If you use Grammarly from outside the US, your personal data will be sent to and stored on servers in the United States, where privacy laws may offer less protection than in your home country.
This analysis describes what Grammarly's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
For users in the EU, UK, or other jurisdictions with strong data protection laws, transferring data to the US requires specific legal safeguards, and the adequacy of those safeguards has been subject to ongoing legal scrutiny.
The updated policy now discloses that Grammarly collects voice data if you use transcription or Notetaker features, including recordings of other participants, and expands its list of collected content to explicitly include screen content and web pages. For users whose accounts are managed by an organization (employer, school, or other entity), the policy clarifies that Grammarly's privacy terms do not apply to the content you upload or output—your organization's privacy terms govern that data instead. This means organizational account users should review their organization's privacy policies rather than relying on Grammarly's policy to understand how their work or educational data is handled.
View change record →Non-US users, particularly those in the EEA and UK, should be aware that their personal data including submitted writing is transferred to the United States for processing, and the legal mechanisms Grammarly relies on for those transfers should be documented and accessible.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"Grammarly is based in the United States, and we process data on servers located in the United States and in other countries. If you are located outside of the United States, your use of the Services means that your personal information will be transferred to and processed in the United States and other countries, which may not provide the same level of data protection as your home country.Excerpt from Grammarly's Privacy Policy
REGULATORY LANDSCAPE: Cross-border data transfers from the EEA to the US engage GDPR Chapter V, which requires that transfers rely on an adequacy decision, standard contractual clauses, binding corporate rules, or other approved mechanisms.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
For users in the EU, UK, or other jurisdictions with strong data protection laws, transferring data to the US requires specific legal safeguards, and the adequacy of those safeguards has been subject to ongoing legal scrutiny.
Non-US users, particularly those in the EEA and UK, should be aware that their personal data including submitted writing is transferred to the United States for processing, and the legal mechanisms Grammarly relies on for those transfers should be documented and accessible.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Grammarly.