Old version
April 29, 2026 08:13 UTC
7c6d87e3e53e677d402199f02365c1dd5788c458633e0927dfbeef8ed8a72b71
CA-V-001033
New version
July 7, 2026 00:49 UTC
7c74cfd243c4d415033b559955787624b7005dd4395d828c2e66590e2225ee5f
CA-V-004570
Share 𝕏 Share in Share
Change Summary
Grammarly's privacy policy (now branded under its parent company Superhuman) was updated on July 6, 2026 to expand the types of personal data it collects and clarifies how the policy applies to organizational users. The updated policy now explicitly states it collects 'screen content' and 'web pages' in addition to existing content categories, and adds disclosure of voice data collection for transcription features. For organizational users (employees, students, account managers on behalf of entities), the policy clarifies that it no longer applies to content they upload or output, shifting responsibility to the organization itself.
medium severity
7 Sentences added
6 Sentences removed
15 Sentences modified
210 Sentences before
211 Sentences after
Added
Removed
Modified
BeforeAfter
0Effective as of October 29, 2025 Superhuman Privacy Policy ( View previous version ) Welcome to Superhuman.0Effective as of July 6, 2026 Privacy Policy ( View previous version ) Welcome to Superhuman.
7(formerly Grammarly) and our subsidiaries (such as Grammarly Inc., Coda Project, LLC, and Superhuman Labs LLC) and affiliated companies (collectively, “ Superhuman ”, “ we ,” or “ us ”), collect, use, and disclose information about you, as well as privacy choices available to you.7(formerly Grammarly) and our subsidiaries (such as Grammarly Inc., Coda Project LLC, and Superhuman Labs LLC) and affiliated companies (collectively, “ Superhuman ”, “ we ,” or “ us ”), collect, use, and disclose information about you, as well as privacy choices available to you.
9Unless we tell you a different policy applies, this Privacy Policy covers our products, including those offered as “Grammarly”, “Coda”, “Superhuman Go”, and “Superhuman Mail”.9Unless we tell you a different policy applies, this Privacy Policy covers our products, including those offered as “Grammarly”, “Docs” (formerly known as “Coda”), “Superhuman Go”, and “Superhuman Mail”.
11If you use our products under the management of a company, organization, or other legal entity (such as if your employer gives you access to our inbox assistant tools for work), this Privacy Policy won’t apply to the information you upload to or output from our products (Customer Personal Data, as defined in our Data Privacy Addendum ).11If you use our products under the management of a company, organization, educational institution, or other legal entity (such as if your employer gives you access to our inbox assistant tools for work or if you open an account on behalf of an entity), this Privacy Policy won’t apply to the information you upload to or output from our products.
12In these cases, we process Customer Personal Data on behalf of your company or organization.Removed
14Below, we provide some additional privacy information for those living in the United States (US), the European Union, European Economic Area (EEA), United Kingdom (UK), or Switzerland .13Below, we provide some additional privacy information for those living in the United States (US), the European Union, the European Economic Area (EEA), the United Kingdom (UK), or Switzerland .
17Table of contents How We Use Information We Collect When We Disclose Information Retention and Security Your Rights and Choices Data Transfers Related Privacy Information Contact Information Additional US State Law Information Additional European Information Information We Collect The information we collect depends on how you use our products and how you manage your privacy settings.16Contents Information We Collect How We Use Information We Collect When We Disclose Information Retention and Security Your Rights and Choices Data Transfers Related Privacy Information Contact Information Additional US State Law Information Additional European Information Information We Collect The information we collect depends on how you use our products and how you manage your privacy settings.
22User content: We receive the content you upload or enable our products to access, such as emails and drafts, text, documents, files, calendars, images, data, and any other content you allow our products to access.21User content: We receive the content you upload or enable our products to access, such as emails and drafts, text, screen content, web pages, documents, files, calendars, images, data, and any other content you allow our products to access.
22Voice data: If you choose to use our Notetaker or transcription features, we collect recordings to create transcriptions of communications captured through our services, including recordings of other participants.
127Related Privacy Information Enterprise Users If you use our products under the management of a company, organization, educational institution, or other legal entity (“Organization”), such as Grammarly Business, Grammarly for Education, Grammarly Pro, Coda, or Superhuman Business or Enterprise as applicable, please note: This Privacy Policy does not apply to user content you upload or create using such accounts.127Related Privacy Information Organizational Users If you use our products under the management of a company, organization, educational institution, or other legal entity (such as if your employer gives you access to our inbox assistant tools for work or if you open an account on behalf of an entity) (“Organization”), please note: This Privacy Policy does not apply to content you upload to or output from our products using such accounts.
128Instead, we process your user content in accordance with the contract and data protection terms with that Organization.128Instead, we process such content on behalf of and in accordance with the contract and data protection terms with that Organization.
