Grammarly safety profile

What it does with your data

Grammarly may use what staff type or paste into it to train its AI models. Whether it does depends on the account. Grammarly calls this setting Product Improvement and Training.

On Grammarly Free, Premium and single-user Pro accounts, the setting is on by default, and this includes content processed by Grammarly Go. On multi-user team accounts bought on the website, it also starts on, but an admin can switch it off for everyone. On Enterprise accounts, Pro and Business plans bought through the Sales team, and all Education accounts, it is off by default.

Even with the setting off, Grammarly may still collect non-content data such as writing statistics and use it for product improvement and training. Grammarly says the AI service providers it uses are not allowed to train their models on customer content. The vendor pages checked do not mention human review of content.

Documents saved in the Grammarly Editor stay until the user deletes them or the account. Other personal data is kept as long as Grammarly considers necessary, and the pages checked state no fixed period.

Settings to change first

Turn training off before anyone uses Grammarly for work. Where the toggle sits depends on the account:

1. Free and Premium accounts: open the privacy page in the security area of your Grammarly account and click the “Product Improvement and Training” toggle.
2. Single-user Pro accounts: open the data settings page in the admin area of your account and click the same toggle.
3. Multi-user Pro accounts bought on the website: use the same data settings page and toggle. Only an admin can change it.
4. Tailored assistance: if you do not want Grammarly storing data to personalize suggestions, turn it off on the Feature customization page. Grammarly says that stored data is deleted when you opt out.

Accounts moved from Enterprise or another Sales-purchased plan to another paid plan keep training off and show no toggle. The exact page addresses are in this profile’s opt-out details.

Free and paid tiers

With Grammarly, the split is less about free versus paid and more about who bought the account and how:

• Free, Premium and single-user Pro: training is on by default, and each user controls it.
• Multi-user accounts bought on the website: training is on by default, and the admin controls it for the organization.
• Enterprise, Pro and Business bought through Sales, and all Education accounts: training is off by default.

So paying for Premium does not by itself keep content out of training. If someone leaves a team account, they keep the team’s setting and can then change it. For Sales-purchased and Education accounts, Grammarly says existing contracts and special privacy agreements, such as those under HIPAA, are still honored. The privacy policy does not cover content in organization-managed accounts. That content falls under the organization’s own contract and data protection terms.

Admin controls

On Grammarly Pro accounts with more than one user, only administrators can change the training control. On team accounts bought on the website, an admin can opt the whole organization out of training. New members of Business and Education team accounts take on the admin’s setting automatically. In organization-managed accounts, the organization can access and control members’ accounts, and Grammarly may share a member’s email address or usage information with admins.

Grammarly’s compliance page lists SOC 2 (Type 2), SOC 3, ISO/IEC 27001:2022, ISO/IEC 27018:2019, ISO/IEC 42001:2023, ISO/IEC 27017:2015 and ISO/IEC 27701:2019. The SOC 3 report is public. Other audit reports are available by contacting the sales team. The vendor pages checked do not cover single sign-on or user provisioning.

Using it with donor and client data

For donor work, use an account where training is off by default: an Enterprise plan, or Pro or Business bought through Grammarly’s Sales team. If you buy a team plan on the website, have the admin turn training off for the organization on day one. Do not let staff use personal Free or Premium accounts for work writing.

Even with training off, never paste in:

• donor names alongside gift amounts or giving history
• client case notes
• health details or payment card numbers

Grammarly says Protected Health Information should not be processed without a current Business Associate Agreement. Data is stored in US data centers, and the pages checked describe no way to choose a region. This matters if you hold data on people in Europe or the UK. Before staff use it with donor data, get in writing from Grammarly how long content is kept, since the pages checked state no fixed period.

Questions people ask

Does Grammarly train on what our staff write?

It depends on the account. Free, Premium, single-user Pro and website-bought team accounts start with training on. Enterprise, Sales-purchased and Education accounts start with it off.

If we turn training off, is nothing collected?

No. Grammarly says non-content data such as writing statistics may still be collected and used for product improvement and training. Turning the setting off stops your written content from being used to train models.

Where is our data stored?

Grammarly says data is stored in US-based data centers. The pages checked do not describe a way to choose a region, and data may be processed outside your country.