Developer / Coding · stability.aiStability AI API
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“To improve and develop our Services and conduct research, including to train and improve our models and develop new product features. When we use your Inputs and Outputs to train our models, you can opt-out of our use of this personal data for these training purposes. Learn more .”
Watch: Data retention
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Open-ended retention language tied to internal purposes ('resolve disputes', 'enforce agreements') without defined timeframes gives Stability broad discretion to retain user data, including Inputs and Outputs, for extended periods.
Restricts the usability of service credits by imposing an expiration of one year after purchase or issuance, effectively extinguishing unused credits after that period.
The mass arbitration batching mechanism reduces the platform's exposure to coordinated mass claims by procedurally consolidating them while still nominally resolving each individually. The 'no preclusive effect' clause means a user cannot benefit from a favorable ruling in a sibling arbitration, weakening the practical value of prior wins for similarly situated claimants.
Scores derived from 30 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Stability AI API's training terms are conditional — check the tier, opt-out, and enterprise exceptions before relying on protection.
- Your outputs and prompts are explicitly yours — Stability AI API's terms include affirmatively protective IP language.
- Data handling is conditional — 3 privacy or retention clauses warrant review before using Stability AI API at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Stability AI API's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 165 verified, verbatim-cited findings below — read the citations.
Based on 200 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Privacy PolicyVerified - read in full - 0 citationsstatic-revalidatedLast captured 2026-08-10
- Terms of ServiceVerified - read in full - 57 citationsLast captured 2026-08-10
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
This segment requires LoRA trainers who share their model to publish complete, accurate, and non-misleading information about the LoRA, creating a transparency and disclosure obligation tied to the sharing of supplementary resources.
" you grant to users of your model a nonexclusive, worldwide, irrevocable, royalty-free license to use, store, and create derivative works from your LoRA and its output. "
Grants Stability permission to process personal data on the legitimate interests basis for understanding service usage and exploring business development opportunities, establishing a lawful ground for analytics and research.
" Where necessary for the legitimate interests of Stability and our users to understand how our Services are being used and to explore ways to develop our business."
Defines Stability AI's role as data controller, identifies the scope of the Services covered, defines key terms including 'Outputs,' and sets out the purpose and subject matter of the Privacy Policy as governing collection, use, and disclosure of personal data.
" Stability AI (“Stability”) is a multi-modal generative AI company providing products and services you can use to create and generate content or Outputs (as defined below). This Privacy Policy explains how we collect, use, and when we may d..."
This segment prohibits the buying, selling, or transferring of API keys to or from third parties, restricting the commodification and unauthorized transfer of access credentials.
" To buy, sell, or transfer API keys from, to or with a third party."
Defines service credits as prepaid amounts for future use of services or promotional free credits, establishing the nature of the instrument for subsequent restrictions.
" d. Service Credits. We may offer the option to prepay for certain Services through the purchase of credits, which is the amount you have paid in advance for use of our Services. We may also offer service credits for free as part of a promo..."
Reserves Stability's right to increase fees with advance notice, imposes additional fees for additional services, disclaims liability for third-party payment processor errors, and grants Stability the right to terminate access if the user rejects additional fees.
" b. Additional fees . We may increase fees for our Services from time to time, with advance notice. Also, additional fees and taxes may apply for additional Services or features that we may make available. If you do not accept any such addi..."
Establishes an automatic renewal obligation, requiring Stability to charge the user's payment method periodically until the user cancels their paid subscription.
" Automatic renewal . If you sign up for a paid subscription, we will automatically charge your payment method on each agreed-upon periodic renewal date until you cancel. "
Grants Stability permission to disclose personal data to service providers and trusted partners for business purposes including cloud services and security, establishing the basis for subprocessor data sharing arrangements.
" Service providers & trusted partners . Stability may disclose personal data with service providers and trusted partners for various business purposes, including cloud services, and safety and security services."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"To improve and develop our Services and conduct research, including to train and improve our models and develop new product features. When we use your Inputs and Outputs to train our models, you can opt-out of our use of this personal data for these training purposes. Learn more ."
