Midjourney vs. Synthesia: data protection per plan
Midjourney (4 plans) and Synthesia (4 plans) side by side: DPA, training on inputs, hosting and data retention per plan, based on the providers’ public documents. Without rating.
Last updated: (latest review date of the tools shown)
At a glance
Each value is listed with the plans it applies to. Pick a tier to see only plans of that tier; if plans are chosen in the plan comparison below, the table shows exactly those.
All plans: each value is listed with the plans it applies to.
| Feature | Midjourney | Synthesia |
|---|---|---|
| Provider based in | USA. The Terms of Service give the following address for takedown notices: Midjourney, Inc., 611 Gateway Blvd. Ste 120, South San Francisco, CA 94080-7066, US. Place of jurisdiction/seat of arbitration: Santa Clara County, California | Synthesia Ltd, 20 Triton Street, Regent's Place, 3rd Floor, London NW1 3BF, United Kingdom |
| Plans recorded | 4 | 4 |
| Hosting | US only: all 4 plans | mixed: all 4 plans |
| Training on inputs | yes: all 4 plans | no: all 4 plans |
| DPA | not documented: all 4 plans | yes: all 4 plans |
| As of | 18 Oct 2026 | 18 Oct 2026 |
Plans compared
Comparing: Midjourney Basic vs. Synthesia Starter
| Feature | MidjourneyBasic | SynthesiaStarter |
|---|---|---|
| differs by plan | not publicly documented | yes |
| Details: DPA available | not publicly documented (no data processing agreement (DPA) is mentioned in the Terms of Service or Privacy Policy; www.midjourney.com/dpa returns 404. Help Center "Group Plans & Corporate Billing" (q9): Midjourney does not offer, among other things, "Terms and policy negotiations" or "Participation in vendor, supplier, or security processes (such as signing organization-required forms)") | yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan) Provider’s DPA |
| differs by plan | yes | no |
| Details: Training on inputs | Under 'Applicability', the Privacy Policy lists, among the data collected, "data collected through the process of training Midjourney machine learning algorithms" and "data collected from third party sources" ("public databases, commercial data sources, and the public internet"). The Terms of Service (Section 4) grant Midjourney, for inputs and assets, a "perpetual, worldwide, non-exclusive, sublicensable no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute". Public Summary of Training Content (q5, Section 2.4): for the question "Was data from user interactions with the AI model (e.g. user input and prompts) used to train the model?" "Yes" is ticked (modalities text and image); addition: "Midjourney adheres to its Privacy Policy and Terms of Service, as applicable, for user data training." The AB2013 documentation (q6) names as a training source, among others, "data our users provide through use of the Midjourney service". An opt-out is not documented in the primary sources retrieved. Visibility: by default, content is publicly viewable and remixable (ToS Section 4: "By default, Your Content is publicly viewable and remixable"); according to the plan comparison and Stealth documentation, Stealth Mode is not available in this plan. | AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan. |
| differs by plan | US only | mixed |
| Details: Data residency | Data Deletion and Privacy FAQ (q7, as of 2026-09-03): "The personal information you provide is stored on Midjourney servers in the US." For data stored on Discord, the FAQ refers to Discord ("Discord is in control of all data you store on Discord"). Privacy Policy 2.5: processing also "at the Midjourney's operating offices and in any other places where the parties involved in the processing are located". A choice of region is not documented. | Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan. |
| list available | list available | |
| Details: List published |
|
|
| differs by plan | Privacy Policy 2.4: Midjourney retains… | Security Practices: deletion of customer… |
| Details: Data retention | Privacy Policy 2.4: Midjourney retains personal data "to the extent necessary to comply with Our legal obligations", for dispute resolution and to enforce agreements; Usage Data is "generally retained for a shorter period of time". Data Deletion and Privacy FAQ (q7): the account and associated data are deleted "within 30 days after successful submission of your deletion request"; the request can be withdrawn within 7 days (likewise q8). Specific periods for prompts/images while the account exists: not publicly documented. | Security Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer. |
| differs by plan | 10 USD/mo… (further prices in the details) | several tiers |