141Use, Disclosure, and Retention of Personal Information for Business Purposes Category of Personal Information Uses of Personal Information Category of Recipients Account information (which includes identifiers, such as your email address and account ID) Payment information (which includes commercial information, such as records of products purchased) Communications with us and feedback (which includes survey responses and interactions with our customer support or sales teams) Technical information and usage data (which includes internet or other electronic network activity information, such as your activity on our websites and apps and device and browser information, and identifiers, such as your IP address) Cookie information (which includes identifiers, such as Cookie IDs) Professional information (which includes your job title or industry, which we may license from others) Inferences (which includes predictions, such as your approximate location based on your IP address) User content Provide and tailor our products to you; Improve our products and build new ones; Develop and improve AI (subject to your settings); Secure our products and troubleshoot problems; Process payments; Communicate with you and provide customer service; Market our products to you (excluding user content); and Handle compliance issues and protect against harm.141Use, Disclosure, and Retention of Personal Information for Business Purposes Category of Personal Information Uses of Personal Information Category of Recipients • Account information (which includes identifiers, such as your email address and account ID) • Payment information (which includes commercial information, such as records of products purchased) • Voice data (which includes recordings to create transcriptions of communications captured through our services) • Communications with us and feedback (which includes survey responses and interactions with our customer support or sales teams) • Technical information and usage data (which includes internet or other electronic network activity information, such as your activity on our websites and apps and device and browser information, and identifiers, such as your IP address) • Cookie information (which includes identifiers, such as Cookie IDs) • Professional information (which includes your job title or industry, which we may license from others) • Inferences (which includes predictions, such as your approximate location based on your IP address) • User content • Provide and tailor our products to you; • Improve our products and build new ones; • Develop and improve AI (subject to your settings); • Secure our products and troubleshoot problems; • Process payments; • Communicate with you and provide customer service; • Market our products to you (excluding user content); and • Handle compliance issues and protect against harm. • The Superhuman family of companies; • Trusted service providers; • Marketplace participants; • Government, legal, and similar authorities; • Recipients in connection with a merger, acquisition, or similar transaction; and • Others with your consent or at your direction.
142The Superhuman family of companies; Trusted service providers; Marketplace participants; Government, legal, and similar authorities; Recipients in connection with a merger, acquisition, or similar transaction; and Others with your consent or at your direction.Removed
149Category of Personal Information Disclosed Category of Third-Party Recipient Identifiers (such as cookie IDs, IP addresses, or unique IDs generated from your email address or phone number) Internet or other electronic network activity information (such as links you click or pages you visit on a Superhuman marketing website) Commercial information (such as product purchase information) Inferences (such as predictions about your interest in certain products we offer based on your usage data) Advertising networks; Social networks We do not engage in sales, sharing, or targeted advertising using personal information about anyone we know to be under the age of 18.148Category of Personal Information Disclosed Category of Third-Party Recipient • Identifiers (such as cookie IDs, IP addresses, or unique IDs generated from your email address or phone number) • Internet or other electronic network activity information (such as links you click or pages you visit on a Superhuman marketing website) • Commercial information (such as product purchase information) • Inferences (such as predictions about your interest in certain products we offer based on your usage data) • Advertising networks; • Social networks We do not engage in sales, sharing, or targeted advertising using personal information about anyone we know to be under the age of 18.
162Authorized Agents If you are an authorized agent seeking to make a request to opt out of sales, sharing, or targeted advertising on behalf of a consumer, please Privacy and Data Rights, Choices and Cookies page , or you can email us at privacy@superhuman.com.161Authorized Agents If you are an authorized agent seeking to make a request to opt out of sales, sharing, or targeted advertising on behalf of a consumer, please see our Privacy and Data Rights, Choices and Cookies page , or you can email us at privacy@superhuman.com.
166If you are an authorized agent seeking to make an access, correction, or deletion request on behalf of a California consumer, Privacy and Data Rights, Choices and Cookies page , or you can email us at privacy@superhuman.com.165If you are an authorized agent seeking to make an access, correction, or deletion request on behalf of a California consumer, see our Privacy and Data Rights, Choices and Cookies page , or you can email us at privacy@superhuman.com .