Default opt-in to training on user content (including prompts and generated outputs) is a medium risk for users who may not realize their data is being used this way. The opt-out right mitigates but does not eliminate the risk, particularly for users who are unaware of or do not exercise the opt-out.
AI-generated interpretation, not legal advice.
"Sale & targeted advertising : We do not sell or share your personal data with third parties in exchange for payment. However, we may provide the personal data of individuals who visit our website to third-party partners, such as advertising partners, analytics providers, and social networks, who may assist us in advertising our Services to you. This may be considered a data “sale” or “sharing” as those terms are defined under the California Consumer Privacy Act (“CCPA”) and other applicable US privacy laws."
Despite denying a monetary sale, Stability concedes the arrangement may qualify as a 'sale' or 'sharing' under CCPA. Non-California users may receive no opt-out rights, exposing their data to advertising ecosystems without recourse.
AI-generated interpretation, not legal advice.
" c. Our use of Inputs and Outputs . As described in our Privacy Policy , we may use Inputs and Outputs to improve and develop our Services (but you can opt-out to prevent us from using your Inputs and Outputs to train our models, learn more ), comply with applicable law, enforce our terms and policies, and to keep our Services safe. "
This segment grants Stability permission to use Inputs and Outputs to improve and develop its services (including model training), comply with law, and enforce policies, while also providing an opt-out mechanism for model training use, establishing the scope of Stability's data use rights and the user's ability to restrict training use.
AI-generated interpretation, not legal advice.
" To assess your eligibility for and promote our Services, including through interest-based advertising where allowed by law. "
Identifies use of personal data to assess eligibility for and promote Services, including interest-based advertising where legally permitted, establishing a processing purpose subject to a legal condition.
AI-generated interpretation, not legal advice.
" We appreciate your feedback. If you choose to provide us feedback, you agree that we may use the feedback without any obligation or payment to you."
Grants Stability a royalty-free, obligation-free permission to use any feedback provided by the user, effectively transferring any interest in feedback content to Stability without compensation.
AI-generated interpretation, not legal advice.
" Regulatory or legal requirements, safety and security, rights of others, or to enforce our rights . We may disclose personal data to governmental regulatory authorities as required by law, in response to their requests for information or to assist in investigations. We may also disclose personal data to third parties in connection with disputes or litigation, or if we determine its disclosure is necessary to protect the health and safety of any person, to prevent fraud, credit risk, or illegal activity, to enforce our or others’ legal rights, or as otherwise required or permitted by applicable law."
Authorizes Stability to disclose personal data to governmental authorities, in litigation, or to protect safety, prevent fraud, or enforce legal rights, establishing the legal bases under which disclosure to third parties is permissible without individual consent.
AI-generated interpretation, not legal advice.
" Our Services are owned, operated, and provided by us and our affiliates, licensors, distributors, and service providers (collectively “Providers”). We and our Providers retain all of our respective rights, title, and interest, including intellectual property rights, in and to our Services. Other than the rights of access and use expressly granted in our Terms, our Terms do not grant you any right, title, or interest in or to our Services. We have implemented the procedures described in the Digital Millennium Copyright Act of 1998 (“DMCA”), 17 U.S.C. § 512, regarding reporting alleged copyright infringement and removing or disabling access to the infringing material on our website. If you have a good faith belief that copyrighted material on our website is being used in a way that infringes the copyright over which you are authorized to act, you may make a Notice of Infringing Material. We will terminate or disable your use of our website in appropriate circumstances if we deem you to be a repeat copyright infringer. Notices must be sent to : "
Asserts that Stability and its Providers retain all rights, title, and interest including IP rights in the Services, restricts users to only the access and use rights expressly granted in the Terms, and establishes DMCA compliance procedures for copyright infringement reporting.
AI-generated interpretation, not legal advice.
