Data Report Card · xAI (Grok)
xAI (Grok) Data Report Card
AI assistant · xAI Corp.
Data
Practices
Practices
2Access1Portability1Friction1Deletion2Sells0Trains AI
=
C
7/12
Agent
Readiness
Readiness
2Access
1Portability
0API access
=
C
3/6
Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?
Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from xAI (Grok)'s published policy; none has been tested (run by us) yet.
2Accessstated
xAI provides a privacy portal (x.ai privacy-portal) through which you can submit access, deletion, and portability requests for the personal data it holds.
xAI — Privacy Policy / privacy portal, corroborated via TrustScan · accessed Jun 2026 ↗1Portabilitystated
Requests go through the privacy portal, but xAI does not document multiple confirmed structured machine-readable export formats for a self-serve portable download, so portability is scored at the single-format level.
xAI — Privacy Policy (right to portability) · accessed Jun 2026 ↗1Frictionstated
Rights are exercised through a dedicated privacy portal and email (privacy@x.ai in the EU) rather than a one-click in-product control, placing friction at the moderate level.
xAI — Privacy Policy (exercising your rights) · accessed Jun 2026 ↗1Deletionstated
xAI states deletion requests are queued for removal within about 30 days subject to retention exceptions, and Grok Imagine generations shared via public URLs can persist after account deletion, so deletion is scored at the partial level.
xAI — Privacy Policy (data retention), corroborated via Anonyome · accessed Jun 2026 ↗2Sells / sharesstated
xAI states it "does not sell personal information, use it for marketing, or share it for targeted or cross-contextual advertising" and "will not 'sell' or 'share' Customer Personal Data (as defined by the CCPA)."
xAI — Privacy Policy (no sale or sharing), corroborated via meprism · accessed Jun 2026 ↗0Trains AIstated
xAI states that "by default, xAI uses your X posts, profile data, and Grok conversations to train its AI models." Opting out requires changing Grok Settings -> Privacy -> Data Controls (or emailing privacy@x.ai in the EU), so default-on training use is scored at the lowest level.
xAI — Privacy Policy (training by default), corroborated via TrustScan · accessed Jun 2026 ↗0API access — feeds Agent Readiness, not the /12stated
xAI offers a developer API at api.x.ai to call Grok and its models, but there is no consumer-grantable OAuth API for an agent to fetch your own personal account data; the self-data path is the manual privacy-portal request, so agent access is scored at the lowest level.
xAI — API documentation (developer-facing) · accessed Jun 2026 ↗Reviewed Jun 2026. xAI's privacy policy and privacy portal returned 403 to automated fetches; the data-rights and training mechanics were corroborated through named third-party write-ups (Anonyome, TrustScan, meprism) quoting the policy verbatim. xAI trains Grok on X posts and conversations by default, which is the load-bearing cell.
How to request your data from xAI (Grok)
- Go to https://x.ai/legal/privacy-policy — xAI (Grok)'s data-request entry point.
- Privacy portal (x.ai privacy-portal) for access / deletion / portability; opt out at Grok Settings -> Privacy -> Data Controls.
- Expected wait: requests via privacy portal; deletions queued for removal within about 30 days subject to retention exceptions — xAI (Grok)'s stated turnaround (we haven't independently timed a request yet).
- No self-serve option, or want a formal request? Contact xAI — Privacy / Data Requests: mailto:privacy@x.ai.
These steps reflect xAI (Grok)'s documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.