169We’ve appointed VeraSafe as our representative in the EEA and UK for data protection matters.Removed
170You can contact VeraSafe in matters related to personal information processing using this contact form .Removed
171Alternatively: For users in the EEA: You can contact VeraSafe at VeraSafe Ireland Ltd, Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork T23AT2P, Ireland.Removed
172For users in the UK: You can contact VeraSafe at VeraSafe United Kingdom Ltd., 37 Albert Embankment, London SE1 7TL, United Kingdom.Removed
174Purpose Relevant Data Legal Basis Provide and tailor our products to you All categories of data If there’s a contractual obligation for us to process your information to fulfill our contract with you, or to take steps at your request prior to entering into a contract with you: contractual necessity (Art. 6 (1)(b) GDPR/UK GDPR) Otherwise, we process your information because we have a legitimate interest in providing a relevant, well-functioning service to you (Art.6(1)(f) GDPR/ UK GDPR) Improve our products and build new ones Account information Technical information Usage data User content Information we infer We have a legitimate interest in operating and improving our services and developing new products (Art. 6 (1)(f) GDPR/ UK GDPR) Managing events Account information We have a legitimate interest in organizing and managing events (Art. 6 (1)(f) GDPR/ UK GDPR) To develop and improve AI All categories of data We have a legitimate interest in operating and improving our services and developing new products through the use of AI (Art. 6 (1)(f) GDPR/ UK GDPR) Secure our products and troubleshoot problems Technical information Usage data Account information Feedback and communications Cookie data Payment information We have a legitimate interest in ensuring the security of our services and data (Art. 6 (1)(f) GDPR/ UK GDPR) Process payments Payment information It is necessary for us to process your personal data in order to perform our contract with you, or to take steps at your request prior to entering into a contract with you (Art. 6 (1)(b) GDPR/ UK GDPR) We have a legitimate interest in improving and troubleshooting our payment processes (Art. 6 (1)(f) GDPR/ UK GDPR) Communicate with you and provide customer service Account information Communications with us and feedback We have a legitimate interest in managing our relationship with you (Art. 6 (1)(f) GDPR/ UK GDPR) Market and advertise our products to you Account information Usage data Information we infer Cookie data Your consent where required (Art. 6 (1)(a) GDPR/ UK GDPR) We have a legitimate interest in promoting our products and conducting market research (Art. 6 (1)(f) GDPR/ UK GDPR) Handle compliance issues and protect against harm All categories of data Where we have a legal obligation under EEA/UK laws (for EEA/ UK users respectively): We have a legal obligation to comply with applicable laws and regulations (Art. 6 (1)(c) GDPR/ UK GDPR) Where we have a legal obligation under other laws : We have a legitimate interest in protecting our business interests and legal rights, and the interests and legal rights of our users (Art. 6 (1)(f) GDPR.169Purpose Relevant Data Legal Basis Provide and tailor our products to you All categories of data If there’s a contractual obligation for us to process your information to fulfill our contract with you, or to take steps at your request prior to entering into a contract with you: contractual necessity (Art. 6 (1)(b) GDPR/UK GDPR) Otherwise, we process your information because we have a legitimate interest in providing a relevant, well-functioning service to you (Art.6(1)(f) GDPR/ UK GDPR) Improve our products and build new ones Account information Voice data Technical information Usage data User content Information we infer We have a legitimate interest in operating and improving our services and developing new products (Art. 6 (1)(f) GDPR/ UK GDPR) Managing events Account information We have a legitimate interest in organizing and managing events (Art. 6 (1)(f) GDPR/ UK GDPR) To develop and improve AI All categories of data We have a legitimate interest in operating and improving our services and developing new products through the use of AI (Art. 6 (1)(f) GDPR/ UK GDPR) Secure our products and troubleshoot problems Technical information Usage data Account information Feedback and communications Cookie data Payment information We have a legitimate interest in ensuring the security of our services and data (Art. 6 (1)(f) GDPR/ UK GDPR) Process payments Payment information It is necessary for us to process your personal data in order to perform our contract with you, or to take steps at your request prior to entering into a contract with you (Art. 6 (1)(b) GDPR/ UK GDPR) We have a legitimate interest in improving and troubleshooting our payment processes (Art. 6 (1)(f) GDPR/ UK GDPR) Communicate with you and provide customer service Account information Communications with us and feedback We have a legitimate interest in managing our relationship with you (Art. 6 (1)(f) GDPR/ UK GDPR) Market and advertise our products to you Account information Usage data Information we infer Cookie data Your consent where required (Art. 6 (1)(a) GDPR/ UK GDPR) We have a legitimate interest in promoting our products and conducting market research (Art. 6 (1)(f) GDPR/ UK GDPR) Handle compliance issues and protect against harm All categories of data Where we have a legal obligation under EEA/UK laws (for EEA/ UK users respectively): We have a legal obligation to comply with applicable laws and regulations (Art. 6 (1)(c) GDPR/ UK GDPR) Where we have a legal obligation under other laws: We have a legitimate interest in protecting our business interests and legal rights, and the interests and legal rights of our users (Art. 6 (1)(f) GDPR.
187If you wish to exercise any of these rights, please review our Privacy and Data Rights, Choices and Cookies page . .182If you wish to exercise any of these rights, please review our Privacy and Data Rights, Choices and Cookies page .
205We’ve appointed VeraSafe as our representative in the EEA and UK for data protection matters.
206You can contact VeraSafe in matters related to personal information processing using this contact form .
207Alternatively: For users in the EEA: You can contact VeraSafe at VeraSafe Ireland Ltd, Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork T23AT2P, Ireland.
208For users in the UK: You can contact VeraSafe at VeraSafe United Kingdom Ltd., 37 Albert Embankment, London SE1 7TL, United Kingdom.
209Superhuman Platform, Inc. has appointed Bird & Bird DPO Services SRL as its Data Protection Officer (DPO).
210The DPO can be contacted at: Email: dpo.superhuman@twobirds.com ; Post: Bird & Bird DPO Services SRL, Avenue Louise 235 b 1, 1050 Brussels, Belgium.
Stay ahead of the changes

Watch this before it changes again

Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.