Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that when users integrate or use third-party marketplace offerings, Superhuman may disclose user information to those third parties and their associated API providers according to the user's settings, and disclaims ownership or control over third-party data practices.
This analysis describes what Grammarly's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that data disclosed to third-party marketplace participants is governed by those third parties' own policies rather than this privacy policy, and that users are responsible for reviewing third-party terms before integration.
The updated policy now discloses that Grammarly collects voice data if you use transcription or Notetaker features, including recordings of other participants, and expands its list of collected content to explicitly include screen content and web pages. For users whose accounts are managed by an organization (employer, school, or other entity), the policy clarifies that Grammarly's privacy terms do not apply to the content you upload or output—your organization's privacy terms govern that data instead. This means organizational account users should review their organization's privacy policies rather than relying on Grammarly's policy to understand how their work or educational data is handled.
View change record →Under this clause, connecting a third-party app, agent, or integration through the Superhuman marketplace may result in disclosure of user information to that third party and its API providers. Superhuman's privacy policy does not govern how those third parties handle received data; users must review each third party's policies separately.
Cross-platform context
See how other platforms handle Third-Party Marketplace Data Disclosure and similar clauses.
Compare across platforms →Monitoring
Grammarly has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Using our online marketplace, you can choose to build, access, use, purchase, or integrate (collectively, "use") agents, apps, packs, applications, code, plugins, content, services, extensions, or other third-party offerings with your Superhuman account(s). If you choose to use a third-party offering, Superhuman may disclose information to that third party and/or an associated API provider in accordance with your settings. Superhuman does not own or control the third-party offerings available through our marketplace, so please review the policies and choices offered by any third party (including an associated API provider) you choose to engage or integrate.Excerpt from Grammarly's Privacy Policy
1) REGULATORY LANDSCAPE: This provision implicates GDPR joint controller and controller-to-controller transfer obligations where third-party marketplace integrations receive personal data of EEA users. Under CCPA/CPRA, disclosure of personal information to third parties through marketplace integrations may constitute a sale or sharing depending on the terms of data exchange, requiring appropriate contractual safeguards or opt-out mechanisms. 2) GOVERNANCE EXPOSURE: Medium. The policy does not specify what contractual data protection obligations, if any, Superhuman imposes on marketplace third parties beyond the general statement that users should review third-party policies. This creates a governance gap for users who may not realize that connecting a marketplace integration results in data flows outside Superhuman's direct control. 3) JURISDICTION FLAGS: EEA users integrating third-party marketplace offerings should assess whether those third parties are established in the EEA or rely on transfer mechanisms for any data they receive. The policy does not specify geographic restrictions on marketplace participants or the legal transfer bases applicable to data shared with them. 4) CONTRACT AND VENDOR IMPLICATIONS: Organizational deployers of Superhuman should assess whether marketplace integrations used by employees result in personal data disclosures to third parties not covered by the organizational data processing agreement with Superhuman. Procurement teams may wish to maintain an inventory of approved marketplace integrations and their data practices. 5) COMPLIANCE CONSIDERATIONS: Legal teams should evaluate whether the marketplace data sharing mechanism requires additional consent disclosure in organizational or consumer-facing privacy notices, particularly where sensitive or regulated data categories (such as health, financial, or HR data in user content) might be included in data disclosed to marketplace third parties.
This provision establishes that data disclosed to third-party marketplace participants is governed by those third parties' own policies rather than this privacy policy, and that users are responsible for reviewing third-party terms before integration.
Under this clause, connecting a third-party app, agent, or integration through the Superhuman marketplace may result in disclosure of user information to that third party and its API providers. Superhuman's privacy policy does not govern how those third parties handle received data; users must review each third party's policies separately.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Grammarly.