Grok (xAI)
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“How we may use it: To provide, analyze, and maintain our Service; to provide support and assistance in relation to our Service; to develop and improve our Service and to conduct research; to ensure the security and integrity of our Service; for legal purposes.”
Watch: Data retention
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
This clause establishes an exception to standard data deletion practices, permitting xAI to retain user information for litigation, regulatory, or other legal matters when the information is relevant to an ongoing legal claim.
Restricts users from transferring or assigning their rights and licenses under the Terms while granting xAI an unrestricted right of assignment, with any unauthorized user assignment declared null and void.
Imposes a restriction on both parties by waiving the right to jury trial and prohibiting participation in class actions, collective actions, private attorney general actions, or other representative proceedings, applicable to all users regardless of purpose.
Scores derived from 60 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Grok (xAI)'s terms explicitly protect your inputs from training use — the policy is affirmatively favorable on this point.
- Your outputs and prompts are explicitly yours — Grok (xAI)'s terms include affirmatively protective IP language.
- Data handling is conditional — 10 privacy or retention clauses warrant review before using Grok (xAI) at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Grok (xAI)'s own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 194 verified, verbatim-cited findings below — read the citations.
Based on 210 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Privacy PolicyVerified - read in full - 73 citationspdf textLast captured 2026-08-24
- Terms of ServiceVerified - read in full - 161 citationspdf textLast captured 2026-08-17
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Requires the user to assign all intellectual property rights in any feedback provided to xAI, and grants xAI a perpetual, unrestricted right to use such feedback for any purpose without attribution or compensation to the user.
"Feedback. To the extent you provide us any suggestions, recommendations, or other feedback relating to the Service or to any other xAI products or services (collectively, “Feedback”), you hereby assign to us all rights (including all intell..."
Explicitly permits use of personal information to train AI models, develop new features, conduct research, identify usage trends, and expand business activities, establishing broad training and development rights.
" To develop and improve our Service and to conduct research: For example to develop new product features, to train our models, to identify usage trends, to operate and expand our business activities, to identify new customers, and for data ..."
Carves out specific categories of data processing from the Privacy Policy's scope—business customer data (e.g., xAI API), employment-related data, and data accessed via third-party services—restricting this policy's application and directing users to applicable third-party policies.
" This Privacy Policy does not apply to data that we process on behalf of customers of our business offerings, such as the xAI API, or to any employment-related personal information processed in consideration of employment with xAI. This Pri..."
This segment discloses that automated systems and authorized personnel may review User Content and usage for business, safety, compliance, security incident investigation, and legal obligation purposes, establishing an operational and compliance-driven review procedure.
" Automated systems that analyze your use of the Service and User Content may be used for business, safety, and compliance purposes. A limited number of our authorized personnel may review how you use the Service and your User Content for sp..."
This segment grants users the right to be free from discrimination for exercising their privacy rights under applicable privacy laws, creating a non-retaliation protection.
" The right to be free from discrimination for exercising the rights afforded to you under applicable privacy laws."
Permits use of personal information to communicate with users, including sending non-promotional service emails and legally required notices.
" To communicate with you: For example, to send you information about our Service, events, or changes to the Service. This may include sending you non-promotional emails, such as emails about your Grok access, legally required notices, or ou..."
Requires retention of personal information to protect the safety, security, and integrity of the service and xAI's rights and property when misuse or unusual account activity is detected.
" To protect the safety, security, and integrity of our business and the Service, as well as to protect our rights and property and those of others (e.g., if we detect misuse of our Service or otherwise detect unusual activity on your accoun..."
Permits xAI to use automated systems and authorized personnel to review user activity and User Content for business, safety, compliance, product improvement, security incident investigation, and legal obligations purposes.
"Automated systems that analyze your use of the Service and User Content may be used for business, safety, and compliance purposes. Our authorized personnel may review how you use the Service and your User Content for specific business purpo..."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" Similarity of content. Due to the nature of artificial intelligence, outputs may not be unique, and different users may receive similar output from our Service. Your rights to the Output do not extend to other's rights."
This segment limits the user's ownership rights in Output by noting that outputs may not be unique and that a user's rights do not extend to similar outputs received by other users, restricting the scope of any proprietary claim in generated content.
AI-generated interpretation, not legal advice.
" User Content: You may provide personal information in prompts and other content you input, such as files, images, audio, voice, video, and other material (“Input”). Outputs of the Service (“Output”), including responses Grok generates, are based on your Input (together, "User Content"). If you include personal information in Inputs you provide to the Service, this information may be reproduced in the Output."
