your information, including by using the EU Model Clauses and the UK International Data Transfer Addendum."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"For Service improvement (including analytics and machine learning):** We may analyse your Content and related data in your account to improve the Service, and to train our algorithms, models, and AI products and services using machine learning to develop, improve and provide our Service. If you don’t want your Content to be used for machine learning, you can generate Content privately with any paid subscription plan. Private Content isn’t accessible to others and won’t be used by Leonardo.Ai for model trainin"
Free-tier users' content is used for model training with no opt-out mechanism. Paid users can avoid training use only by explicitly generating content privately, creating a significant tier-based disparity in data rights.
AI-generated interpretation, not legal advice.
"**8.8** If you (if you are an individual) or any of your personnel have any Moral Rights in any material provided, used or prepared in connection with these Terms, you agree to (and will procure that your personnel) consent to our use or infringement of those Moral Rights."
Requires users and their personnel who hold moral rights in any material used in connection with the terms to consent to the provider's use or infringement of those moral rights, ensuring the provider can fully exploit the content without moral-rights impediments.
AI-generated interpretation, not legal advice.
"**8.9** Due to the nature of our technology, and artificial intelligence in general, outputs may not be unique, and other users may receive similar Outputs from the Services. Your ownership above does not extend to other users’ Outputs."
Discloses that outputs may not be unique due to the nature of AI technology and clarifies that a user's ownership rights in their outputs do not extend to identical or similar outputs received by other users.
AI-generated interpretation, not legal advice.
"- **For Service improvement (including analytics and machine learning):** We may analyse your Content and related data in your account to improve the Service, and to train our algorithms, models, and AI products and services using machine learning to develop, improve and provide our Service. If you don’t want your Content to be used for machine learning, you can generate Content privately with any paid subscription plan. Private Content isn’t accessible to others and won’t be used by Leonardo.Ai for model training."
Permits the company to analyze user Content and account data to train algorithms, models, and AI products via machine learning, while providing an exception allowing paid subscribers to generate private Content excluded from model training.
AI-generated interpretation, not legal advice.
"- **To promote and drive engagement with the Service:** We may use your contact information to get in touch with you about taking part in our surveys or about features and offers relating to the Service that we think you would be interested in. We may also use information we collect about you to make sure that you get the most relevant offers and promotions based on your use of the Service, and your preferences."
Permits use of contact information and behavioral data to send promotional communications, surveys, and targeted offers based on user preferences and service usage.
AI-generated interpretation, not legal advice.
"We collect personal information in any messages you send to us, as well as our social media channels (such as user feedback, messages and search queries). We may also collect personal information in content you submit or upload to the Service (such as text prompts, images, photos, videos and other media and the metadata about your content) as well as the resulting material you generate through the Service, such as images or videos (together, “Content“). We use this information to operate, maintain, improve and provide the features and functionality of the Service, to correspond with you, and to address any issues you raise about the Service."
Defines additional categories of personal information collected (messages, social media, text prompts, images, videos, metadata, generated content collectively defined as 'Content') and states the purposes for which the information is used — operating, maintaining, improving the Service and corresponding with users — creating an obligation of purpose-limited processing.
AI-generated interpretation, not legal advice.
"When you visit the Service, we, and our third-party partners, will send cookies to your computer that uniquely identifies your browser and lets us do things like help you log in faster, enhance your navigation through the site, remember your preferences and generally improve the user experience. Cookies also convey information to us about how you use the Service (e.g., the pages you view, the links you click and other actions you take on the Service) and allow us or our business partners to track your usage of the Service over time. They also allow us to measure traffic and usage trends for the Service, deliver personalised advertisements that may be of interest to you and measure their effectiveness, and find potential new users of the Service."
Discloses that Leonardo.Ai and its third-party partners place cookies on users' devices to track usage, navigation, and usage trends over time, establishing the legal basis and purposes for cookie-based data collection and sharing with business partners.
AI-generated interpretation, not legal advice.
"When you use the Service, we may employ clear GIFs (also known as web beacons) which are used to anonymously track the online usage patterns of our users. In addition, we may also use clear GIFs in HTML-based emails sent to our users to track which emails are opened and which links are clicked by recipients. This information allows for more accurate reporting and improvement of the Service."
Discloses the use of clear GIFs/web beacons to anonymously track online usage patterns and to track email open rates and link clicks, establishing an obligation of transparency regarding tracking technologies used within the Service and email communications.
AI-generated interpretation, not legal advice.
"- by inferring your location from your IP address; and"
Identifies IP-address-based inference as a method of approximate location determination, disclosing an automated processing activity that derives location without direct user input.