| Details: Price | 10 USD/month or 96 USD/year (8 USD/month with annual payment), as of 2026-10-14 | Pricing page in browser (retrieved from Germany, EUR): EUR 19 per month with monthly billing (1,250 credits/month); EUR 12 per month with annual billing (15,000 credits/year); learner seat EUR 29 monthly or EUR 25 with annual billing. Server-side version in USD: USD 29 or USD 18 per month, learner seat USD 29 or USD 25. No indication whether VAT is included. |
| yes | yes | |
| Details: AI features included | yes (Image and video generation; features per plan according to the plan comparison) | yes (1,250 credits/month according to the pricing page) |
| 9 sources | 8 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- differs by plan
- Midjourney Basicnot publicly documented
- Synthesia Starteryes
- Midjourney Basic
not publicly documented (no data processing agreement (DPA) is mentioned in the Terms of Service or Privacy Policy; www.midjourney.com/dpa returns 404. Help Center "Group Plans & Corporate Billing" (q9): Midjourney does not offer, among other things, "Terms and policy negotiations" or "Participation in vendor, supplier, or security processes (such as signing organization-required forms)")
Synthesia Starteryes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA
Training
- differs by plan
- Midjourney Basicyes
- Synthesia Starterno
- Midjourney Basic
Under 'Applicability', the Privacy Policy lists, among the data collected, "data collected through the process of training Midjourney machine learning algorithms" and "data collected from third party sources" ("public databases, commercial data sources, and the public internet"). The Terms of Service (Section 4) grant Midjourney, for inputs and assets, a "perpetual, worldwide, non-exclusive, sublicensable no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute". Public Summary of Training Content (q5, Section 2.4): for the question "Was data from user interactions with the AI model (e.g. user input and prompts) used to train the model?" "Yes" is ticked (modalities text and image); addition: "Midjourney adheres to its Privacy Policy and Terms of Service, as applicable, for user data training." The AB2013 documentation (q6) names as a training source, among others, "data our users provide through use of the Midjourney service". An opt-out is not documented in the primary sources retrieved. Visibility: by default, content is publicly viewable and remixable (ToS Section 4: "By default, Your Content is publicly viewable and remixable"); according to the plan comparison and Stealth documentation, Stealth Mode is not available in this plan.
Synthesia StarterAI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
Hosting
- differs by plan
- Midjourney BasicUS only
- Synthesia Startermixed
- Midjourney Basic
Data Deletion and Privacy FAQ (q7, as of 2026-09-03): "The personal information you provide is stored on Midjourney servers in the US." For data stored on Discord, the FAQ refers to Discord ("Discord is in control of all data you store on Discord"). Privacy Policy 2.5: processing also "at the Midjourney's operating offices and in any other places where the parties involved in the processing are located". A choice of region is not documented.
Synthesia StarterSecurity Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
Sub-processors
- Midjourney Basiclist available
- Synthesia Starterlist available
- Midjourney Basic
- No list published. Privacy Policy 2.3 names categories: "Service Providers, Third Party Vendors, Consultants, and other Business Partners", payment service providers and analytics and advertising partners (cookies).
Synthesia Starter- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
Retention
- differs by plan
- Midjourney BasicPrivacy Policy 2.4: Midjourney retains…
- Synthesia StarterSecurity Practices: deletion of customer…
- Midjourney BasicPrivacy Policy 2.4: Midjourney retains personal data "to the extent necessary to comply with Our legal obligations", for dispute resolution and to enforce agreements; Usage Data is "generally retained for a shorter period of time". Data Deletion and Privacy FAQ (q7): the account and associated data are deleted "within 30 days after successful submission of your deletion request"; the request can be withdrawn within 7 days (likewise q8). Specific periods for prompts/images while the account exists: not publicly documented.Synthesia StarterSecurity Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
Price
- differs by plan
- Midjourney Basic10 USD/mo… (further prices in the details)
- Synthesia Starterseveral tiers
- Midjourney Basic
10 USD/month or 96 USD/year (8 USD/month with annual payment), as of 2026-10-14
Synthesia StarterPricing page in browser (retrieved from Germany, EUR): EUR 19 per month with monthly billing (1,250 credits/month); EUR 12 per month with annual billing (15,000 credits/year); learner seat EUR 29 monthly or EUR 25 with annual billing. Server-side version in USD: USD 29 or USD 18 per month, learner seat USD 29 or USD 25. No indication whether VAT is included.