Defines 'User Content' to encompass Inputs (prompts, files, images, audio, video) and Outputs (Grok responses), and notes that personal information included in Inputs may be reproduced in Outputs, establishing the key definitional scope for user-generated content and its relationship to service outputs.
AI-generated interpretation, not legal advice.
" To develop and improve our Service and to conduct research: For example to develop new product features, to train our models, to identify usage trends, to operate and expand our business activities, to identify new customers, and for data analysis."
Explicitly permits use of personal information to train AI models, develop new features, conduct research, identify usage trends, and expand business activities, establishing broad training and development rights.
AI-generated interpretation, not legal advice.
" Logging in through a third-party service. By choosing to login to our Service by using a third-party service, such as Google, Apple, or X, you give us permission to access, use, and store your information from that service, as permitted by that service, which may include log-in credentials and/or access tokens for that service. If connecting to our Service using your X credentials, you may elect (opt-in) to bring your X user profile (including date of birth), X account and location information, X preferences, X post history (your X posts viewable on your X account including posts to and from all accounts (public or protected) that you can view), X usage data, and your Grok in X conversation history to your xAI account."
This segment grants xAI permission to access, use, and store information from third-party login services (Google, Apple, X), including credentials and access tokens, and describes the optional user-initiated opt-in to import X profile data (date of birth, location, preferences, post history), constituting a data collection and use authorization.
AI-generated interpretation, not legal advice.
" Privacy. We care about your privacy. By using the Service, you acknowledge that we may collect, use, and disclose your personal information and aggregated, pseudonymized, and/or de-identified data as set forth in our Privacy Policy , and that your personal information will be transferred to, and/or processed in, the United States."
This segment disclaims any guarantee of security against unauthorized access or misuse of user data, places the risk of data provision on the user, and establishes obligations on the user to immediately notify xAI of security breaches and secure their account.
AI-generated interpretation, not legal advice.
" How we may use it: To provide, analyze, and maintain our Service; to provide support and assistance in relation to our Service; to develop and improve our Service and to conduct research; to ensure the security and integrity of our Service; for legal purposes."
Enumerates permitted uses of Feedback Data including service improvement, research, and development—authorizing the use of user feedback signals for model training and enhancement purposes.
AI-generated interpretation, not legal advice.
" Cookies and Similar Technologies : We and our service providers use cookies and other similar technologies to operate and improve our Services. This data obtained from these cookies and similar technologies may be used for several different purposes, including to:"
Grants permission for xAI and its service providers to use cookies and similar tracking technologies to operate and improve services, and introduces the enumerated purposes that follow.
AI-generated interpretation, not legal advice.
" Do Not Track: Please note that because the effect of "Do Not Track" signals remains unclear, and because there continues to be no consistent industry understanding of how to respond to such a signal, we do not alter our privacy practices when we detect a "Do Not Track" signal from your browser."
This segment disclaims any obligation to honor 'Do Not Track' browser signals, stating that xAI does not alter its privacy practices in response to such signals due to the lack of consistent industry standards and unclear effect, limiting user expectations about tracking controls.
AI-generated interpretation, not legal advice.
" Technical Data: Technical data includes information such as your IP address, device type, country from which you access, analytics information, browser type and version, browser plug-in types and versions, and operating system. This may also include information about your use of the Service and how you interact with the Service, including the types of content you view or engage with, the features you use, pages you view and your Grok conversation history."
Defines Technical Data as a category encompassing IP address, device type, country, analytics, browser information, usage patterns, and conversation history, establishing the scope of automated data collection.
AI-generated interpretation, not legal advice.
" Accuracy. Artificial intelligence is rapidly evolving and is probabilistic in nature; therefore, it may sometimes: a) result in Output that contains “hallucinations,” b) be offensive, c) not accurately reflect real people, places or facts, or d) be objectionable, inappropriate, or otherwise not suitable for your intended purpose."
This segment disclaims accuracy of AI-generated Output, warning users that outputs may contain hallucinations, be offensive, fail to reflect facts accurately, or be otherwise unsuitable, thereby limiting xAI's representations about Output quality.
AI-generated interpretation, not legal advice.
" Output may not always be accurate. Output from our services is not professional advice. You should conduct your own thorough research and should not rely on Output as the truth."
