If you use Grammarly through your employer or an organization's business account, your data is governed by a separate contract and your employer's privacy policy, not this consumer policy.
This analysis describes what Grammarly's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Enterprise users may have different and potentially stronger data protections depending on their employer's negotiated agreement with Grammarly, but this also means employees may not be able to rely on the consumer-facing privacy policy for their data.
The updated policy now discloses that Grammarly collects voice data if you use transcription or Notetaker features, including recordings of other participants, and expands its list of collected content to explicitly include screen content and web pages. For users whose accounts are managed by an organization (employer, school, or other entity), the policy clarifies that Grammarly's privacy terms do not apply to the content you upload or output—your organization's privacy terms govern that data instead. This means organizational account users should review their organization's privacy policies rather than relying on Grammarly's policy to understand how their work or educational data is handled.
View change record →Employees using Grammarly through a company or institutional account should check with their employer about what data protections apply, as the consumer privacy policy may not govern how their writing and usage data is handled in a business context.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"When Grammarly processes information on behalf of a Grammarly Business customer, we do so pursuant to a separate data processing agreement with that customer, and the customer's privacy policy (not this Privacy Policy) applies to the personal data of that customer's users.Excerpt from Grammarly's Privacy Policy
REGULATORY LANDSCAPE: The enterprise data processing agreement framework engages GDPR Article 28 (processor obligations), CCPA/CPRA business-to-business exemptions, and FERPA for educational institution deployments.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Enterprise users may have different and potentially stronger data protections depending on their employer's negotiated agreement with Grammarly, but this also means employees may not be able to rely on the consumer-facing privacy policy for their data.
Employees using Grammarly through a company or institutional account should check with their employer about what data protections apply, as the consumer privacy policy may not govern how their writing and usage data is handled in a business context.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Grammarly.