- Midjourney Basicyes
- Synthesia Starteryes
- Midjourney Basic
yes (Image and video generation; features per plan according to the plan comparison)
Synthesia Starteryes (1,250 credits/month according to the pricing page)
Evidence
- Midjourney Basic9 sources
- Synthesia Starter8 sources
- Midjourney Basic
- Midjourney Terms of Service (Version Effective Date 2026-05-27)Terms and conditions, retrieved 18 Oct 2026
- Midjourney Privacy Policy (Last Updated 2026-09-03)Privacy notice, retrieved 18 Oct 2026
- Comparing Midjourney Plans (Docs)Pricing page/documentation, retrieved 18 Oct 2026
- Stealth Mode (Docs)Documentation, retrieved 18 Oct 2026
- Midjourney Public Summary of Training Content (Version 1, as of 2026-03-17)Provider documentation (AI Act), retrieved 18 Oct 2026
- Midjourney Training Data Documentation under California AB2013 (as of 2026-01-20)Provider documentation, retrieved 18 Oct 2026
- Midjourney Data Deletion and Privacy FAQ (as of 2026-09-03)Privacy notice/Help Center, retrieved 18 Oct 2026
- Midjourney Help Center: Deleting Your DataHelp Center, retrieved 18 Oct 2026
- Midjourney Help Center: Group Plans & Corporate BillingHelp Center, retrieved 18 Oct 2026
Synthesia Starter- Pricing (rendered in browser, monthly/annual; EUR when retrieved from Germany, USD in the server-side version)Pricing page, retrieved 18 Oct 2026
- Security Practices (as of 2026-02-03)Trust Center, retrieved 18 Oct 2026
- Data Processing Addendum (PDF as of 2026-07-22, incorporated via Customer Terms)DPA, retrieved 18 Oct 2026
- Subprocessors (as of 2026-10-08)Sub-processor list, retrieved 18 Oct 2026
- Privacy Policy (effective 2026-10-01)Privacy notice, retrieved 14 Oct 2026
- Customer Terms of Service (effective 2026-07-20)Terms and conditions, retrieved 18 Oct 2026
- AI Governance Practices (published September 2024)AI governance, retrieved 14 Oct 2026
- Synthesia Trust Center (Vanta; ISO certificates viewable, SOC 2 and TIA via Request access)Trust Center, retrieved 18 Oct 2026
| Feature | Midjourney | Synthesia |
|---|---|---|
| differs by tool | not publicly documentedall 4 plans | yesall 4 plans |
| Details: DPA available |
|
|
| differs by tool | yesall 4 plans | noall 4 plans |
| Details: Training on inputs |
|
|
| differs by tool | US onlyall 4 plans | mixedall 4 plans |
| Details: Data residency |
|
|
| list availableall 4 plans | list availableall 4 plans | |
| Details: List published |
|
|
| differs by tool | Privacy Policy 2.4: Midjourney retains…all 4 plans | Security Practices: deletion of customer…all 4 plans |
| Details: Data retention |
|
|
| differs by tool |
|
|
| Details: Price |
|
|
| yesall 4 plans | yesall 4 plans | |
| Details: AI features included |
|
|
| 9 sources | 8 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- differs by tool
- Midjourneynot publicly documentedall 4 plans
- Synthesiayesall 4 plans
- Midjourney
- Basic
not publicly documented (no data processing agreement (DPA) is mentioned in the Terms of Service or Privacy Policy; www.midjourney.com/dpa returns 404. Help Center "Group Plans & Corporate Billing" (q9): Midjourney does not offer, among other things, "Terms and policy negotiations" or "Participation in vendor, supplier, or security processes (such as signing organization-required forms)")
- Standard
not publicly documented (no data processing agreement (DPA) is mentioned in the Terms of Service or Privacy Policy; www.midjourney.com/dpa returns 404. Help Center "Group Plans & Corporate Billing" (q9): Midjourney does not offer, among other things, "Terms and policy negotiations" or "Participation in vendor, supplier, or security processes (such as signing organization-required forms)")
- Pro
not publicly documented (no data processing agreement (DPA) is mentioned in the Terms of Service or Privacy Policy; www.midjourney.com/dpa returns 404. Help Center "Group Plans & Corporate Billing" (q9): Midjourney does not offer, among other things, "Terms and policy negotiations" or "Participation in vendor, supplier, or security processes (such as signing organization-required forms)")
- Mega
not publicly documented (no data processing agreement (DPA) is mentioned in the Terms of Service or Privacy Policy; www.midjourney.com/dpa returns 404. Help Center "Group Plans & Corporate Billing" (q9): Midjourney does not offer, among other things, "Terms and policy negotiations" or "Participation in vendor, supplier, or security processes (such as signing organization-required forms)")
Synthesia- Basic (free of charge)
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA - Starter
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA - Pro
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA - Enterprise
yes (Customer Terms: Data Processing Addendum 'hereby incorporated by reference'; additionally a pre-signed PDF version as of 2026-07-22 for countersignature by email to dpasubmission@synthesia.io; no differentiation by plan)
Provider’s DPA
- Basic
Training
- differs by tool
- Midjourneyyesall 4 plans
- Synthesianoall 4 plans
- Midjourney
- Basic