This segment disclaims that Output is not professional advice and may be inaccurate, instructing users to conduct independent research, thereby limiting xAI's liability for reliance on generated content.
AI-generated interpretation, not legal advice.
" Our Service may provide incomplete, incorrect, or offensive Output that does not represent xAI's views. Outputs are not meant to endorse a person or third-party's views."
This segment disclaims that Output may be incomplete, incorrect, or offensive and does not represent xAI's views, and clarifies that Output does not constitute endorsement of any person's or third party's views.
AI-generated interpretation, not legal advice.
" At our sole discretion, we may implement rate limitations to accommodate system resources or usage needs."
This segment reserves xAI's sole discretion to implement rate limitations based on system resource or usage needs, restricting user access levels and service throughput without prior notice or guaranteed parity.
AI-generated interpretation, not legal advice.
" Your use of our Service could cause risk or harm to xAI, our users, or anyone else; or"
This segment limits user remedies upon termination by establishing that no refund is owed except where required by law, restricting financial recovery available to terminated or suspended users.
AI-generated interpretation, not legal advice.
" For litigation, regulatory or other legal matters (e.g., we would retain your information if there was an ongoing legal claim and the information was relevant to the claim)."
This clause establishes an exception to standard data deletion practices, permitting xAI to retain user information for litigation, regulatory, or other legal matters when the information is relevant to an ongoing legal claim.
AI-generated interpretation, not legal advice.
"TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT WILL XAI OR ANY XAI INDEMNITEE BE LIABLE FOR ANY INDIRECT, PUNITIVE, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR EXEMPLARY DAMAGES, INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, REVENUE, GOODWILL, BUSINESS OPPORTUNITY, USE, OR DATA, OR OTHER INTANGIBLE LOSSES, INCLUDING EMOTIONAL OR REPUTATIONAL HARM, ARISING OUT OF OR RELATING TO THE USE OF, OR INABILITY TO USE, THE SERVICE OR ANY OUTPUTS GENERATED BY THE SERVICE, OR YOUR USE OF OR INABILITY TO USE ANY OF THE FOREGOING. THE LIMITATIONS OF THIS SUBSECTION SHALL APPLY TO ANY THEORY OF LIABILITY, WHETHER BASED ON WARRANTY, CONTRACT, STATUTE, TORT (INCLUDING NEGLIGENCE) OR OTHERWISE, AND WHETHER OR NOT ANY OF THE XAI INDEMNITEES HAVE BEEN INFORMED OF THE POSSIBILITY OF ANY SUCH DAMAGE, AND EVEN IF A REMEDY SET FORTH HEREIN IS FOUND TO HAVE FAILED OF ITS ESSENTIAL PURPOSE."
Limits xAI's liability by excluding all indirect, punitive, incidental, special, consequential, or exemplary damages — including loss of profits, revenue, goodwill, data, and reputational harm — arising from use of or inability to use the service or outputs, under any theory of liability.
AI-generated interpretation, not legal advice.
"TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL XAI OR ANY XAI INDEMNITEE BE LIABLE TO YOU FOR ANY CLAIMS, PROCEEDINGS, LIABILITIES, OBLIGATIONS, DAMAGES, LOSSES, OR COSTS IN AN AMOUNT EXCEEDING THE AMOUNT YOU PAID TO US HEREUNDER OR ONE HUNDRED U.S. DOLLARS ($100.00), WHICHEVER IS GREATER, EXCEPT IN THE EVENT OF XAI’S OR SUCH XAI INDEMNITEE’S WILLFUL MISCONDUCT OR GROSS NEGLIGENCE. THIS LIMITATION OF LIABILITY SECTION APPLIES WHETHER THE ALLEGED LIABILITY IS BASED ON CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY, OR ANY OTHER BASIS, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."
Caps xAI's aggregate financial liability to the user at the greater of the amount the user paid or one hundred US dollars, except in cases of willful misconduct or gross negligence, applicable under any theory of liability.
AI-generated interpretation, not legal advice.
"- EST Limitation of Liability. For European Consumers, provided that we have acted with professional diligence, we do not take responsibility for loss or damage caused by us, unless it is caused by our breach of these Terms or is reasonably foreseeable at the time of entering into these Terms. We do not take responsibility for loss or damage caused by events beyond our control. We do not limit our liability to you where it would be unlawful for us to do so. You have the full protections of the applicable laws and statutory rights."
Limits the provider's liability to European Consumers to losses caused by its breach of Terms or reasonably foreseeable at contract formation when acting with professional diligence, excludes liability for events beyond its control, but carves out any limitation that would be unlawful and preserves statutory consumer protections.
