data report card

Data Report Card · SpaceXAI (Grok)

SpaceXAI (Grok) Data Report Card

AI assistant · SpaceXAI LLC (formerly xAI)
Data
Practices
2Access1Portability1Friction2Deletion2Sells1Trains AI
=
B
9/12
Agent
Readiness
2Access 1Portability 0API access
=
C
3/6

Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?

Help me make a request →
Reviewed Jun 2026 · policies are checked weekly for changes  ·  stated — every cell is read from SpaceXAI (Grok)'s published policy; none has been tested (run by us) yet.
2Accessstated
SpaceXAI’s policy states you may request to access, correct, update or delete your personal information; some rights are exercisable in the Service, others via the privacy portal (x.ai/privacy-portal).
SpaceXAI Privacy Policy — §9 · accessed Jun 2026 ↗
1Portabilitystated
Rights requests go through the privacy portal, but the policy no longer names portability and SpaceXAI does not document structured machine-readable export formats; an access request returns a copy of your data.
SpaceXAI Privacy Policy — §9 · accessed Jun 2026 ↗
1Frictionstated
Some rights are exercisable in the Service; others require a portal request including your full legal name, email address, and city, state and country of residence, subject to identity verification — friction sits at the mediated-request level rather than a one-click control.
SpaceXAI Privacy Policy — §9 · accessed Jun 2026 ↗
2Deletionstated
SpaceXAI states that if you delete any or all of your conversations, or your account, it "will delete the data within 30 days" unless retention is necessary for legal, compliance, or safety purposes; Private Chat conversations are deleted within 30 days automatically.
SpaceXAI Privacy Policy — retention · accessed Jun 2026 ↗
2Sells / sharesstated
SpaceXAI’s Consumer FAQs state: "We do not sell your data or share it with third parties for marketing or advertising purposes." The policy itself lists targeted advertising among its uses and the site’s cookie banner describes ad-partner targeting cookies, so the plain no-sell commitment now rests on the FAQ.
SpaceXAI — Consumer FAQs · accessed Jun 2026 ↗
1Trains AIstated
Grok trains on your conversations by default, with a documented opt-out — Settings > Data Controls > "Improve the model" in the mobile app, Settings > Data > "Improve the Model" on grok.com — and Private Chat content is excluded from training. Training on X posts is now X Corp’s sharing decision under X’s own policy.
SpaceXAI — Consumer FAQs · accessed Jun 2026 ↗
0API access — feeds Agent Readiness, not the /12stated
xAI offers a developer API at api.x.ai to call Grok and its models, but there is no consumer-grantable OAuth API for an agent to fetch your own personal account data; the self-data path is the manual privacy-portal request, so agent access is scored at the lowest level.
xAI — API documentation (developer-facing) · accessed Jun 2026 ↗
Re-verified 2026-08-30 against the SpaceXAI Privacy Policy, effective Aug 24, 2026 — xAI renamed itself SpaceXAI and replaced its April 2026 policy (event ev-2026-0001). The new policy is scoped to the Grok apps and grok.com; Grok on X is governed by X’s own policy, and SpaceXAI states it is a separate company from X Corp. The plain no-sell statement and the model-training controls are documented in the Consumer FAQs rather than the policy itself. All cells "stated", not tested.

Events

Breaches, policy changes, and export-format changes we’ve recorded at SpaceXAI (Grok) — other parties’ actions, alongside the enforcement record above. An event never changes a grade by itself. All events →

22 Aug 2026xAI renamed itself SpaceXAI and published a new privacy policy, effective August 24, 2026.policy change
On the events page →

Grade history

Every change to this company’s grade since it was first published, and why. All grade changes →

30 Aug 2026Deletion12score

The SpaceXAI policy (effective Aug 24, 2026; event ev-2026-0001) states deleted conversations and deleted accounts are removed "within 30 days" unless retention is required for legal, compliance, or safety purposes, and Private Chat auto-deletes within 30 days. A stated post-deletion purge timeline with clear scope is the distinction that earns a 2 — the same standard OpenAI and Anthropic meet with their stated 30-day purges.

SpaceXAI Privacy Policy — retention ↗Followed a published event →
30 Aug 2026Trains AI on your data01score

The 0 rested on the April policy’s statement that xAI "by default uses your X posts, profile data, and Grok conversations" to train. The SpaceXAI policy (event ev-2026-0001) drops X data from scope — SpaceXAI states it is a separate company from X Corp, and Grok on X is governed by X’s own policy. What remains is training on your Grok conversations by default with a documented opt-out ("Improve the model" in Settings, Private Chat excluded) — the same trains-by-default-with-opt-out shape that scores OpenAI and Anthropic a 1. X’s own sharing of public posts stays scored on the X report card, where it keeps its 0.

SpaceXAI — Consumer FAQs ↗Followed a published event →
30 Aug 2026Sells / shares your datasource

The April policy’s no-sell sentence is not in the SpaceXAI policy; the plain commitment now lives in the Consumer FAQs: "We do not sell your data or share it with third parties for marketing or advertising purposes." The score holds at 2 on that statement. Noted in the cell: the policy lists targeted advertising among its uses and the site’s cookie banner describes ad-partner targeting cookies — a tension the FAQ statement currently outweighs.

SpaceXAI — Consumer FAQs ↗Followed a published event →
Previously: xAI Privacy Policy (April 2026)
30 Aug 2026Accessnote

Re-verified against the SpaceXAI policy: the privacy portal and the access, correction, and deletion rights carry over, and some rights are now exercisable in the Service. Score unchanged; Portability and Friction & speed cells re-worded the same day for the same reason — the policy no longer names portability, and requests still require full legal name, location, and identity verification.

SpaceXAI Privacy Policy — §9 ↗Followed a published event →

How to request your data from SpaceXAI (Grok)

  1. Go to https://x.ai/privacy-portal/ — SpaceXAI (Grok)'s data-request entry point.
  2. Privacy portal (x.ai/privacy-portal) for access / correction / deletion; training opt-out at Grok Settings -> Data Controls -> "Improve the model".
  3. Expected wait: requests via privacy portal; deleted conversations and accounts removed within 30 days subject to legal, compliance, or safety retention — SpaceXAI (Grok)'s stated turnaround (we haven't independently timed a request yet).
  4. No self-serve option, or want a formal request? Contact SpaceXAI — Privacy / Data Requests: mailto:privacy@x.ai.

These steps reflect SpaceXAI (Grok)'s documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.