Last Updated: December 20, 2024 (previous version)
At X.AI LLC ("xAI", "our", "us" or "we"), we value your privacy and are committed to being fair, accountable, and transparent in how we handle your personal information. Our Privacy Policy outlines how we collect and use your personal information when you use our websites, products, applications, and other xAI services (our "Service"). It also describes your privacy rights.
This Privacy Policy does not apply to data that we process on behalf of our enterprise or business customers, data accessed through our API, which is governed by customer terms. If you access Grok on a website controlled by one of our customers, the customer's privacy policy or other agreement between you and them, and not this Privacy Policy, would apply to such processing. If you wish to discontinue such processing or otherwise exercise your rights with respect to such personal information, please contact the company on whose behalf we are processing such data. For example, your use of X (previously Twitter), including use of Grok on X, is governed by the X Privacy Policy and X Terms, not this xAI Privacy Policy.
Quick links
We recommend that you read this Privacy Policy in full to ensure you are completely informed about the processing of your personal information. However, to make it easier for you to access a particular section of this Privacy Policy, you can click on the relevant link below to jump to that section:
xAI is a US-based company working on building artificial intelligence tools to accelerate human scientific discovery. We are guided by our mission to advance our collective understanding of the universe. xAI is a separate company from X Corp ("X", previously Twitter).
For example, we have developed “Grok,” a conversational generative AI powered by xAI’s large language models. Grok’s training journey, and more information about Grok, is available on the xAI website.
When you use our Service or communicate with us, you provide certain personal information. This may include:
With the exception of our recruitment activities, we do not aim to collect sensitive personal information (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometric data, criminal background, or trade union membership) and ask that you do not provide us with any such information.
We automatically collect certain device and usage information when you use or interact with our Service (collectively, "Technical Usage Data"). This may include:
We may collect this information through our Service or through other methods of web analysis, including with the help of technologies, such as cookies, web beacons, and clear gifs. For more information about the tracking technologies currently deployed through our Service, see our Cookie Policy.
The personal information we obtain from other sources may include:
In addition, for job applicants, we may receive personal information about you from our affiliated companies and third parties, such as recruitment agencies, social media platforms, and individuals who refer you. This information may include:
We use your personal information for a variety of purposes, including:
We may use your personal information for reasons not described in this Privacy Policy, where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your personal information for an unrelated purpose, we will notify you and explain the applicable legal basis.
We do not share your personal information with third parties, other than as follows:
We may also create and share anonymized, aggregated and de-identified usage data with our related companies and also with third parties to help us perform analysis and make improvements. Additionally, we may share anonymous usage data on an aggregate basis in the normal course of operating our business. For example, we may share information publicly to show trends in the use of our Service.
Save as expressly detailed above, we do not share, sell, or rent any of your personal information to any third party and will not do so without updating this Privacy Policy, notifying you, or, where necessary, obtaining your consent.
Please note that any personal information or other information you choose to submit in communities, forums, blogs, or chat rooms on our websites may be read, collected, and used by others who visit these forums or pages.
We do not collect and use your personal information for marketing purposes and do not share your personal information with third parties for the purpose of marketing.
xAI takes reasonable precautions to safeguard your personal information, including through use of appropriate organizational and technical measures to help safeguard your personal information against accidental or unlawful destruction, loss, misuse, and unauthorized access, disclosure, alteration, and destruction.
However, no security measure or modality of data transmission over the internet is 100% secure. Although we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. As such, you acknowledge and accept that we cannot guarantee the security of your personal information and that any such transmission of your personal information to us is at your own risk. Once we have received your personal information, we will use strict procedures and security features to prevent unauthorized access to it. You are solely responsible for protecting your password, limiting access to your devices, and signing out of websites and online accounts after your sessions.
We retain your personal information where we have an ongoing legitimate business need to do so (e.g., to provide you with a service you have requested or to comply with applicable legal requirements). In certain circumstances, we will need to keep your information for legal reasons after our contractual relationship has ended. The specific retention periods depend on the nature of the information and why it is collected and processed and the nature of the legal requirement.