AI-generated interpretation, not legal advice.
Common questions about Grok (xAI)'s policies
- Does Grok (xAI) train its AI models on your data?
- Training possible — conditions or opt-outs apply — based on 3 verified findings from Grok (xAI)'s published policy. Informational only, not legal advice.
- Who owns the content you create with Grok (xAI)?
- You own outputs — with license carve-outs — based on 7 verified findings from Grok (xAI)'s published policy. Informational only, not legal advice.
- Can you use Grok (xAI)'s output commercially?
- Commercial use allowed — based on 4 verified findings from Grok (xAI)'s published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Grok (xAI)'s own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
28 verified clausesClauses in Grok (xAI)'s policies that work in your favour — commitments the platform made to you.
- Prompt ownership
“You Own Your User Content. You may provide input (e.g., text, audio, images, video, code, files, folders, drives, etc.) to the Service (” Input ”) and receive output from the Service (excluding output from Grokipedia) based on the Input (” Output ”). Collectiv…”
This segment affirms that users own their User Content and establishes user representations and warranties that they hold all necessary rights to provide Input, while also asserting ownership rights as between the user a…
📍 Terms of Service › “User Content”Jump to exact text → - Indemnity & liabilityindemnity direction
“You acknowledge that, in the event of any third-party claim that the iOS App, or your possession and use of that iOS App, infringes that third-party's intellectual property rights, xAI, not Apple, will be solely responsible for the investigation, defense, sett…”
Allocates responsibility for intellectual property infringement claims regarding the iOS App to xAI (not Apple), and acknowledges Apple and its subsidiaries as third-party beneficiaries of the Terms with respect to the i…
📍 Terms of Service › “Mobile App Specific Terms”Jump to exact text → - Moderation & enforcement
“EST Consequences of Exercising Right of Withdrawal. If you withdraw from this contract and you have signed-up for a paid subscription, we will repay you for payments that we verify have already been received by us from you for the subscription term active at t…”
Imposes an obligation on xAI to repay verified payments to European-Consumers who exercise the right of withdrawal within 14 days of receiving withdrawal notice, using the original payment method, and clarifies exclusion…
📍 Terms of Service › “Information about the Australian eSafety Commissioner”Jump to exact text → - Moderation & enforcementterms can change anytime
“EST Changes to the Terms. With respect to European-Consumers, xAI may unilaterally make changes to these Terms (including the Europe Specific Terms) when it is necessary to do so, particularly as a result of changes of law or to ensure a better functionality o…”
Establishes the procedure and conditions under which xAI may unilaterally amend Terms for European-Consumers, including advance notification obligations and the right for users to object and discontinue use, creating a s…
- Terms changes: advance notice promised
📍 Terms of Service › “Information about the Australian eSafety Commissioner”Jump to exact text → - Privacy & data use
“Appeals: If we refuse to take action on a request within a reasonable period of time after receiving your request, you may appeal our decision via https://x.ai/privacy-portal/ . In such an appeal, you must (1) provide sufficient information to allow us to veri…”
This segment establishes the procedure for appealing xAI's refusal or inaction on privacy rights requests, specifying the portal to use, the information required in the appeal, and xAI's obligation to respond to all appe…
📍 § 9 (Privacy rights and choices)Jump to exact text → - Privacy & data usesensitive data (biometric/location/health)
“We do not aim to collect sensitive personal information (ex., information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometric scans, criminal background, or trade union membership) and ask that you do not provid…”
Restricts xAI from intentionally collecting sensitive personal information and prohibits use of training data to infer or derive sensitive or special category data about individuals, and restricts use of uploaded images…
📍 § 2 (Personal information we collect (Notice at collection))Jump to exact text →
+ 22 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
16 verified clausesWhat Grok (xAI) requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcement
