Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This document establishes Groq's data collection, use, and sharing practices for users of its websites, developer console, and chat interface. The policy authorizes Groq to collect personal information including names, email addresses, IP addresses, and usage behavior, and to share this data with third-party advertising and analytics partners. The policy also permits the use of cookies and similar tracking technologies for targeted advertising purposes, and establishes specific data rights and opt-out mechanisms for California residents and users in certain other jurisdictions.
This Privacy Policy, effective November 12, 2025, governs how Groq, Inc. processes personal information collected from users of its websites (groq.com, community.groq.com, console.groq.com, chat.groq.com), with Groq acting as data controller for these activities; it explicitly excludes Customer Data processed on behalf of business customers through GroqCloud, GroqChat, and APIs, which is governed separately by the Groq Services Agreement and Data Processing Addendum. The policy states that Groq collects identifiers (name, email, phone, IP address), payment information, device data, usage metadata, browsing history, and inferred location, and the terms authorize use of this information for service delivery, performance analytics, advertising and marketing, and sharing with third-party vendors, partners, social media platforms, and advertising networks. A notable provision states that de-identified, anonymized, or aggregated information 'is not subject to any restrictions under this Policy' and may be used and disclosed 'to others for any purpose,' which is a broad carve-out that could encompass commercial data sharing not otherwise constrained by the policy's disclosure framework; additionally, third-party identity verification services receive biometric-adjacent data (photo IDs, selfies) directly from users and process it under their own privacy notices rather than Groq's. The policy references GDPR, CCPA/CPRA, and other international frameworks, providing specific rights disclosures for California residents and international users; EU and UK users are directed to supplemental notices, and the policy's legal basis assertions for processing under GDPR may require independent verification against applicable regulatory guidance. Compliance teams should evaluate data flows involving third-party advertising partners (including cookie-based targeting and cross-site tracking), the scope of the de-identification carve-out, and whether consent mechanisms for targeted advertising meet applicable jurisdictional standards.
Institutional analysis available with Compliance
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.
Start Compliance free trialMonitoring
Groq has updated this document before.
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
Compliance Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Compliance free trialCross-platform context
See how other platforms handle International Data Transfers and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.