xAI Says Grok Can Process Connected Account Data Beyond Public X Posts

Grok’s data access is not limited to public X posts

xAI says its Grok chatbot can process more than publicly visible posts on X when users provide information directly, sign in through X, or connect third-party services.

According to xAI’s Privacy Policy, the company collects content people submit to its products, including prompts and other inputs. The policy also states that, when a person logs in through X and directs the sharing of information, xAI may receive the user’s public X profile, account details and Grok-on-X conversation history.

That distinction matters because public X posts are only one potential source of information. A user’s interactions with Grok, as well as information shared through an X login, may be processed under xAI’s privacy terms even where that material is not publicly visible on X.

Optional Connectors can link external services

xAI’s Connectors announcement describes optional integrations available for Grok on the web, iOS and Android. The company says these user-enabled Connectors can allow Grok to read or act on information in linked third-party services.

The services named by xAI include Outlook, OneDrive personal and shared files, Google Workspace, Notion and GitHub repositories. Access depends on a user linking an account and granting the permissions requested by the relevant service.

The information available through a Connector can therefore be broader than information available on the open web. A connected Google Workspace or OneDrive account may contain private documents, while a GitHub connection may make repositories available to the account accessible within the scope of approved permissions. xAI’s announcement does not suggest that every Grok user automatically grants such access; the feature is presented as optional and user-enabled.

Public internet data is also part of xAI’s training policy

xAI’s Privacy Policy separately says that it trains its models using publicly available internet data. Public X posts may fall within that category of online material, but the policy does not describe Grok as operating only on public X content.

The use of publicly accessible X data for AI development has drawn regulatory attention. The Associated Press reported that Ireland’s Data Protection Commission opened an inquiry into whether personal data in publicly accessible X posts had been lawfully processed to train Grok’s large language models.

What users can review

For users, the important distinction is between four categories: public internet data, content entered directly into Grok, information shared through an X login, and data made available through optional connected services.

Avoiding external integrations limits one route through which Grok can access account-held material. Users considering Connectors can review the permissions requested during account linking, while xAI’s Privacy Policy provides the broader terms governing prompts, account-linked information and conversation history. The scope of access ultimately varies with the service connected and the permissions a user authorizes.