Grok
- Your data trains their AI unless you switch it off in settings.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared only with the providers who run the service.
- Staff may review your content; the policy does not describe an opt-out.
Grok takes a license on your chats, can train on them unless you switch it off, and can close your account without notice.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, your chats and uploads, device and IP data, cookies, and sometimes location.
Read the exact line
Privacy policy
“Technical data includes information such as your IP address, device type, country from which you access, analytics information, browser type and version, browser plug-in types and versions, and operating system.”
Training
They run the app, train models, do research, and may use cookies for targeted ads.
Read the exact line
Privacy policy
“To develop and improve our Service and to conduct research: For example to develop new product features, to train our models, to identify usage trends, to operate and expand our business activities”
Sharing
Service providers, related companies, and staff who may review your content; cookies can feed ads.
Read the exact line
Privacy policy
“To assist in providing the Service to you or performing business operations, we provide your personal information to service providers including providers of hosting, cloud, analytics, content delivery, support and safety monitoring”
Kept
Deleted chats and accounts are usually gone in 30 days, unless law or safety requires longer.
Read the exact line
Privacy policy
“if you choose to delete any or all of your conversations or if you choose to delete your account, we will delete the data within 30 days unless it is necessary to retain the data for legal, compliance, or safety purposes.”
Controls
Logged-in users can choose training use; you can delete chats or request rights via a privacy portal.
Read the exact line
Terms of service
“When logged into our Service, you can select whether or not you want us to use your User Content to improve our products and services and train our models.”
Fine print
They can close you without notice, cap , auto-renew paid plans, and take a huge license on your content.
Read the exact line
Terms of service
“We may terminate or suspend your access to our Service or delete your account at any time without notice to you if we determine, at our sole discretion, that:”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Turn off training on your content while logged in
In the Service when logged in (Terms: “you can select whether or not you want us to use your User Content”)
Use Private Chat or delete conversations
In the Service; Private Chat and deletions are processed within 30 days per the Privacy Policy
Submit a privacy request
https://x.ai/privacy-portal/
Cancel a paid plan
Cancel in the product; questions at support@x.ai
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They get a lasting, shareable right to use what you type, upload, and what Grok makes, for almost any purpose.
Read the exact line
Terms of service
“you grant an , , transferable, , , and worldwide right to SpaceXAI to use, copy, store, modify, process, adapt, transmit, distribute, reproduce, publish”
For example, even after you leave, they could still use an old chat to improve products or show trends.
If someone sues them because of how you used Grok, you may have to pay their legal bills.
Read the exact line
Terms of service
“you will , and hold SpaceXAI and our parents, subsidiaries and affiliates, and our and their respective agents, suppliers, licensors, employees, contractors, officers, and directors”
For example, if an output you shared caused a lawsuit, you could be on the hook for their lawyers.
They can shut your account with no warning if they decide you broke the rules or for other listed reasons.
Read the exact line
Terms of service
“We may terminate or suspend your access to our Service or delete your account at any time without notice to you if we determine, at our sole discretion, that:”
For example, you could lose access overnight and have to email support to appeal.
You generally cannot join a group lawsuit with other users.
Read the exact line
Terms of service
“you agree to waive any right to bring a or other .”
For example, if many people were overcharged, you would have to fight that on your own.
Subscriptions keep charging until you cancel, and you usually do not get money back.
Read the exact line
Terms of service
“You can cancel your paid subscription at any time; however, payments already made are non-refundable, except where required by law.”
For example, if you cancel two days after renewal, that month’s charge is typically gone.
People who work for them can read your chats to improve the product or check for abuse.
Read the exact line
Terms of service
“Our authorized personnel may review how you use the Service and your User Content for specific business purposes, including improving product features, investigating security incidents and potential misuse of our Service”
For example, a contractor might see a private conversation while sampling chats for product work.
Cookies and similar tools can be used to show ads aimed at you.
Read the exact line
Privacy policy
“Deliver relevant content and targeted advertising;”
For example, your browsing on their site could help decide which ads you see.