For example, we may retain your personal information:
when we have a legal obligation to do so (e.g., if we receive a court order, we would retain your information for longer than our usual retention periods);
to deal with and resolve requests and complaints (e.g., if there is an ongoing complaint about you);
to protect the safety, security, and integrity of our business and the Service, as well as to protect our rights and property and those of others (e.g., if we detect misuse of our Service or otherwise detect unusual activity on your account or in your interactions with us); and
for litigation or regulatory matters (e.g., we would retain your information if there was an ongoing legal claim and the information was relevant to the claim).
Our Service may contain hyperlinks to websites or plugins of social media platforms that are not operated by us. These hyperlinks and plugins are provided for your reference and convenience only. This Privacy Policy only applies to the personal information that we collect or which we receive as detailed in this Privacy Policy, and we cannot be responsible for personal information about you that is collected and stored by third parties.
Third party websites have their own terms and conditions and privacy policies, and you should read these carefully before you submit any personal information to these websites. We do not endorse or otherwise accept any responsibility or liability for the content of such third-party websites or third-party terms and conditions or policies.
As noted in the Terms of Service, our Service is not directed at children or minors under the age of 13 and we do not knowingly collect any personal information from them. While we have taken measures to limit undesirable training data and outputs, Grok could produce output that is not appropriate for all ages.
If you are a child under the age of 13, please do not attempt to register for or otherwise use our Service. If we learn that we have inadvertently obtained personal information about a child under the age of 13 via our Service, or from any other source, then we will delete that information as soon as possible.
Parents of teenagers between the ages of 13 and 18 years old must agree to the Terms of Service and are urged to exercise care in monitoring the use of this Service by their teenagers. The Service may have content such as some suggestive dialogue, coarse language, crude humor, sexual situations, or violence.
Please contact us at privacy@x.ai if you are aware that we may have inadvertently collected personal information from a child under the age of 13.
Depending on where you are located and subject to applicable legal exceptions, you may have certain rights in relation to your personal information. For more information on the rights that apply under European and US privacy laws, please see Sections 11 and 12 below.
If you are located in the European Economic Area ("EEA"), United Kingdom ("UK") or Switzerland (collectively, "Europe") the following disclosures apply:
Data controller
X.AI LLC. is the controller of your personal information as described in this Privacy Policy, unless otherwise specified.
Legal basis
When we process your personal information, we will only do so in the following situations:
The following table provides more details on our purposes for processing your personal information and the related legal bases. The legal basis under which your personal information is processed will depend on the data concerned and the specific context in which we use it.
| Purpose | Type of Data | Legal Basis |
|---|---|---|
| To process payments for our Service | Account Data Contact and Communications Data Payment Data | Contract |
| To provide our Service (including to provide Output in response to Input) | Account Data Payment Data Contact and Communications Data User Content Public X Posts Internet Search Data Technical Usage Data | Contract Otherwise as necessary for our legitimate interests (to provide and maintain our Service) |
| To provide support and assistance in relation to our Service | Account Data Contact and Communications Data Technical Usage Data User Content Feedback Data | Contract Otherwise as necessary for our legitimate interests (to operate, provide and improve our business and to communicate with you) |
| To develop and improve our Service | Contact and Communications Data User Content Feedback Data Interaction Data Technical Usage Data | Legitimate interests (to improve and develop our Service) Consent |
| To train and improve our models | Publicly Available Data User Content X Public Posts Feedback Data Interaction Data | Legitimate interests (for example, to improve the accuracy and performance of our models used to power the Services and to train more advanced models) Consent |
| To ensure the security and integrity of our Service | Account Data Payment Data Contact and Communications Data User Content Feedback Data Technical Usage Data | Necessary for our and our third parties' legitimate interests (to detect or prevent illegal activities and/or to manage the security of our IT infrastructure, and the safety and security of our employees, customers and vendors) |
| To comply with our legal obligations | Account Data Payment Data Contact and Communications Data User Content Feedback Data Technical Usage Data | Legal obligation Legitimate Interests (in protecting against misuse or abuse of our Service, protecting personal property or safety, pursuing remedies available to us and limiting our damages, complying with judicial proceedings, court orders or legal processes, or to respond to lawful requests) |
| To process job applications | Applicant Data | Legal obligations Legitimate interests (in assessing the suitability of our candidates and managing, improving, and safeguarding our recruiting process) Consent |
| For our business or commercial purposes | Account Data Contact and Communications Data Social Data User Content Feedback Data Interaction Data Technical Usage Data | Legitimate interests (to identify new customers, data analysis, developing new products, identifying usage trends, and operating and expanding our business activities) |
With the exception of our recruitment activities, we do not aim to collect sensitive personal information (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometric data, criminal background, or trade union membership) and ask that you do not provide us with any such information.