Under 'Applicability', the Privacy Policy lists, among the data collected, "data collected through the process of training Midjourney machine learning algorithms" and "data collected from third party sources" ("public databases, commercial data sources, and the public internet"). The Terms of Service (Section 4) grant Midjourney, for inputs and assets, a "perpetual, worldwide, non-exclusive, sublicensable no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute". Public Summary of Training Content (q5, Section 2.4): for the question "Was data from user interactions with the AI model (e.g. user input and prompts) used to train the model?" "Yes" is ticked (modalities text and image); addition: "Midjourney adheres to its Privacy Policy and Terms of Service, as applicable, for user data training." The AB2013 documentation (q6) names as a training source, among others, "data our users provide through use of the Midjourney service". An opt-out is not documented in the primary sources retrieved. Visibility: by default, content is publicly viewable and remixable (ToS Section 4: "By default, Your Content is publicly viewable and remixable"); according to the plan comparison and Stealth documentation, Stealth Mode is not available in this plan.
- Standard
Under 'Applicability', the Privacy Policy lists, among the data collected, "data collected through the process of training Midjourney machine learning algorithms" and "data collected from third party sources" ("public databases, commercial data sources, and the public internet"). The Terms of Service (Section 4) grant Midjourney, for inputs and assets, a "perpetual, worldwide, non-exclusive, sublicensable no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute". Public Summary of Training Content (q5, Section 2.4): for the question "Was data from user interactions with the AI model (e.g. user input and prompts) used to train the model?" "Yes" is ticked (modalities text and image); addition: "Midjourney adheres to its Privacy Policy and Terms of Service, as applicable, for user data training." The AB2013 documentation (q6) names as a training source, among others, "data our users provide through use of the Midjourney service". An opt-out is not documented in the primary sources retrieved. Visibility: by default, content is publicly viewable and remixable (ToS Section 4: "By default, Your Content is publicly viewable and remixable"); according to the plan comparison and Stealth documentation, Stealth Mode is not available in this plan.
- Pro
Under 'Applicability', the Privacy Policy lists, among the data collected, "data collected through the process of training Midjourney machine learning algorithms" and "data collected from third party sources" ("public databases, commercial data sources, and the public internet"). The Terms of Service (Section 4) grant Midjourney, for inputs and assets, a "perpetual, worldwide, non-exclusive, sublicensable no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute". Public Summary of Training Content (q5, Section 2.4): for the question "Was data from user interactions with the AI model (e.g. user input and prompts) used to train the model?" "Yes" is ticked (modalities text and image); addition: "Midjourney adheres to its Privacy Policy and Terms of Service, as applicable, for user data training." The AB2013 documentation (q6) names as a training source, among others, "data our users provide through use of the Midjourney service". An opt-out is not documented in the primary sources retrieved. Visibility: public by default (ToS Section 4); according to the plan comparison and Stealth documentation, Stealth Mode is available in this plan. ToS: Midjourney commits to "best efforts" not to publish assets created with Stealth; content created in public Discord channels remains visible to others.
- Mega
Under 'Applicability', the Privacy Policy lists, among the data collected, "data collected through the process of training Midjourney machine learning algorithms" and "data collected from third party sources" ("public databases, commercial data sources, and the public internet"). The Terms of Service (Section 4) grant Midjourney, for inputs and assets, a "perpetual, worldwide, non-exclusive, sublicensable no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute". Public Summary of Training Content (q5, Section 2.4): for the question "Was data from user interactions with the AI model (e.g. user input and prompts) used to train the model?" "Yes" is ticked (modalities text and image); addition: "Midjourney adheres to its Privacy Policy and Terms of Service, as applicable, for user data training." The AB2013 documentation (q6) names as a training source, among others, "data our users provide through use of the Midjourney service". An opt-out is not documented in the primary sources retrieved. Visibility: public by default (ToS Section 4); according to the plan comparison and Stealth documentation, Stealth Mode is available in this plan. ToS: Midjourney commits to "best efforts" not to publish assets created with Stealth; content created in public Discord channels remains visible to others.