“Export Controls. You will comply with all applicable import and export and re-export control and trade and economic sanctions laws and regulations in your use of the Service, including the Export Administration Regulations maintained by the U.S. Department of…”
Imposes an obligation on users to comply with all applicable import, export, re-export, and trade sanctions laws (including EAR, OFAC, and ITAR) when using the Service, and includes a representation and warranty regardin…
📍 Terms of Service › “General Provisions”Jump to exact text → - Moderation & enforcement
“Registration. You must provide accurate and complete information to register for an account to use our Service. You may not share your account credentials or make your account available to anyone else, and are responsible for all activities that occur under yo…”
This segment obligates users to provide accurate and complete registration information, prohibits credential sharing or account transfer, holds users responsible for all account activity, and requires authority to bind t…
📍 Terms of Service › “Registration and Access”Jump to exact text → - Moderation & enforcement
“What you can do. Subject to your compliance with these Terms, you may access and use our Service. You must comply with all applicable laws as well as our Acceptable Use Policy and any other documentation, guidelines, or policies we make available to you, inclu…”
This segment grants users a conditional permission to access and use the Service subject to compliance with the Terms, Acceptable Use Policy, applicable laws, and other published guidelines, establishing the scope of the…
📍 Terms of Service › “Using our Service”Jump to exact text → - Moderation & enforcement
“Making high-stakes automated decisions that affect a person's safety, legal or material rights, or well-being (such as making financial credit, educational, employment, housing, insurance, legal, medical, or other important decisions about or for them)”
This segment prohibits using the Service for high-stakes automated decisions affecting a person's safety, legal rights, or material well-being (financial credit, employment, housing, medical, etc.), constituting a restri…
📍 Terms of Service › “Taking unauthorized actions on behalf of others”Jump to exact text → - Moderation & enforcementconduct restrictions
“Modifying, copying, leasing, selling, reselling, distributing, distilling, manipulating, using bots to access, reverse engineering, or decompiling our Service”
This segment prohibits users from modifying, copying, leasing, selling, reselling, distributing, distilling, manipulating, using bots to access, reverse engineering, or decompiling the Service, restricting a broad range…
📍 Terms of Service › “Using our Service”Jump to exact text →
+ 11 more verified clauses of this kind on this platform, cited in full in the report.
What the policies actually cover
15 topics- Product telemetry & usage tracking15 clauses
- Advertising & tracking1 protective6 clauses
- Sensitive data (biometric, location, health)1 protective2 clauses
- Children's data4 clauses
- Government & law-enforcement disclosure4 clauses
- Does not train on your content1 protective1 clause
- Trains by default, opt-out available1 clause
- Damages & liability cap2 protective7 clauses
- Indemnity direction2 protective2 clauses
- Terms can change at any time1 protective3 clauses
- Deletion rights & post-termination survival4 clauses
- Auto-renewal & cancel window1 clause
- Human review of your content1 clause
- Breach-notification promises2 clauses
- Conduct restrictions4 obligations4 clauses
177 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the Privacy Policy, § 3 (How we may use personal information) addresses how long content is retained, and the Privacy Policy, § 3 (How we may use personal information) addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
The Terms of Service, Terms of Service › “User Content” describes rights the platform takes in user content, and the Privacy Policy, § 4 (How we may disclose personal information) describes disclosure of data to third parties or subprocessors. Both clauses are in force at the same time — read them together.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause provides a deletion or time-bounded retention path.
“The length of time we retain data may depend on the features or settings you use. For example, when Private Chat is turned on, conversations will not appear in your conversation history and your conversations will be deleted from xAI systems within 30 days unless it is necessary that they be kept longer for legal, compliance, or safety purposes. Further, if you choose to delete any or all of your conversations or ...”Open source citation
The clause provides a deletion or time-bounded retention path.