Automated decision-making
xAI does not make decisions or take actions against individuals in ways that could have a legal or significant impact on them.
In addition, in relation to Grok's training, xAI does not process training data for the purposes of inferring or deriving any sensitive or special category data about individuals and we do not actively seek out data sources that include sensitive or special category data.
International transfers
By using our Service, you understand and acknowledge that your personal information will be used, stored and/or accessed by us in the United States and disclosed to our service providers in other jurisdictions. We maintain primary data centers in the United States. We take steps designed to ensure that the personal information we collect under this Privacy Policy is processed as described in this Policy and according to applicable law.
When we provide any personal information about you to any non-UK and non-EEA third-party, we will take appropriate measures to ensure that the recipient protects your personal information adequately in accordance with this Privacy Policy. These measures may include the following:
Ensuring that there is an adequacy decision by the UK Government in the case of transfers out of the UK, or by the European Commission in the case of transfers out of the EEA, which means that the recipient country is deemed to provide adequate protection for such personal information; or
Having in place standard contractual clauses with the recipient which have been approved by the UK Government for transfers out of the UK or by European Commission for transfers outside the EEA.
Further details on the steps we take to protect your personal information, in these cases, are available up on request by contacting us by email at privacy@x.ai at any time.
Your rights
Please note you can opt-out of our use of your information to train our models by contacting us at privacy@x.ai.
If you have an xAI account to access the Service, some of these rights may be exercised through your account. You can also exercise your rights by contacting us at privacy@x.ai. We will consider all such requests and provide our response in accordance with applicable data protection laws.
Please note, however, that your personal information may be exempt from such requests in certain circumstances, for example if we need to keep using your information to comply with our own legal obligations or to establish, exercise or defend legal claims. If an exception applies, we will inform you when responding to your request. We may request that you provide us with information necessary to confirm your identity before responding to any request you make.
For more information on your rights with respect to data we use train out models, please read these FAQs.
Collection of your personal information
You can find a list of the categories of personal information that we collect in Section 2 “Collection of your personal information” above. The chart below provides additional details regarding the categories of personal information that we collect and have collected over the past 12 months. Please refer to the Sections above regarding how we collect your personal information, how we use your personal information, and how we disclose your personal information for further detail.
| Category of Personal Information We Collect | Categories of Third Parties With Whom We Share this Personal Information |
|---|---|
Identifiers, including Account Data, we receive when you log into our platform and Contact and Communications Data you provide to us | Service providers, analytics partners, and parties you authorize, access, or authenticate |
| Payment Data, to facilitate your transactions with us | Service providers |
| Commercial information, such as records of your transaction history | Service providers, analytics partners, and parties you authorize, access, or authenticate |
Internet or other electronic network activity information, including your Technical Usage Data | Service providers, analytics partners, and parties you authorize, access, or authenticate |
User Content (such as photos and images), including as provided in the Account Data we receive when you log into our platform | Service providers, analytics partners, and parties you authorize, access, or authenticate |
Other identifying information that you voluntarily choose to provide, including in the form of User Content, Feedback Data, Social Media Information | Service providers, analytics partners, and parties you authorize, access, or authenticate |
Geolocation data, including country or city information based on the IP address, or if you manually provide location information | Service providers, analytics partners, and parties you authorize, access, or authenticate |
| Professional or employment-related information, to process your job application | Service providers |
Some of the personal information described above may be deemed sensitive personal information under certain state privacy laws. We only collect such information for the purposes allowed by law or with your consent. We do not collect or process sensitive personal information with the purpose of inferring any characteristics about you and have not "sold" or "shared" (as those terms are defined under U.S. privacy laws) personal information. We also do not knowingly sell or share the personal information of individuals under the age of 13.