AI-generated interpretation, not legal advice.
"- **Legitimate interests:** It is necessary for our legitimate interests for example, providing a useful and customized Service, sending you relevant marketing messages, displaying advertising and tracking its effectiveness, using information we collect about you (like your platform usage) so that we can make more informed predictions, decisions and offers for our users, helping users connect with team members, and enhancing our Service via research and development, data analytics, machine learning and predictive analytics. We do not rely on this lawful basis where our legitimate interests are overridden by your rights and interests."
Defines 'legitimate interests' as a lawful basis, enumerating specific processing activities including machine learning, predictive analytics, research and development, and platform usage analysis, which directly implicate AI training and data use practices, and notes the balancing requirement against user interests.
AI-generated interpretation, not legal advice.
"Where an Admin Entity has requested control of an existing Administered Account, we will make reasonable efforts to provide you with notice before your Admin Entity receives control over the Administered Account."
Imposes a reasonable-efforts obligation on the provider to notify the user before the Admin Entity receives control of an existing Administered Account, providing a procedural safeguard for the user.
AI-generated interpretation, not legal advice.
"You can exercise any of these rights by contacting us using the contact details provided at the bottom of this page in the “Contact us” section. We respond to all requests we receive in accordance with applicable data protection laws. In some circumstances we will not be able to comply with your request regarding your personal information, and if that is the case we will explain why. For example, we may not be able to provide a copy of your information where it infringes on the rights of another individual. In some cases, you may have shared your information with third parties, such as by publishing an image or video on a third party’s website. In that case, Leonardo.Ai will not be able to delete the information, and you will need to contact that third party directly."
Establishes the procedure for exercising data subject rights by contacting the company, specifies the obligation to respond in accordance with data protection laws, and carves out exceptions where compliance may not be possible (e.g., third-party rights infringement).
AI-generated interpretation, not legal advice.
"- from you, when you provide, correct or confirm your location (e.g., when you purchase products from us);"
Identifies one method of location data collection — directly from the user during transactions such as product purchases — establishing explicit consent-adjacent data collection obligations tied to commercial interactions.
AI-generated interpretation, not legal advice.
"**9.5** When you use our Services, we may create anonymised statistical data from your usage of our Services (for example, through aggregation). Once anonymised, we own that data and may use it for our own purposes, such as to provide and improve our Services, to develop new services or product offerings, to identify business trends, and for other uses we communicate to you. This may include making such anonymised data publicly available, provided it is not compiled using a sample size small enough to make your data or identity identifiable."
Grants the provider the right to create anonymised statistical data from user activity, asserts provider ownership of that anonymised data, and permits its use for service improvement, new product development, trend identification, and public disclosure, provided it cannot identify individual users.
AI-generated interpretation, not legal advice.
"- **For troubleshooting, error resolution and service improvement:** We may need to review your Content or information to support your request for help, correct general errors with the Service or improve our services."
Permits review of Content and account information to support user help requests, correct service errors, and improve services.
AI-generated interpretation, not legal advice.
"When you access the Service on a device (including smart-phones or tablets), we may access, collect and/or monitor one or more “device identifiers,” such as a universally unique identifier (“UUID”). Device identifiers are small data files that uniquely identify your mobile device. A device identifier may convey information to us about how you use the Service. A device identifier may remain persistently on your device, to help you log in and navigate the Service better. Some features of the Service may not function properly if use of device identifiers is impaired."
Discloses collection and monitoring of device identifiers (including UUID) from mobile devices to identify usage patterns and maintain login persistence, establishing the scope of device-level data collection and its operational purposes.
AI-generated interpretation, not legal advice.
"**(b)** Give control of the Administered Account to the Admin Entity."
Permits the provider to transfer control of an Administered Account to the Admin Entity upon request, enabling access to associated Content and account management rights.
AI-generated interpretation, not legal advice.
"**7.1** Our Platform utilises generative AI and large language model technologies, which can produce content that may appear highly realistic or convincing, including text, images, audio, and video outputs (collectively, Generated Content). You acknowledge and agree that Generated Content may include deep fakes, misinformation, biases, or other potentially misleading or inaccurate information. You are solely responsible for evaluating and verifying the accuracy, reliability and legality of any Generated Content before relying on or using it for any purpose."
Discloses that generated content may include deep fakes, misinformation, or inaccuracies, and assigns sole responsibility to the user for evaluating and verifying the accuracy, reliability, and legality of generated content before reliance, constituting a liability-allocating disclaimer regarding AI outputs.
AI-generated interpretation, not legal advice.
Common questions about Leonardo.AI's policies
- Does Leonardo.AI train its AI models on your data?