If you are logged in, you can turn training on or off. Guest use can be used for training.
Read the exact line
Terms of service
“When logged into our Service, you can select whether or not you want us to use your User Content to improve our products and services and train our models.”
For example, a logged-out prompt may still be used to train Grok.
Deleting chats or your account usually wipes them in about a month, unless they keep them for law or safety.
Read the exact line
Privacy policy
“if you choose to delete any or all of your conversations or if you choose to delete your account, we will delete the data within 30 days unless it is necessary to retain the data for legal, compliance, or safety purposes.”
For example, a flagged chat might stay longer than 30 days even after you hit delete.
You still own your inputs and outputs, even though they take a very wide license to use them.
Read the exact line
Terms of service
“To the extent permitted by applicable law, and as between you and SpaceXAI, you retain your ownership rights to the User Content.”
For example, you can reuse a Grok answer in your own notes, but they can also reuse it under their license.
They say they use standard security steps, but they do not promise the data cannot be stolen.
Read the exact line
Privacy policy
“SpaceXAI implements commercially reasonable technical, administrative, and organizational measures designed to protect personal information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction.”
For example, they encrypt and lock systems, but a breach is still possible.
Words to know
Legal words from the lines above, in plain English.
- model training
- Using your content and conversations as examples to teach an AI system, which can then echo them in future answers. For example, a story you write in a chatbot may be studied by the company to make the next version of the bot.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- perpetual
- Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
- sublicensable
- The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- class action waiver
- You agree not to join with other users in one lawsuit; each person must complain alone. For example, if a bug overcharges a million people, you cannot all sue together for a refund.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
How we got here · grade C · score 43/100 · 15 of 15 policy answers backed by a verified quote · 1 not stated
What does the app collect beyond what it needs to work?
They collect account details, your prompts and uploads, device and IP data, analytics, conversation history, and cookies. Precise location is only with consent.
Does it record your voice, face or body, and what happens to that?
Voice, audio, images, and video you send are User Content. That content can be used to improve products and train models unless you turn that off.
Are your chats and uploads used to train AI models, and is that off by default?
Logged-in users can choose whether content is used to train models. Guest use is granted for training. The documents describe a selection, not a required signup choice.
Can employees or contractors read your conversations, and when?
Staff may review how you use the service and your content to improve features, check security, and look into misuse. No opt-out of that review is described.
Are you profiled or tracked for advertising?
They and service providers use cookies to deliver targeted advertising and to analyze traffic on their sites and third-party sites.
Do they sell or share your data, and can you opt out?
They share with contracted service providers, related companies, in business deals, and for legal reasons. They do not say they sell data to brokers.
What rights do they take over what you type and what the AI makes?
You keep ownership, but you grant an irrevocable, perpetual, sublicensable license to use your content for any purpose, including improving products.
How long do they keep your data after you delete it, and can you delete it in the app?
Deleting conversations or your account queues deletion within 30 days, except for legal, compliance, or safety needs. Private Chat follows the same 30-day rule.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They describe commercially reasonable technical and organizational security measures, and say no method is 100% secure.
Is there a real age gate, and are teens protected?
You must be 13 or older and confirm it. Teens 13–17 need a parent to agree. Australia mentions extra age checks; most users self-declare.
Will they tell you when the rules change, and is the policy specific?
They post a new effective date. Using the service after that means you accept the new rules. Advance notice is not generally promised.
Can they close your account without warning, and can you get your data out first?
They may suspend or delete your account at any time without notice for breach, law, risk, or long inactivity. You can appeal by email.
If something goes wrong, who pays?
The service is as-is, liability is often capped at what you paid or $100, and you must indemnify them for claims from your use.
Do subscriptions renew on their own, and can you get a refund?
Paid plans auto-renew until you cancel. Payments already made are non-refundable except where the law requires it. Price hikes get reasonable notice.
The privacy policy is 2,360 words at a college graduate level (Flesch reading ease 37.6); the terms are 7,758 words at a college level.