" To engage in any other conduct that restricts any person from using our Services, or that we reasonably believe exposes us (or any of our users, affiliates, or any other third party or individual) to any liability, damages, or harm, including reputational harm."
This segment prohibits conduct that restricts others from using the services or that Stability reasonably believes exposes it, its users, affiliates, or third parties to liability, damages, or reputational harm, creating a broad catchall restriction protecting Stability from user-caused harm.
AI-generated interpretation, not legal advice.
"Stability retains your personal data for as long as reasonably necessary for the purposes outlined in this Privacy Policy, depending on factors such as the terms of your agreement, our purposes for processing the data (including whether the data is needed to resolve disputes and to enforce our agreements), and any legal requirements that we are subject to."
Open-ended retention language tied to internal purposes ('resolve disputes', 'enforce agreements') without defined timeframes gives Stability broad discretion to retain user data, including Inputs and Outputs, for extended periods.
AI-generated interpretation, not legal advice.
" Expiration . Unused service credits (that were issued on or after the effective date of these Terms) expire one year after the date of purchase or issuance, unless otherwise specified. "
Restricts the usability of service credits by imposing an expiration of one year after purchase or issuance, effectively extinguishing unused credits after that period.
AI-generated interpretation, not legal advice.
"agree that NAM will administer them in groups of up to 50 claimants each, with each group proceeding as a single consolidated arbitration with one arbitrator, one set of arbitration fees, and one hearing. The arbitrator shall resolve arbitrations within a group on an individual basis, and no final award from an arbitrator shall have preclusive effect in another arbitration."
The mass arbitration batching mechanism reduces the platform's exposure to coordinated mass claims by procedurally consolidating them while still nominally resolving each individually. The 'no preclusive effect' clause means a user cannot benefit from a favorable ruling in a sibling arbitration, weakening the practical value of prior wins for similarly situated claimants.
AI-generated interpretation, not legal advice.
" h. No assignment . You may not transfer or assign these Terms without our prior written consent, but we may assign these Terms without restriction."
Restricts users from transferring or assigning the Terms without prior written consent, while granting Stability the unrestricted right to assign the Terms without user consent.
AI-generated interpretation, not legal advice.
" Your content . Any data you upload or incorporate into a LoRA is considered your content. As between you and Stability, you are solely responsible for the LoRA and any outputs generated from, including ensuring compliance with applicable laws and our Acceptable Use Policy ."Permalink to this finding →
This segment grants Stability a nonexclusive, worldwide, irrevocable, royalty-free license to host, use, reproduce, and distribute shared LoRAs on the Services, establishing the scope of Stability's rights in user-shared supplementary resources.
AI-generated interpretation, not legal advice.
" Communication Information : If you communicate with us or interact with our social media pages, we collect information, including your contact information and the contents of your messages or posts. We also collect your feedback on our Services."
Discloses collection of communication information including contact details, message contents, social media interactions, and user feedback, identifying categories of personal data collected and the contexts in which they arise.
AI-generated interpretation, not legal advice.
" To prevent fraud, illegal activity, and misuse of our Services, and to protect the safety, security, and integrity of our systems and Services."
Identifies use of personal data to prevent fraud, illegal activity, and misuse, and to protect the safety, security, and integrity of systems, establishing a processing purpose tied to enforcement and security functions.
AI-generated interpretation, not legal advice.
" Where necessary for the legitimate interests of third parties and Stability, such as when we develop and improve our Services."
Grants Stability permission to process personal data on the basis of legitimate interests — specifically for service development and improvement — providing legal justification for that processing activity.
AI-generated interpretation, not legal advice.
" Where necessary for the legitimate interests of third parties and Stability (such to address a violation of our Terms or Acceptable Use Policy )."
Grants Stability permission to process personal data on the legitimate interests basis to address violations of its Terms or Acceptable Use Policy, providing legal justification for enforcement-related data processing.
AI-generated interpretation, not legal advice.
