Governance document

CA-D-000456

Grammarly Privacy Policy

Grammarly

Last change detected July 7, 2026 Privacy policy

SHA-256: 7c74cfd243c4d415033… 2 versions captured 1 change documented

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

View original document at Grammarly ↗

This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology

81 Total

13 High severity

51 Medium severity

17 Low severity

Key Facts

Can users decide whether Grammarly can use their user content to train its AI models?

Grammarly allows users to decide whether Grammarly can use their user content to train its AI models by adjusting training controls in account settings.

How can users adjust whether Grammarly uses their user content for training?

Grammarly allows users to decide whether Grammarly can use their user content to train its AI models by adjusting training controls in account settings.

Does Grammarly restrict its AI service providers from training their models on user content?

Grammarly restricts its AI service providers from training their models on user content of Grammarly's customers.

Does Grammarly make user content available to its advertising partner companies?

Grammarly does not make user content available to its advertising partner companies.

Does Grammarly use user content for marketing or advertising purposes?

Grammarly does not use user content for marketing or advertising purposes.

Does Grammarly engage in sales, sharing, or targeted advertising using personal information about anyone Grammarly knows to be under the age of 18?

Grammarly does not engage in sales, sharing, or targeted advertising using personal information about anyone Grammarly knows to be under the age of 18.

When may Grammarly share a user's email address or usage information with administrators or representatives of an Organization?

Grammarly may share a user's email address or other usage information with the administrators or representatives of the user's Organization if the user created an account using an email address belonging to that Organization.

What information may Grammarly share if a user created an account using an Organization's email address?

Does Grammarly's Privacy Policy apply to information uploaded to or output from Grammarly's products when used under the management of a company or organization?

Grammarly's Privacy Policy does not apply to information uploaded to or output from Grammarly's products when those products are used under the management of a company, organization, educational institution, or other legal entity.

How does Grammarly use information considered 'sensitive' under State Privacy Laws?

Grammarly uses information considered 'sensitive' under State Privacy Laws only for the legally permitted purposes described in the policy, in the same way it processes user content generally.

Stay ahead of the changes

Track Grammarly and get the diff the day its terms change.

Monitor Grammarly + up to 20 platforms — $4.99/mo →

Summary

Grammarly's Privacy Policy explains what data Grammarly collects and how it uses it. Your actual writing content is not used for ads or marketing, and you can go into your account settings to choose whether Grammarly uses your content to train its AI models. If you use Grammarly through your employer or school, this policy does not apply to your content — your organization's own agreement governs instead.

Analysis

Grammarly's Privacy Policy establishes how Grammarly collects, uses, shares, and retains user information, with particular attention to the boundaries of permissible data use. It expressly restricts user content from being used for marketing, advertising, or by Grammarly's advertising partner companies, and requires that AI service providers refrain from training their own models on Grammarly customer content. Users retain a control mechanism over whether their user content is used to train Grammarly's AI models via account settings. The policy carves out organizational deployments entirely, specifying that it does not govern information uploaded to or output from Grammarly products when those products are used under organizational management. A conditional binding-arbitration mechanism before a Data Privacy Framework Panel is available for unresolved complaints under specified conditions.

What this means for you

Users retain direct control over one significant data use: whether their user content contributes to Grammarly's AI model training. This can be adjusted through the training controls in account settings. Users who signed up with an organizational email address should be aware that Grammarly may share their email address or usage information with that organization's administrators. Anyone using Grammarly under an organization's management is not covered by this Privacy Policy with respect to uploaded content or outputs. Sensitive data under State Privacy Laws is used only for legally permitted purposes. Grammarly does not sell, share, or use for targeted advertising the personal information of anyone it knows to be under 18.