- Training possible — conditions or opt-outs apply — based on 2 verified findings from Leonardo.AI's published policy. Informational only, not legal advice.
- Who owns the content you create with Leonardo.AI?
- You own outputs — with license carve-outs — based on 2 verified findings from Leonardo.AI's published policy. Informational only, not legal advice.
- Can you use Leonardo.AI's output commercially?
- Commercial use allowed — based on 1 verified finding from Leonardo.AI's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Leonardo.AI's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
41 verified clausesClauses in Leonardo.AI's policies that work in your favour — commitments the platform made to you.
- Audit rights, DPA & residency
“**10.4** If you are part of a subscription for multiple Authorised Users, or if you are accessing our Services using your Canva credentials associated with a Canva multi-seat team, then we collect, use, transfer, disclose and store certain Personal Data on you…”
Identifies the platform's role as a data processor for multi-seat subscription users, incorporates the Data Processing Addendum into the Terms by reference, and specifies the DPA governs processing operations performed o…
📍 Terms of Service › “10\. Confidential Information and Personal Data”Jump to exact text → - Confidentiality
“**10.1** While using our Services, you may share confidential information with us, and you may become aware of confidential information about us. You agree not to use our confidential information, and to take reasonable steps to protect our confidential inform…”
Imposes mutual obligations on both parties to refrain from using each other's confidential information for unauthorised purposes and to take reasonable steps to prevent unauthorised disclosure, and restricts access to co…
📍 Terms of Service › “10\. Confidential Information and Personal Data”Jump to exact text → - Indemnity & liabilitydamages/liability cap
“**11.2** If you accept these Terms in Australia, nothing in these Terms should be interpreted to exclude, restrict or modify the application of, or any rights or remedies you may have under, any part of the Australian Consumer Law (as set out in Schedule 2 of…”
Preserves Australian Consumer Law rights against exclusion or restriction, and where the platform is not used for personal/domestic purposes, limits the platform's liability for breach of Consumer Law Rights to resupply…
📍 Terms of Service › “11\. Consumer Law Rights”Jump to exact text → - Moderation & enforcementterms can change anytime
“**2.4** We may add, change or remove features or functionality to our Services; modify or introduce limitations to storage or other features; or discontinue our Services altogether at any time. If you are on a paid subscription and we discontinue the Service y…”
Reserves the provider's right to modify, limit, or discontinue Services, while imposing an obligation to migrate users to a substantially similar service or issue a pro-rata refund when a paid subscription service is dis…
- Terms changes: no advance notice promised
📍 Terms of Service › “2\. Our Services”Jump to exact text → - Audit rights, DPA & residency
“However, we always take steps to ensure that your data will remain protected in accordance with this Policy and applicable data protection laws. These measures include transferring your data to a country that the European Commission or UK authorities (as appli…”
Obligates the company to ensure data remains protected in accordance with the policy and applicable data protection laws, including through EU/UK adequacy decisions or implementing appropriate transfer safeguards with gr…
📍 Privacy Policy › “4\. How we transfer, store and protect your information”Jump to exact text → - Prompt ownershipdoes-not-train
“**8.5** You grant us a non-exclusive, irrevocable, royalty-free, worldwide, non-sublicensable (other than to our related bodies corporate, and non-transferable right and licence to use any Private Content solely for the purpose of performing of our obligations…”
Grants the provider a non-exclusive, irrevocable, royalty-free, worldwide, non-sublicensable licence to use private content solely for performing its contractual obligations and explicitly restricts the provider from usi…
📍 Terms of Service › “8\. Ownership of Inputs & Outputs”Jump to exact text →
+ 35 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
28 verified clausesWhat Leonardo.AI requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcementconduct restrictions
“**9.1** We own all intellectual property rights in our Services (including our Platform). This includes how our Platform looks and functions, as well as our copyrighted works, trademarks, inventions, designs and other intellectual property, including Our Mater…”
Asserts the provider's ownership of all intellectual property in its services and platform and restricts users from copying, misusing, reverse engineering, or altering or removing ownership notices, protecting the provid…
📍 Terms of Service › “9\. Ownership of Services, Platform and Data”Jump to exact text → - Moderation & enforcement
“**4.5** You must not pay, or attempt to pay, any Subscription Fees by fraudulent or unlawful means. If you make payment by debit or credit card, you must be the authorised card holder. If payment is made by direct debit, by providing your bank account details…”
Prohibits fraudulent or unlawful payment methods, requires card authorisation, and creates a direct debit authorisation that binds the user contractually to allow third-party processors to debit their account, imposing p…
📍 Terms of Service › “4\. Subscriptions”Jump to exact text → - Moderation & enforcementconduct restrictions
“**13.8** You hereby represent and warrant that: (1) you are not located in a country that is subject to a U.S. Government embargo, or that has been designated by the U.S. Government as a “terrorist supporting” country; and (2) you are not listed on any U.S. Go…”
Requires the user to represent and warrant compliance with U.S. export control and sanctions laws, including not being located in embargoed countries or listed on prohibited party lists, creating ongoing warranty obligat…
📍 Terms of Service › “13\. Notice Regarding Apple”Jump to exact text → - Moderation & enforcement
“**(a)** Access or use our Platform in any way that is improper or breaches any laws, infringes any person’s rights (for example, intellectual property rights and privacy rights), or gives rise to any civil or criminal liability;”
Prohibits use of the Platform in ways that are improper, unlawful, infringe intellectual property or privacy rights, or give rise to civil or criminal liability, imposing broad conduct restrictions on users.