" Where necessary for the legitimate interests of Stability and our users to understand how our Services are being used and to explore ways to develop our business."
Grants Stability permission to process personal data on the legitimate interests basis for understanding service usage and exploring business development opportunities, establishing a lawful ground for analytics and research.
AI-generated interpretation, not legal advice.
Common questions about Stability AI API's policies
- Does Stability AI API train its AI models on your data?
- Training possible — conditions or opt-outs apply — based on 2 verified findings from Stability AI API's published policy. Informational only, not legal advice.
- Who owns the content you create with Stability AI API?
- You own your outputs — based on 2 verified findings from Stability AI API's published policy. Informational only, not legal advice.
- Can you use Stability AI API's output commercially?
- Commercial use allowed — based on 1 verified finding from Stability AI API's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Stability AI API's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
23 verified clausesClauses in Stability AI API's policies that work in your favour — commitments the platform made to you.
- Output ownership
“a. Rights to Inputs and Outputs . You are responsible for all Inputs you submit to our Services, including Inputs your end users submit to our Services via your account. By submitting Inputs to our Services, you represent and warrant that you have all rights,…”
This segment makes users responsible for all Inputs, requires representation and warranty that users hold necessary rights and licenses to submit Inputs, and confirms that as between the parties users retain ownership of…
📍 § 4 (Inputs and Outputs)Jump to exact text → - Privacy & data use
“Depending on where you live and the laws that apply in your country of residence, you may have certain rights regarding your personal data. To exercise your rights, you or an authorized agent may submit a request by emailing us at privacy@stability.ai. When we…”
Establishes the procedural mechanism by which individuals may exercise their privacy rights, including submission by email, identity verification, non-discrimination guarantees, and the right to appeal denied requests.
📍 § 4 (Your Rights and Choices)Jump to exact text → - Audit rights, DPA & residency
“Stability processes your personal data on servers located outside of the European Economic Area (“EEA”), Switzerland, and the UK, including processing your personal data in our servers in the US. Where information is transferred outside the EEA, Switzerland, o…”
Describes Stability's reliance on EU Commission adequacy decisions under Article 45 GDPR as a legal mechanism for transferring personal data from the EEA to third countries, establishing the legal basis for international…
📍 § 5 (Data Transfers)Jump to exact text → - Governing law & disputesarbitration & class-action waiver
“b. Opt Out. You may opt-out and not be bound by the arbitration and class action waiver provisions by emailing a written notice of your decision to opt-out to legal@stability.ai . The notice must be sent within 30 days of account creation or within 30 days of…”
This segment establishes the opt-out procedure for the arbitration and class action waiver, specifying the method (email), the deadline (30 days from account creation or update), and the consequence of opting out of an u…
📍 § 13 (In case of disputes)Jump to exact text → - Moderation & enforcementterms can change anytime
“b. Changes to the Terms . We may update these Terms at our discretion, including to reflect changes in our Services, for security or legal reasons, or to prevent abuse. We will provide notice of updates in accordance with applicable law. If you continue to acc…”
Establishes the procedure for updating the Terms, requiring notice in accordance with applicable law, and deems continued use of the Services as acceptance of updated Terms, with the obligation to stop use upon non-accep…
- Terms changes: advance notice promised
📍 § 12 (General Terms)Jump to exact text → - Moderation & enforcementterms can change anytime
“Fees . We have the right to make changes to the fees applicable to your subscription from time to time, with advance notice. You agree to pay the increase in fees for Services you receive after receiving notice of the increase, unless you cancel the subscripti…”
Grants Stability the right to modify subscription fees with advance notice and obligates the user to pay increased fees unless they cancel before the renewal term to which the increase applies.