Institutional Analysis

Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

Monitor Grammarly + up to 20 platforms — $4.99/mo → Get the research letter, free

1 important change detected

2 versions captured · Last updated: July 2026

July 7, 2026

medium

What changed Grammarly's privacy policy (now branded under its parent company Superhuman) was updated on July 6, 2026 to expand the types of personal data it collects and clarifies how the policy applies to organizational users. The updated policy now explicitly states it collects 'screen content' and 'web pages' in addition to existing content categories, and adds disclosure of voice data collection for transcription features. For organizational users (employees, students, account managers on behalf of entities), the policy clarifies that it no longer applies to content they upload or output, shifting responsibility to the organization itself.

Why this matters The updated policy now discloses that Grammarly collects voice data if you use transcription or Notetaker features, including recordings of other participants, and expands its list of collected content to explicitly include screen content and web pages. For users whose accounts are managed by an organization (employer, school, or other entity), the policy clarifies that Grammarly's privacy terms do not apply to the content you upload or output—your organization's privacy terms govern that data instead. This means organizational account users should review their organization's privacy policies rather than relying on Grammarly's policy to understand how their work or educational data is handled.

View full change record →

Featured, High severity

Advertising Partners Excluded from User Content Access Compare →

Despite sharing some cookie and interaction data with advertising partners, Grammarly explicitly excludes user content from what those partners can access, which limits the scope of third-party data access.

Added July 10, 2026 Standard Seen across 288 platforms
AI Model Training User Control Compare →

Users have a meaningful opt-in or opt-out mechanism over a significant data use—AI model training—rather than it being imposed without recourse.

Added July 10, 2026 Standard Seen across 217 platforms
AI Providers Restricted from Training on User Content Compare →

Third-party AI providers processing Grammarly user content are contractually barred from using that content for their own model training, limiting downstream data use.

Added July 10, 2026 Standard Seen across 288 platforms
No Sale of User Content for Advertising Compare →

Users' actual content—as opposed to behavioral or metadata—is expressly excluded from Grammarly's marketing and advertising activities.

Added July 10, 2026 Standard Seen across 279 platforms
No Targeted Advertising to Known Minors Under 18 Compare →

This restriction applies to all three categories—sales, sharing, and targeted advertising—for known minors, providing broad protection for that group's personal data.

Added July 10, 2026 Common Seen across 148 platforms
Organizational Account Administrator Access to User Data Compare →

Users who register with a work or institutional email address may have their account information disclosed to their organization's administrators, affecting their expectation of individual privacy.

Added July 10, 2026 Standard Seen across 265 platforms
Organizational Account Privacy Policy Exclusion Compare →

Users of Grammarly through an employer, school, or other organization lose the protections of this Privacy Policy with respect to their uploaded and output content.

Added July 10, 2026 Standard Seen across 297 platforms
Sensitive Data Limited to Legally Permitted Uses Compare →

Sensitive data receives a use restriction tied to legal permissions rather than broader discretionary use, which limits how Grammarly can deploy that category of information.

Added July 10, 2026 Standard Seen across 279 platforms
Targeted Advertising Consent or Opt-Out Requirement Compare →

Grammarly acknowledges that its data disclosure practices may trigger legal protections under certain privacy laws, which could activate consent requirements or opt-out rights depending on applicable law.

Added July 10, 2026 Common Seen across 148 platforms
User Content Used to Train AI Models Compare →

AI model training is a significant secondary use of collected data; the existence of a user-controlled opt-out mechanism means this use is not unconditional.

Added July 10, 2026 Standard Seen across 217 platforms

Featured, Medium severity

Advertising Partner Cookie and ID Data Sharing Compare →

Third-party companies, not just Grammarly, may be collecting data about users' website behavior through cookies, expanding who has access to user interaction data.

Added July 10, 2026 Standard Seen across 288 platforms
Binding Arbitration Option Under Data Privacy Framework Compare →

Binding arbitration is a significant legal mechanism that, if invoked, can produce enforceable decisions; its availability is conditioned and not guaranteed.

Added July 10, 2026 Standard Seen across 206 platforms