Synthesia- Basic (free of charge)
AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
- Starter
AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
- Pro
AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
- Enterprise
AI Governance Practices: Synthesia does not use customer data (inputs and outputs) for pre-training its AI components; fine-tuning with customer data only on the customer's written instruction. Privacy Policy (effective 2026-10-01): usage information and feedback are processed to improve the platform and models; for avatar creation, facial/voice data (biometric data) are processed with consent, among other things to create the avatar and to fine-tune the model. DPA clause 2.2: no processing 'for any purpose other than providing the Services to Customer'; under clause 3.1, sub-processors must agree equivalent restrictions on use. Explicit exclusion of training in the sub-processor list only in the OpenAI entry. Documentation does not differentiate by plan.
- Basic
Hosting
- differs by tool
- MidjourneyUS onlyall 4 plans
- Synthesiamixedall 4 plans
- Midjourney
- Basic
Data Deletion and Privacy FAQ (q7, as of 2026-09-03): "The personal information you provide is stored on Midjourney servers in the US." For data stored on Discord, the FAQ refers to Discord ("Discord is in control of all data you store on Discord"). Privacy Policy 2.5: processing also "at the Midjourney's operating offices and in any other places where the parties involved in the processing are located". A choice of region is not documented.
- Standard
Data Deletion and Privacy FAQ (q7, as of 2026-09-03): "The personal information you provide is stored on Midjourney servers in the US." For data stored on Discord, the FAQ refers to Discord ("Discord is in control of all data you store on Discord"). Privacy Policy 2.5: processing also "at the Midjourney's operating offices and in any other places where the parties involved in the processing are located". A choice of region is not documented.
- Pro
Data Deletion and Privacy FAQ (q7, as of 2026-09-03): "The personal information you provide is stored on Midjourney servers in the US." For data stored on Discord, the FAQ refers to Discord ("Discord is in control of all data you store on Discord"). Privacy Policy 2.5: processing also "at the Midjourney's operating offices and in any other places where the parties involved in the processing are located". A choice of region is not documented.
- Mega
Data Deletion and Privacy FAQ (q7, as of 2026-09-03): "The personal information you provide is stored on Midjourney servers in the US." For data stored on Discord, the FAQ refers to Discord ("Discord is in control of all data you store on Discord"). Privacy Policy 2.5: processing also "at the Midjourney's operating offices and in any other places where the parties involved in the processing are located". A choice of region is not documented.
Synthesia- Basic (free of charge)
Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
- Starter
Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
- Pro
Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
- Enterprise
Security Practices: customer data is currently stored in the EU in AWS data centres in Ireland; operational backups in Ireland, secondary backups in the AWS Frankfurt region. EU-US transfer within AWS based on the SCCs of the AWS DPA; transfer impact assessment at security.synthesia.io/documents. The sub-processor list additionally names providers in the USA, Japan and Singapore. Documentation does not differentiate by plan.
- Basic
Sub-processors
- Midjourneylist availableall 4 plans
- Synthesialist availableall 4 plans
- Midjourney
- Basic
- No list published. Privacy Policy 2.3 names categories: "Service Providers, Third Party Vendors, Consultants, and other Business Partners", payment service providers and analytics and advertising partners (cookies).
- Standard
- No list published. Privacy Policy 2.3 names categories: "Service Providers, Third Party Vendors, Consultants, and other Business Partners", payment service providers and analytics and advertising partners (cookies).
- Pro
- No list published. Privacy Policy 2.3 names categories: "Service Providers, Third Party Vendors, Consultants, and other Business Partners", payment service providers and analytics and advertising partners (cookies).
- Mega
- No list published. Privacy Policy 2.3 names categories: "Service Providers, Third Party Vendors, Consultants, and other Business Partners", payment service providers and analytics and advertising partners (cookies).
