If you use Grammarly from outside the US, your personal data — including your writing — is transferred to and stored in the United States, where different privacy laws apply.
Your personal data and User Content are stored and processed in the United States, where US government surveillance authorities such as FISA §702 may apply, potentially limiting the protections available under GDPR or your home country's laws.
Cross-platform context
See how other platforms handle Cross-Border Data Transfers and similar clauses.
Compare across platforms →US data protection laws offer fewer statutory protections than GDPR and similar frameworks, meaning users in the EU and other regions may have less legal protection for their data once it is transferred to the US.
(1) REGULATORY FRAMEWORK: Cross-border data transfers from the EU/EEA to the US are regulated under GDPR Chapter V (Arts. 44-49), requiring an adequacy decision, Standard Contractual Clauses (SCCs, Commission Decision 2021/914), or other appropriate safeguards. The EU-US Data Privacy Framework (DPF, adopted July 2023) provides an adequacy mechanism for certified US organizations. UK data transfers are governed by UK GDPR and the UK-US data bridge. The CJEU's Schrems II decision (C-311/18) remains relevant for assessing supplementary measures. Enforcement: EU DPAs (lead authority: Irish DPC), ICO (UK). (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.