DreamStudio (Stability AI) procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| Data retention | All applicable tiers | low | “ HOW LONG DO WE KEEP YOUR INFORMATION? ” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ In Short: We keep your information as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law. We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us to keep your personal information for longer than one (1) year. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ the categories of third parties to whom the personal information was sold or disclosed for a business purpose; and ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ k. Legal Compliance . We may comply with governmental, court, and law enforcement requests relating to our Services or information collected under our Terms, including with respect to your Inputs and Outputs.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Our Services may use or be used in connection with third-party software, services, or integrations. By using our Services, you acknowledge that your Input, including any personal data you include within that Input, may be shared with such third-party service to enable functionality. Our Services may also incorporate third-party models or APIs ( here ), which may change from time to time as we update our Services. When you use our Services, you may not use any Outputs to train a model that competes with that third party ( see, e.g. , OpenAI terms ). By using our Services, you agree to comply with the terms of these third parties. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ In Short: We may share information in specific situations described in this section and/or with the following third parties. We may need to share your personal information in the following situations: Business Transfers. We may share or transfer your information in connection with or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ If the information is publicly available and is specified by the regulations. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ If we have reasonable grounds to believe an individual has been, is, or may be a victim of financial abuse. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Will your information be shared with anyone else? We may disclose your personal information with our service providers according to a written contract between each service provider and us. Each service provider is a for-profit entity that processes the information on our behalf. We may use your personal information for business purposes, such as undertaking internal research for technological development and demonstration. This is not considered the "selling" of your personal information. Stability.AI has not disclosed or sold any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. Stability.AI will not sell personal information to website visitors, users, and other consumers in the future. ” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ For business transactions, provided certain conditions are met. ” | Captured 2026-06-07Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.