Synthesia- Basic (free of charge)
- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
- Starter
- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
- Pro
- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
- Enterprise
- Amazon Web Services EMEA SARL (Luxembourg): hosting, storage, computing power, hosted AI models
- MongoDB Limited (Ireland): production data
- Mux Inc. (USA): video delivery
- StackOne Technologies Ltd (UK): third-party integrations
- Modal Labs, Inc. (USA): computing power for video processing
- ClickHouse, Inc. (USA): analytics for sessions
- Script processing: Google Cloud EMEA (Ireland), IBM United Kingdom, CoeFont (Japan), WellSaid Labs (USA), Microsoft Ireland, Eleven Labs Inc. (USA), DeepL SE (Germany), OpenAI OpCo (USA), Cinder Technologies (USA), Anthropic PBC (USA), Cartesia AI (USA), Exa Labs (USA; web search)
- Asset processing: UAB ConvertAPI (Lithuania), Canva Austria GmbH (Austria; pre-processing for Custom Avatars), Runway AI (USA), Features & Labels (USA), AssemblyAI (USA), LiveKit (USA), ai-coustics GmbH (Germany), BFL GmbH (Germany), BytePlus Pte. Ltd. (Singapore; hosted AI models)
- Other: Intercom R&D Unlimited Company (Ireland), Datadog, Inc. (USA)
- Group companies: Synthesia Inc. (USA), Synthesia B.V. (Netherlands), Synthesia GmbH (Germany), Synthesia ApS (Denmark)
- Basic
Retention
- differs by tool
- MidjourneyPrivacy Policy 2.4: Midjourney retains…all 4 plans
- SynthesiaSecurity Practices: deletion of customer…all 4 plans
- Midjourney
- BasicPrivacy Policy 2.4: Midjourney retains personal data "to the extent necessary to comply with Our legal obligations", for dispute resolution and to enforce agreements; Usage Data is "generally retained for a shorter period of time". Data Deletion and Privacy FAQ (q7): the account and associated data are deleted "within 30 days after successful submission of your deletion request"; the request can be withdrawn within 7 days (likewise q8). Specific periods for prompts/images while the account exists: not publicly documented.
- StandardPrivacy Policy 2.4: Midjourney retains personal data "to the extent necessary to comply with Our legal obligations", for dispute resolution and to enforce agreements; Usage Data is "generally retained for a shorter period of time". Data Deletion and Privacy FAQ (q7): the account and associated data are deleted "within 30 days after successful submission of your deletion request"; the request can be withdrawn within 7 days (likewise q8). Specific periods for prompts/images while the account exists: not publicly documented.
- ProPrivacy Policy 2.4: Midjourney retains personal data "to the extent necessary to comply with Our legal obligations", for dispute resolution and to enforce agreements; Usage Data is "generally retained for a shorter period of time". Data Deletion and Privacy FAQ (q7): the account and associated data are deleted "within 30 days after successful submission of your deletion request"; the request can be withdrawn within 7 days (likewise q8). Specific periods for prompts/images while the account exists: not publicly documented.
- MegaPrivacy Policy 2.4: Midjourney retains personal data "to the extent necessary to comply with Our legal obligations", for dispute resolution and to enforce agreements; Usage Data is "generally retained for a shorter period of time". Data Deletion and Privacy FAQ (q7): the account and associated data are deleted "within 30 days after successful submission of your deletion request"; the request can be withdrawn within 7 days (likewise q8). Specific periods for prompts/images while the account exists: not publicly documented.
Synthesia- Basic (free of charge)Security Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
- StarterSecurity Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
- ProSecurity Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
- EnterpriseSecurity Practices: deletion of customer data on request within up to 90 days; without a request, automatic deletion within 90 days after account termination; export of videos up to 90 days after the end of the contract; residual copies may remain in backups for a limited period. Daily database backups for at least three months. Security-relevant logs up to 4 years. DPA clause 7.2: after termination of the Services, destruction of all personal data after 90 days unless the customer has requested their return beforehand. Customer Terms: export may be limited by the plan and by the retention settings enabled by the customer.