- Terms changes: advance notice promised
📍 § 7 (Fees, Subscriptions, and Service Credits)Jump to exact text →
+ 17 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
13 verified clausesWhat Stability AI API requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcement
“j. Export Controls . You must comply with all applicable trade laws. You may not export or provide access to our Services into any U.S. embargoed countries or territories or to anyone on (i) the U.S. Treasury Department’s list of Specially Designated Nationals…”
Restricts users from exporting or providing access to the Services to embargoed countries or sanctioned persons/entities listed by U.S. Treasury, Commerce, or OFAC, and requires user warranty of compliance, imposing an o…
📍 § 12 (General Terms)Jump to exact text → - Moderation & enforcementconduct restrictions
“To crawl or scrape data from our Services or to access our Services through automated or non-human means (such as through a bot or script), or use any method to extract data from our Services other than as permitted under these Terms or as otherwise expressly…”
This segment prohibits automated scraping, crawling, or non-human access to the services, and restricts data extraction to methods expressly permitted under the Terms or by Stability, protecting Stability's data and infr…
📍 § 3 (Using our Services)Jump to exact text → - Moderation & enforcementconduct restrictions
“i. Use of our brand . You may not use any Stability name, logos, or trademarks, or imply any affiliation, endorsement, or sponsorship, without Stability’s prior written permission. You can seek permission by contacting us at press@stability.ai.”
Restricts users from using Stability's name, logos, or trademarks or implying affiliation, endorsement, or sponsorship without prior written permission, and provides the contact mechanism for seeking such permission.
📍 § 12 (General Terms)Jump to exact text → - Commercial useconduct restrictions
“To develop products or services that compete with our Services, including to develop or train any artificial intelligence, machine learning algorithms, or models, or resell our Services, except as expressly approved by Stability.”
This segment restricts users from using the services to develop competing products or services, train competing AI or ML models, or resell the services without express Stability approval, limiting competitive and derivat…
📍 § 3 (Using our Services)Jump to exact text → - Moderation & enforcementconduct restrictions
“b. Use Restrictions . You may not access or use, or help another person to access or use our Services in any of the following circumstances:”
This segment introduces the use restrictions section, broadly prohibiting access or use of the services in enumerated circumstances, establishing the overall framework of conduct restrictions.
📍 § 3 (Using our Services)Jump to exact text →
+ 8 more verified clauses of this kind on this platform, cited in full in the report.
What the policies actually cover
14 topics- Product telemetry & usage tracking13 clauses
- Advertising & tracking1 protective6 clauses
- Sale or sharing of personal data2 clauses
- Sensitive data (biometric, location, health)1 protective1 clause
- Children's data1 protective1 clause
- Government & law-enforcement disclosure5 clauses
- Data shared with other AI providers1 clause
- Trains by default, opt-out available2 clauses
- Arbitration & class-action waiver2 protective8 clauses
- Terms can change at any time3 protective5 clauses
- Deletion rights & post-termination survival1 protective2 clauses
- Auto-renewal & cancel window1 protective3 clauses
- Feedback ownership1 clause
- Conduct restrictions8 obligations8 clauses
60 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the policy document, § 6 (Data Retention and Security Controls) addresses how long content is retained, and the Terms of Service, § 4 (Inputs and Outputs) addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
The Terms of Service, § 5 describes rights the platform takes in user content, and the policy document, § 3 (Disclosure of Personal Data) describes disclosure of data to third parties or subprocessors. Both clauses are in force at the same time — read them together.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause allows indefinite, perpetual, or necessity-based retention.