📍 Terms of Service › “5\. Platform Licence”Jump to exact text → - Moderation & enforcementconduct restrictions
“**(d)** Use any unauthorised or modified version of our Platform, including but not limited to for the purpose of building similar or competitive software or for the purpose of obtaining unauthorised access to our Platform;”
Prohibits use of unauthorised or modified Platform versions, including for purposes of building competing software or obtaining unauthorised access, protecting the provider's intellectual property and platform security.
📍 Terms of Service › “5\. Platform Licence”Jump to exact text →
+ 23 more verified clauses of this kind on this platform, cited in full in the report.
What the policies actually cover
17 topics- Product telemetry & usage tracking16 clauses
- Advertising & tracking1 protective12 clauses
- Sale or sharing of personal data4 protective4 clauses
- Sensitive data (biometric, location, health)1 protective3 clauses
- Children's data2 protective3 clauses
- Government & law-enforcement disclosure6 clauses
- Does not train on your content1 protective1 clause
- Trains by default, opt-out available2 clauses
- Arbitration & class-action waiver1 protective2 clauses
- Damages & liability cap2 protective16 clauses
- Indemnity direction2 clauses
- Terms can change at any time2 protective2 clauses
- Deletion rights & post-termination survival1 protective6 clauses
- Auto-renewal & cancel window1 protective6 clauses
- Feedback ownership1 clause
- Attribution requirements1 clause
- Conduct restrictions10 obligations10 clauses
144 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the Privacy Policy, Privacy Policy › “7\. Data retention” addresses how long content is retained, and the Privacy Policy, Privacy Policy › “2\. How we use your information” addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
The Terms of Service, Terms of Service › “8\. Ownership of Inputs & Outputs” describes rights the platform takes in user content, and the Privacy Policy, Privacy Policy › “3\. Sharing your information” describes disclosure of data to third parties or subprocessors. Both clauses are in force at the same time — read them together.
Verified retention clauses point in different directions: the Privacy Policy, Privacy Policy › “7\. Data retention” describes broad or open-ended retention, while the Privacy Policy, Privacy Policy › “7\. Data retention” describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“**(b)** Where you are not resident or incorporated in Australia, refer the matter to arbitration administered by the Australian Centre for International Commercial Arbitration, with such arbitration to be conducted in Sydney, New South Wales, before one arbitrator, in English and in accordance with the ACICA Arbitration Rules.”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“Disputes: Neither we or you may commence court proceedings relating to any dispute, controversy or claim arising from, or in connection with, these Terms (including any question regarding its existence, validity or termination) (Dispute) unless we and you first meet (in good faith) to resolve the Dispute. Nothing in this clause will operate to prevent us or you from seeking urgent injunctive or equitable relief fr...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“**8.5** You grant us a non-exclusive, irrevocable, royalty-free, worldwide, non-sublicensable (other than to our related bodies corporate, and non-transferable right and licence to use any Private Content solely for the purpose of performing of our obligations or exercising our rights under these Terms. We will not use, retain, analyse, or process your Private Content for any other purpose, including training AI m...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“**9.3** We grant you a non-exclusive, revocable, royalty-free, worldwide, non-sublicensable and non-transferable right and licence, for the duration of the Subscription Period, to use Our Materials that we provide to you solely for your use and enjoyment of our Services, as contemplated by these Terms.”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“**8.6** You grant us a non-exclusive, irrevocable, perpetual, royalty-free, worldwide and transferable right and licence to use, reproduce, modify, copy, process, adapt, publish, transmit, create derivative works of, publicly display and distribute any Public Content for providing, maintaining, promoting and improving the Services, including training AI models, developing new offerings, or for any commercial purpose.”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | confidentiality | worsens | HIGH | 3 |
| All applicable tiers | governing law disputes | conditional | MEDIUM | 2 |
| All applicable tiers | indemnity liability | conditional | MEDIUM | 5 |
| All applicable tiers | moderation enforcement | worsens | HIGH | 3 |
| All applicable tiers | privacy data use | worsens | HIGH | 7 |
| All applicable tiers | prompt ownership | worsens | HIGH | 5 |
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 3 |
| Free | commercial use | worsens | HIGH | 2 |
| Free | training use | worsens | HIGH | 16 |
| Government | privacy data use | worsens | HIGH | 3 |
| Government | subprocessors data sharing | worsens | HIGH | 1 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“**10.6** We may need to disclose Personal Data to third parties, such as our related companies or our service providers (for example, IT and administrative service providers and our professional advisors).”Before citation
