Provision record
Grammarly · Grammarly Privacy Policy · View original document ↗

Data Privacy Framework Compliance and Dispute Resolution

Medium severity High confidence Explicit document language Unique · 0 of 352 platforms
Stay ahead of the changes
Track Grammarly and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

The policy states that Superhuman is certified under the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Frameworks, and commits to resolving cross-border data transfer complaints first directly, then through VeraSafe as an alternative dispute resolution provider, with binding arbitration available as a final recourse under the Framework.

This analysis describes what Grammarly's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes the operational dispute resolution pathway for EEA, UK, and Swiss individuals whose personal data is transferred to the United States, including a binding arbitration option before a Data Privacy Framework Panel as a last resort mechanism, with FTC jurisdiction over overall Framework compliance.

Recent Activity

This document changed recently

Medium Jul 7, 2026

The updated policy now discloses that Grammarly collects voice data if you use transcription or Notetaker features, including recordings of other participants, and expands its list of collected content to explicitly include screen content and web pages. For users whose accounts are managed by an organization (employer, school, or other entity), the policy clarifies that Grammarly's privacy terms do not apply to the content you upload or output—your organization's privacy terms govern that data instead. This means organizational account users should review their organization's privacy policies rather than relying on Grammarly's policy to understand how their work or educational data is handled.

View change record →

Consumer impact (what this means for users)

Under this provision, EEA, UK, and Swiss users who have concerns about how their personal data is handled after transfer to the United States can escalate complaints through Superhuman directly, then to VeraSafe for alternative dispute resolution, and ultimately to binding arbitration before a Data Privacy Framework Panel. The Federal Trade Commission has jurisdiction over Superhuman's compliance with the Frameworks.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Dispute a Fee
    Contact Superhuman at privacy@superhuman.com with your complaint about personal data processing under the Data Privacy Frameworks. If unresolved, escalate to VeraSafe using the contact form referenced in the policy at verasafe.com.

Cross-platform context

See how other platforms handle Data Privacy Framework Compliance and Dispute Resolution and similar clauses.

Compare across platforms →
▸ View Original Clause Language DOCUMENT RECORD
"
In compliance with the Frameworks, we commit to resolve complaints about our processing of your personal data under the Frameworks. If you have questions about our compliance with Frameworks Principles, you should first contact us at: privacy@superhuman.com. Under the Frameworks, we commit to refer unresolved complaints concerning our handling of personal data received under the Frameworks to VeraSafe, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please visit here for more information or to file a complaint. If your complaint is not resolved through these channels, under certain conditions, a binding arbitration option may be available before a Data Privacy Framework Panel.

Excerpt from Grammarly's Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

1) REGULATORY LANDSCAPE: This provision implicates the EU-U.S.

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • Federal Trade Commission (ftc)
    Oversees unfair or deceptive business practices and can investigate companies that mislead consumers about data collection, sharing, or use.
    Who can file: Anyone affected by the company's practices (US or international)
    What you need: Your account details, a timeline of relevant events, and a description of the specific issue
    What to expect: Complaints inform FTC enforcement priorities and investigations but do not result in individual resolution or compensation
    File a complaint →

Provision details

Document information
Document
Grammarly Privacy Policy
Entity
Grammarly
Document last updated
May 5, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-015877
Document ID
CA-D-00456
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
7c74cfd243c4d415033b559955787624b7005dd4395d828c2e66590e2225ee5f
Analysis generated
July 9, 2026 09:01 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Grammarly
Document: Grammarly Privacy Policy
Record ID: CA-P-015877
Captured: 2026-07-09 09:01:20 UTC
SHA-256: 7c74cfd243c4d415…
URL: https://conductatlas.com/platform/grammarly/grammarly-privacy-policy/provision/CA-P-015877/data-privacy-framework-compliance-and-dispute-resolution/
Accessed: Sept. 15, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Grammarly's Data Privacy Framework Compliance and Dispute Resolution clause do?

This provision establishes the operational dispute resolution pathway for EEA, UK, and Swiss individuals whose personal data is transferred to the United States, including a binding arbitration option before a Data Privacy Framework Panel as a last resort mechanism, with FTC jurisdiction over overall Framework compliance.

How does this clause affect you?

Under this provision, EEA, UK, and Swiss users who have concerns about how their personal data is handled after transfer to the United States can escalate complaints through Superhuman directly, then to VeraSafe for alternative dispute resolution, and ultimately to binding arbitration before a Data Privacy Framework Panel. The Federal Trade Commission has jurisdiction over Superhuman's compliance with the Frameworks.

Is ConductAtlas affiliated with Grammarly?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Grammarly.