Grok Bot Terms — September 3, 2026

Cursor · agreement dated October 12, 2026 · Official agreement

Read the agreement

2 of 24 cards in Retention & Deletion

Retention & Deletion · Company practice

Grok Bot may keep Customer Data, files, sessions, credentials, memory and routines in a persistent cloud environment

Grok Bot may retain Customer Data, files, browser sessions, credentials, memory and routines in a persistent cloud environment. Customer Data is defined in these Terms as including inputs and other content submitted or made available by or for Customer.

Details
Who
Grok Bot
What it covers
Customer Data, files, browser sessions, credentials, memory and routines

Supporting quotations

Grok Bot may retain Customer Data, files, browser sessions, credentials, memory, and routines in a persistent cloud environment.
“Customer Data” includes inputs, and other content submitted or made available by or for Customer.

Qualifications & exceptions

  • The text says “may retain”; it does not say that all listed items are always kept.

Not stated here

  • The Terms give no retention period and do not say where the cloud environment is located or who can access it.
  • The text does not say whether Provider ever deletes the retained items on its own.
Also annotated in the same passage (3)

Retention & Deletion · Restriction or exception

Customer must delete or disable bots, remove data, revoke access and disable routines when no longer needed

Customer is responsible for deleting or disabling bots, removing data, revoking access and disabling routines when they are no longer required. The previous paragraph of the same section says deleting a Bot may not delete the shared files, sessions, credentials or routines.

Details
Who
Customer
Condition
When deleting, disabling, removing or revoking is no longer required

Supporting quotations

Customer is responsible for deleting or disabling bots, removing data, revoking access, and disabling routines when no longer required.

Qualifications & exceptions

  • The duty applies “when no longer required.”

Not stated here

  • The Terms do not say how Customer removes shared data or revokes access, or who decides when something is “no longer required.”
Also annotated in the same passage (2)