“The length of time we retain data may depend on the features or settings you use. For example, when Private Chat is turned on, conversations will not appear in your conversation history and your conversations will be deleted from xAI systems within 30 days unless it is necessary that they be kept longer for legal, compliance, or safety purposes. Further, if you choose to delete any or all of your conversations or ...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“Class Action and Jury Trial Waiver. BY ENTERING INTO THESE TERMS, YOU AND XAI ARE EACH WAIVING THE RIGHT TO A TRIAL BY JURY OR TO BRING, JOIN, OR PARTICIPATE IN ANY PURPORTED CLASS ACTION, COLLECTIVE ACTION, PRIVATE ATTORNEY GENERAL ACTION, OR OTHER REPRESENTATIVE PROCEEDING OF ANY KIND AS A PLAINTIFF OR CLASS MEMBER. THE FOREGOING APPLIES TO ALL USERS (BOTH NATURAL PERSONS AND ENTITIES), REGARDLESS OF WHETHER YOU...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“Class Action and Jury Trial Waiver. WHERE PERMITTED BY APPLICABLE LAW, BY ENTERING INTO THESE TERMS, YOU AND XAI ARE EACH WAIVING THE RIGHT TO A TRIAL BY JURY OR TO BRING, JOIN, OR PARTICIPATE IN ANY PURPORTED CLASS ACTION, COLLECTIVE ACTION, PRIVATE ATTORNEY GENERAL ACTION, OR OTHER REPRESENTATIVE PROCEEDING OF ANY KIND AS A PLAINTIFF OR CLASS MEMBER. THE FOREGOING APPLIES TO ALL USERS (BOTH NATURAL PERSONS AND E...”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“Our Use of User Content. You grant, an irrevocable, perpetual, transferable, sublicensable, royalty-free, and worldwide right to xAI to use, copy, store, modify, distribute, reproduce, publish, display in public forums, list information regarding, make derivative works of, and aggregate your User Content and derivative works thereof for any purpose, including but not limited: (i) to maintain and provide the Servic...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | commercial use | worsens | HIGH | 4 |
| All applicable tiers | data retention | improves | LOW | 2 |
| All applicable tiers | governing law disputes | conditional | MEDIUM | 2 |
| All applicable tiers | indemnity liability | conditional | MEDIUM | 8 |
| All applicable tiers | moderation enforcement | worsens | HIGH | 3 |
| All applicable tiers | privacy data use | worsens | HIGH | 1 |
| All applicable tiers | prompt ownership | improves | LOW | 3 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 2 |
| Enterprise | tier differences | conditional | MEDIUM | 2 |
| Free | indemnity liability | conditional | MEDIUM | 1 |
| Free | moderation enforcement | worsens | HIGH | 1 |
| Free | training use | worsens | HIGH | 2 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on privacy data use
“- To our contracted service providers: To assist in providing the Service to you or performing business operations, we provide your personal information to service providers including providers of hosting, cloud, analytics, content delivery, support and safety monitoring, payment and transaction, and other technology services, for the purposes described above.”Open timeline citation
Latest stance: training permitted on training use
“- To develop and improve our Service and to conduct research: For example to develop new product features, to train our models, to identify usage trends, to operate and expand our business activities, to identify new customers, and for data analysis.”Open timeline citation
Latest stance: deletion or time bound on data retention
“The length of time we retain data may depend on the features or settings you use. For example, when Private Chat is turned on, conversations will not appear in your conversation history and your conversations will be deleted from xAI systems within 30 days unless it is necessary that they be kept longer for legal, compliance, or safety purposes. Further, if you choose to delete any or all of your conversations or if you choose to delete your account, we will delete the data within 30 days unless it is necessary to retain the data for legal, compliance, or safety purposes.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“- How we may disclose it: To our contracted service providers; in connection with business transfers, for legal purposes; to our related companies; and to third-parties with which you interact or share information.”Open timeline citation
Latest stance: no training claim on training use
“- **Google Apps Using Google OAuth**: For users who opt to connect to Google Apps via Google OAuth, xAI shall not use any Google Apps content for any of its internal AI or other training purposes (such as training its machine learning models), including developing new products or services based on such content.”Open timeline citation
Latest stance: rights or controls vary by tier on tier differences
“- EST Consequences of Exercising Right of Withdrawal. If you withdraw from this contract and you have signed up for a paid subscription, we will repay you for payments that we verify have already been received by us from you for the subscription term active at the time of your withdrawal notice, within 14 days from the day on which we received the notification of your withdrawal from this contract. For this repayment, we will use the same means of payment that you used for the original transaction, unless expressly agreed otherwise with you. Please note this does not include X Premium or X Premium+ account charges because that is not part of this Service. Please refer to the X Premium Terms of Use for further details of how to claim a refund for those charges.”Open timeline citation
Latest stance: rights or controls vary by tier on tier differences
“- Our [Enterprise Terms of Service](https://x.ai/legal/terms-of-service-enterprise) govern the use of our Services for developers and businesses, including xAI APIs and PromptIDE.”Open timeline citation
Latest stance: liability limited on indemnity liability
“We continue to add new models and other features, some which may be in beta testing where indicated. You accept that all of our Services, including but not limited to such beta technologies, are provided “AS IS” and may contain errors, defects, bugs or inaccuracies that could fail or cause corruption or loss of data and information. You agree that use of any of our technologies is at your own risk.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-08-24· verified 2026-08-24
- Terms of Service:Last captured 2026-08-17· verified 2026-08-17
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↓ 28 fewer findings this quarter vs last (213 vs 241). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Grok (xAI)'s policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Grok (xAI)'s own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.