For more information on how your information is disclosed, please see Section 4 “Sharing of your personal information” above. As stated in Section 5 “Marketing” above, we do not share your personal information with third parties for their direct marketing purposes.
As stated in Section 7 “Retention of your personal information” above, we typically retain your personal information for the period necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
For details regarding the sources from which we obtain personal information, please see Section 2 “Collection of your personal information” above. We collect and use personal information for the business or commercial purposes described in Section 3 “How we use your personal information (our purposes)” above.
Your rights
In addition to the rights detailed above in Sections 10 and 11 (e.g., your right to access, correct, or update your personal information), depending on what U.S. privacy law applies to you and subject to certain exceptions, you may also have the following rights:
Exercising your rights: Some of these rights may be exercised in the xAI service but others you will need to submit a request to privacy@x.ai. Once you have submitted your request, we will respond within the time frame permitted by applicable privacy laws.
Verification: In order to protect your personal information, your ability to exercise some of the rights detailed in this Privacy Policy may be subject to your ability to verify that you are the person about whom your request pertains. For example, we may require you to verify your identity by validating your account credentials. If we suspect fraudulent or malicious activity, we may ask you to supply additional information to allow us to verify your identity.
Authorized Agents: To exercise your rights using an Authorized Agent (as defined under applicable law), you must provide your Authorized Agent with written permission to exercise your rights on your behalf, and we may request a copy of this written permission from your Authorized Agent when they make a request on your behalf. We reserve the right to deny a request from an Authorized Agent that does not submit proof that they have been authorized by you to act on your behalf.
Appeals: If we refuse to take action on a request within a reasonable period of time after receiving your request, you may appeal our decision by emailing us at privacy@x.ai. In such an appeal, you must (1) provide sufficient information to allow us to verify that you are the person about whom the original request pertains and to identify the original request, and (2) provide a description of the basis of your appeal. Please note that your appeal will be subject to your rights and obligations afforded to you under applicable law. We respond to all appeal requests as soon as we reasonably can, and no later than legally required.
Do Not Track: Please note that because the effect of "Do Not Track" signals remains unclear, and because there continues to be no consistent industry understanding of how to respond to such a signal, we do not alter our privacy practices when we detect a "Do Not Track" signal from your browser.
We may update our Privacy Policy from time to time. If we make any changes, we will post an amended version and change the "Last Updated" date above. Where appropriate, we may provide you with notice prior to the update taking effect, such as by posting a conspicuous notice on our website or by contacting you using the email address you provided. Please review this Privacy Policy periodically.
If you use the Service after any changes to the Privacy Policy have been posted, that means you agree to all the changes.
If you have any queries or complaints about our collection, use or storage of your personal information, or if you wish to exercise any of your rights in relation to your personal information, please contact privacy@x.ai or by mail using the following contact details:
Attn: Privacy Team X.AI LLC
In the EU: Name: Lionheart Squared (Europe) Ltd Email: xai@lionheartsquared.eu Post: Lionheart Squared (Europe) Ltd FAO x.ai 2 Pembroke House, Upper Pembroke Street 28-32 Dublin, D02 EK84, Republic of Ireland
In the UK: Name: Lionheart Squared Limited Email: xai@lionheartsquared.co.uk Post: Lionheart Squared Limited FAO x.ai 17 Glasshouse Studios, Fryern Court Road, Fordingbridge Hampshire, SP6 1QX United Kingdom
In Switzerland: Name: Lionheart Squared Switzerland SarL Email: xai@lionheartsquared.ch Post: Lionheart Squared Switzerland SarL FAO x.ai Blvd George Favon 43 CH-1204 Geneva
xAI LLC (@xAI) © 2024 All rights reserved.