Price
- differs by tool
- Midjourney
- 10 USD/mo… (further prices in the details)Basic
- 30 USD/mo… (further prices in the details)Standard
- 60 USD/mo… (further prices in the details)Pro
- 120 USD/mo… (further prices in the details)Mega
- Synthesia
- 0 EUR/moBasic (free of charge)
- several tiersStarter
- 79 EUR/mo… (further prices in the details)Pro
- customEnterprise
- Midjourney
- Basic
10 USD/month or 96 USD/year (8 USD/month with annual payment), as of 2026-10-14
- Standard
30 USD/month or 288 USD/year (24 USD/month with annual payment), as of 2026-10-14
- Pro
60 USD/month or 576 USD/year (48 USD/month with annual payment), as of 2026-10-14
- Mega
120 USD/month or 1,152 USD/year (96 USD/month with annual payment), as of 2026-10-14
Synthesia- Basic (free of charge)
EUR 0 or USD 0 per month (pricing page; no indication whether VAT is included)
- Starter
Pricing page in browser (retrieved from Germany, EUR): EUR 19 per month with monthly billing (1,250 credits/month); EUR 12 per month with annual billing (15,000 credits/year); learner seat EUR 29 monthly or EUR 25 with annual billing. Server-side version in USD: USD 29 or USD 18 per month, learner seat USD 29 or USD 25. No indication whether VAT is included.
- Pro
Pricing page in browser (retrieved from Germany, EUR): EUR 79 per month with monthly billing (6,000 credits/month); EUR 49 per month with annual billing (72,000 credits/year); higher credit tiers up to EUR 600/month (monthly) or EUR 372/month (annual). Server-side version in USD: USD 89 or USD 64 per month, tiers up to USD 676/month. No indication whether VAT is included.
- Enterprise
Custom (pricing page: 'Custom', 'tailored pricing'; FAQ: 'Enterprise pricing is custom')
- Basic
- Midjourneyyesall 4 plans
- Synthesiayesall 4 plans
- Midjourney
- Basic
yes (Image and video generation; features per plan according to the plan comparison)
- Standard
yes (Image and video generation; features per plan according to the plan comparison)
- Pro
yes (Image and video generation; features per plan according to the plan comparison)
- Mega
yes (Image and video generation; features per plan according to the plan comparison)
Synthesia- Basic (free of charge)
yes (500 credits/month, videos with watermark according to the pricing page)
- Starter
yes (1,250 credits/month according to the pricing page)
- Pro
yes (6,000 credits/month according to the pricing page)
- Enterprise
yes
- Basic
Evidence
- Midjourney9 sources
- Synthesia8 sources
- Midjourney
- Midjourney Terms of Service (Version Effective Date 2026-05-27)Terms and conditions, retrieved 18 Oct 2026
- Midjourney Privacy Policy (Last Updated 2026-09-03)Privacy notice, retrieved 18 Oct 2026
- Comparing Midjourney Plans (Docs)Pricing page/documentation, retrieved 18 Oct 2026
- Stealth Mode (Docs)Documentation, retrieved 18 Oct 2026
- Midjourney Public Summary of Training Content (Version 1, as of 2026-03-17)Provider documentation (AI Act), retrieved 18 Oct 2026
- Midjourney Training Data Documentation under California AB2013 (as of 2026-01-20)Provider documentation, retrieved 18 Oct 2026
- Midjourney Data Deletion and Privacy FAQ (as of 2026-09-03)Privacy notice/Help Center, retrieved 18 Oct 2026
- Midjourney Help Center: Deleting Your DataHelp Center, retrieved 18 Oct 2026
- Midjourney Help Center: Group Plans & Corporate BillingHelp Center, retrieved 18 Oct 2026
Synthesia- Pricing (rendered in browser, monthly/annual; EUR when retrieved from Germany, USD in the server-side version)Pricing page, retrieved 18 Oct 2026
- Security Practices (as of 2026-02-03)Trust Center, retrieved 18 Oct 2026
- Data Processing Addendum (PDF as of 2026-07-22, incorporated via Customer Terms)DPA, retrieved 18 Oct 2026
- Subprocessors (as of 2026-10-08)Sub-processor list, retrieved 18 Oct 2026
- Privacy Policy (effective 2026-10-01)Privacy notice, retrieved 14 Oct 2026
- Customer Terms of Service (effective 2026-07-20)Terms and conditions, retrieved 18 Oct 2026
- AI Governance Practices (published September 2024)AI governance, retrieved 14 Oct 2026
- Synthesia Trust Center (Vanta; ISO certificates viewable, SOC 2 and TIA via Request access)Trust Center, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
No guarantee of accuracy, not legal advice. Each entry is valid as of the date shown. Open points are listed on the detail pages.
More comparisons
Midjourney compared with
Synthesia compared with
Individual pages: Midjourney, Synthesia. All tools in the category: Image & design.