Is Grok Bot safe for business data?
Grok Bot follows your Cursor account’s Privacy Mode: with it on, Cursor says your data is not used for training, and it is on by default for teams; the pages we read do not say the default for personal accounts.
Training, plan by plan
- Depends: Personal account: not stated: used only if Privacy Mode is off.
- Not used for training: Teams and Enterprise: not used by default.
What it does with your data
| Question | Personal account | Teams and Enterprise |
|---|---|---|
| Trains on your data by default? | Not stated for personal accounts. Cursor says customer data is not used for training while Privacy Mode is on, and may be used to train its models when it is off. The pages we read do not say which setting a personal account starts with. Not confirmed · page checked: cursor.com, October 23, 2026 | No, by default. Privacy Mode is on by default for team members and admins can enforce it. With it on, Cursor says customer data is not used for training. Read on October 23, 2026 · source: cursor.com |
| How long chats are kept | Not stated. Your cloud computer keeps files and browser sessions across sessions, and SpaceXSI says backend retention follows Cursor’s terms, but the pages we read give no period for conversations. Not confirmed · page checked: docs.x.ai, October 23, 2026 | Files and sign-ins stay on each member’s cloud computer until removed. Under Cursor’s data processing agreement, data is deleted or returned within 30 days of written direction after the service ends. There is no per-organization retention policy, and the pages we read give no period for conversations while you use the service. Read on October 23, 2026 · source: cursor.com |
| Who can read them | Your own account. Every Bot on your account uses one cloud computer assigned to you, and the Bots share its files, browser sessions, and logins. The pages we read do not say when staff may review conversations. Read on October 23, 2026 · source: docs.x.ai | Each member’s Bots act as that member and can never hold more access than that person. On Enterprise, admins can turn on Action Recording, off by default, which keeps a record of Bot actions for 90 days. The pages we read do not say whether admins can read conversations. Read on October 23, 2026 · source: cursor.com |
| Where data is stored | In the United States. Cursor says Grok Bot’s cloud computers run in the US today, and that this is not a written data residency commitment. Read on October 23, 2026 · source: cursor.com | In the United States. Cursor says Grok Bot’s cloud computers run in the US today, and that this is not a written data residency commitment. Read on October 23, 2026 · source: cursor.com |
| How to delete | Deleting a Bot removes its profile, conversation, and routines. Files and sign-ins on the shared cloud computer may remain, so remove those yourself. Read on October 23, 2026 · source: docs.x.ai | Members delete Bots, routines, connected apps, and files themselves. To end someone’s access, remove them from the team or turn off Grok Bot for their group, and revoke their sessions in your identity provider. Read on October 23, 2026 · source: cursor.com |
How to turn training off
- Check that Privacy Mode is on. For teams it is on by default, and admins can enforce it for everyone from cursor.com/dashboard. Source: cursor.com
- In Settings > Computer > Your computer, set “Execution on this computer” to “Never allow” unless a Bot has a specific reason to work on local files. Source: cursor.com
- When a project ends, delete its routines, sign out of websites on the cloud computer, remove connected apps, and remove sensitive files from /workspace. Deleting a Bot doesn’t remove computer files or browser sessions. Source: cursor.com
Safer setup for a small team
Use a Teams or Enterprise account with Privacy Mode enforced by an admin, and set “Execution on this computer” to “Never allow” unless a Bot needs your local files.
Plan to approve: Grok Bot on a Teams or Enterprise account
Setting to check: Privacy Mode, enforced by an admin
A line for your AI policy: Staff use Grok Bot only on our company Teams or Enterprise account, with Privacy Mode enforced. Customer data never goes into a personal account.
Want this in your team’s AI policy? The SafeStart kit, a plain-English AI policy and training for small teams, is coming soon.
Questions about your own setup? Write to hello@terrapilgrim.org.
What changed
No changes recorded since we first published this page on October 23, 2026. Every change goes in the change log.
Sources (5)
- cursor.com/data-use · read on October 23, 2026
We could not confirm an answer on this page.
- docs.x.ai/grok-bot/bots · read on October 23, 2026
“Deleting a Bot removes its active profile, conversation, and routines from Grok Bot.”
- docs.x.ai/grok-bot/faq · read on October 23, 2026
“Every Bot on your account uses one persistent cloud computer.”
- cursor.com/docs/grok-bot/security · read on October 23, 2026
“Grok Bot computers run in the United States today.”
- cursor.com/help/security-and-privacy/privacy · read on October 23, 2026
“For teams, Privacy Mode is enabled by default for all team members.”
Related tools
- 2 plans checked
Manus
Manus
- Used for training: Personal (free and paid): used, de-identified; opt-out by email in some places.
- Not used for training: Team: not used.
Checked October 24, 2026 - 2 plans checked
Claude
Anthropic
- Not used for training: Free, Pro, and Max: not used, unless you allow it.
- Not used for training: Team and Enterprise: not used by default.
Checked October 23, 2026 - 2 plans checked
Microsoft Copilot
Microsoft
- Depends: Copilot app, personal Microsoft account: your choice: you can opt out.
- Not used for training: Microsoft 365 Copilot (work account): not used.
Checked October 23, 2026 - 1 plan checked
Zoom AI Companion
Zoom
- Not used for training: Zoom Workplace accounts: not used.
Checked October 23, 2026 - 2 plans checked
Fireflies
Fireflies.ai
- Not used for training: Plans other than Enterprise: not used.
- Not used for training: Enterprise: not used.
Checked October 23, 2026 - 2 plans checked
Read AI
Read AI
- Not used for training: Accounts not on Enterprise+: not used, unless you opt in.
- Not used for training: Enterprise+: not used, unless a user opts in.
Checked October 23, 2026
Keep browsing
Get the monthly changes
One email each month: what changed, in plain English.
Never shared. Unsubscribe anytime.