“In Short: We keep your information as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law. We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice w...”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“In Short: We keep your information as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law. We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice w...”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“In Short: We keep your information as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law. We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice w...”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“In Short: We keep your information as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law. We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice w...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“h. Grouped arbitrations . If 25 or more claimants file demands for arbitration raising substantially similar disputes within 90 days of each other, then we both agree that NAM will administer them in groups of up to 50 claimants each, with each group proceeding as a single consolidated arbitration with one arbitrator, one set of arbitration fees, and one hearing. The arbitrator shall resolve arbitrations within a ...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | governing law disputes | conditional | MEDIUM | 37 |
| Api | governing law disputes | conditional | MEDIUM | 1 |
| Free | moderation enforcement | conditional | MEDIUM | 1 |
| Free | output ownership | conditional | MEDIUM | 3 |
| Free | subprocessors data sharing | conditional | MEDIUM | 3 |
| Free | training use | conditional | MEDIUM | 1 |
| Team / Business | data retention | conditional | MEDIUM | 4 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“Will your information be shared with anyone else? We may disclose your personal information with our service providers according to a written contract between each service provider and us. Each service provider is a for-profit entity that processes the information on our behalf. We may use your personal information for business purposes, such as undertaking internal research for technological development and demonstration. This is not considered the "selling" of your personal information. Stability.AI has not disclosed or sold any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. Stability.AI will not sell personal information to website visitors, users, and other consumers in the future.”Before citation
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“Device Data. We collect device data such as information about your computer, phone, tablet, or other devices you use to access the Services. Depending on the device used, this data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.”Before citation
“Sale & targeted advertising : We do not sell or share your personal data with third parties in exchange for payment. However, we may provide the personal data of individuals who visit our website to third-party partners, such as advertising partners, analytics providers, and social networks, who may assist us in advertising our Services to you. This may be considered a data “sale” or “sharing” as those terms are defined under the California Consumer Privacy Act (“CCPA”) and other applicable US privacy laws. Where legally required, we provide you with the option to opt out of targeted advertising on our site and honor Global Privacy Controls (GPC).”After citation
model training worsened from medium/training with opt out to high/training permitted.
“c. Our use of Inputs and Outputs . As described in our Privacy Policy , we may use Inputs and Outputs to improve and develop our Services (but you can opt-out to prevent us from using your Inputs and Outputs to train our models, learn more ), comply with applicable law, enforce our terms and policies, and to keep our Services safe.”Before citation
“To improve and develop our Services and conduct research, including to train and improve our models and develop new product features”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“Sale & targeted advertising : We do not sell or share your personal data with third parties in exchange for payment. However, we may provide the personal data of individuals who visit our website to third-party partners, such as advertising partners, analytics providers, and social networks, who may assist us in advertising our Services to you. This may be considered a data “sale” or “sharing” as those terms are defined under the California Consumer Privacy Act (“CCPA”) and other applicable US privacy laws.”Before citation
“Device Data. We collect device data such as information about your computer, phone, tablet, or other devices you use to access the Services. Depending on the device used, this data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.”After citation
model training improved from high/training permitted to medium/training with opt out.
“To improve and develop our Services and conduct research, including to train and improve our models and develop new product features”Before citation
“c. Our use of Inputs and Outputs . As described in our Privacy Policy , we may use Inputs and Outputs to improve and develop our Services (but you can opt-out to prevent us from using your Inputs and Outputs to train our models, learn more ), comply with applicable law, enforce our terms and policies, and to keep our Services safe.”After citation
Latest stance: indefinite or necessity based on data retention
“In Short: We keep your information as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law. We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us to keep your personal information for longer than one (1) year. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.”Open timeline citation
Latest stance: sale or sell on commercial use
“Will your information be shared with anyone else? We may disclose your personal information with our service providers according to a written contract between each service provider and us. Each service provider is a for-profit entity that processes the information on our behalf. We may use your personal information for business purposes, such as undertaking internal research for technological development and demonstration. This is not considered the "selling" of your personal information. Stability.AI has not disclosed or sold any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. Stability.AI will not sell personal information to website visitors, users, and other consumers in the future.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“In Short: We may share information in specific situations described in this section and/or with the following third parties. We may need to share your personal information in the following situations: Business Transfers. We may share or transfer your information in connection with or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.”Open timeline citation
Latest stance: sale or sell on privacy data use
“whether we sell your personal information to third parties;”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-08-10· verified 2026-08-10
- Terms of Service:Last captured 2026-08-10· verified 2026-08-10
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↑ 175 more findings this quarter vs last (338 vs 163). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Stability AI API's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Stability AI API's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.