“You may opt out of the “selling or sharing” of your personal information, which may include us sharing your information with third party advertising partners as described above in the section “Advertising”. You can opt out by following the instructions on the “Do not sell or share my personal information” banner, or by emailing [privacy@leonardo.ai](mailto:privacy@leonardo.ai).”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“We do not sell or rent the information we collect about you with these third-party advertising servers or advertising networks for such parties’ own marketing purposes.”Before citation
“**10.6** We may need to disclose Personal Data to third parties, such as our related companies or our service providers (for example, IT and administrative service providers and our professional advisors).”After citation
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“**10.6** We may need to disclose Personal Data to third parties, such as our related companies or our service providers (for example, IT and administrative service providers and our professional advisors).”Before citation
“We do not sell or rent the information we collect about you with these third-party advertising servers or advertising networks for such parties’ own marketing purposes.”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“You may opt out of the “selling or sharing” of your personal information, which may include us sharing your information with third party advertising partners as described above in the section “Advertising”. You can opt out by following the instructions on the “Do not sell or share my personal information” banner, or by emailing [privacy@leonardo.ai](mailto:privacy@leonardo.ai).”Before citation
“**10.6** We may need to disclose Personal Data to third parties, such as our related companies or our service providers (for example, IT and administrative service providers and our professional advisors).”After citation
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“**10.6** We may need to disclose Personal Data to third parties, such as our related companies or our service providers (for example, IT and administrative service providers and our professional advisors).”Before citation
“You may opt out of the “selling or sharing” of your personal information, which may include us sharing your information with third party advertising partners as described above in the section “Advertising”. You can opt out by following the instructions on the “Do not sell or share my personal information” banner, or by emailing [privacy@leonardo.ai](mailto:privacy@leonardo.ai).”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“You may opt out of the “selling or sharing” of your personal information, which may include us sharing your information with third party advertising partners as described above in the section “Advertising”. You can opt out by following the instructions on the “Do not sell or share my personal information” banner, or by emailing [privacy@leonardo.ai](mailto:privacy@leonardo.ai).”Before citation
“**10.6** We may need to disclose Personal Data to third parties, such as our related companies or our service providers (for example, IT and administrative service providers and our professional advisors).”After citation
Latest stance: third party or vendor sharing on privacy data use
“If you have consented to the disclosure of your personal information to any other third party, we may also share the data with them.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“By using the Service, you understand and agree that Leonardo Interactive Pty Ltd (an entity in Australia) will receive and process your personal data. We may transfer your personal data to other countries where our affiliates and service providers are located. Please note that some of these countries may have data protection laws that are different from your country (and, in some cases, may not be as protective). For individuals in the EEA, Switzerland or UK, where we transfer your information to a third-party service provider that is not located in Europe, and is not in a country that benefits from an adequacy decision by the European Commission, UK or Swiss authorities, we will require those third party providers to enter into an agreement that provides appropriate safeguards for your information, including by using the EU Model Clauses and the UK International Data Transfer Addendum.”Open timeline citation
Latest stance: training permitted on training use
“- **For Service improvement (including analytics and machine learning):** We may analyse your Content and related data in your account to improve the Service, and to train our algorithms, models, and AI products and services using machine learning to develop, improve and provide our Service. If you don’t want your Content to be used for machine learning, you can generate Content privately with any paid subscription plan. Private Content isn’t accessible to others and won’t be used by Leonardo.Ai for model training.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We may also aggregate or otherwise strip data of all personally identifying characteristics and may share that aggregated such anonymized data with third parties.”Open timeline citation
Capture recency
- Terms of Service:Last captured 2026-08-07· verified 2026-08-07
- Privacy Policy:Last captured 2026-08-07· verified 2026-08-07
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↑ 112 more findings this quarter vs last (401 vs 289). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Leonardo.AI's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Leonardo.AI's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.