隐私

Grok Desk is made by [Legal entity - to be finalized before launch], [City, Country - to be finalized before launch]. If you have any question about your data, or want us to delete it, email [email protected]. “We” and “us” below mean that entity.

Grok Desk itself is free. If you choose to optionally support the project, we process that payment through Stripe; your card details go straight to Stripe and never touch our servers. We receive your email to deliver receipts, portal recovery links, and transactional notices through Resend. If you join the remote waitlist, your email is stored with Resend until you unsubscribe.

Installer artifact downloads may use short-lived, single-use download grants when delivered through this portal - permanent public installer URLs are not required for open-source builds.

If you write to support, we keep what you send - your email, an optional name, an optional Telegram or WhatsApp handle, and your message - only to answer you.

What we deliberately do not do: no cookies, no analytics, no trackers, no advertising pixels, and no sale or sharing of personal data.

The open-source desktop app does not require a product key. If you use a legacy paid build that still performs license activation, we may process device metadata you send at activation and refresh - a stable device identifier, public device key thumbprint, device name, platform, architecture, and Desk version. We do not receive product keys over the network for normal lease refresh.

Legacy portal paths may perform entitlement and update checks so we can confirm compatible releases. Those checks carry identifiers, not your local task content. Open-source builds do not impose seat limits.

Protected artifact downloads (installers and update packages) may be logged with safe entitlement and artifact identifiers so we can debug delivery - never with product keys or magic-link tokens.

Your tasks, chats, memory, artifacts, schedules, and logs live in a database on your machine (under your system’s application-data folder), not on our servers.

Secrets (such as connector credentials) are stored in an encrypted local vault under the app’s data directory - not in the OS keychain for product credentials. Your SuperGrok session stays on your machine and is sent only to SuperGrok to run your work.

Screenshots taken while you grant desktop control stay in the local task stream on your machine. To run your tasks, the app talks to SuperGrok / xAI - content you put into a task is processed by SuperGrok under xAI’s terms - and to nothing else by default. Crash reporting is off unless you turn it on.

The Remote app (when offered) has no account and no registration. You pair it to your desktop by scanning a QR code; the pairing keys are stored in your phone’s secure store and your desktop’s local vault. Because there is no account, there is nothing to delete on our side - to remove a device, unpair it from the app’s settings.

All traffic between your phone and your desktop is end-to-end encrypted. Our relay only forwards ciphertext it cannot read. The camera is used solely while scanning the pairing code, and is never stored. Push notifications carry no task content beyond what you configure.

Data collected by us through the Remote app: none.

Concretely, the Remote app does not collect your name, contacts, location, health or fitness data, financial information, photos, videos, audio, messages, or browsing history - none of Apple’s data categories apply to it.

The short list of services that help us deliver the website and optional support flows:

If you made an optional support payment, Stripe keeps that record for as long as tax and accounting law requires. We keep support messages as long as we need them to help you, and delete them on request. We keep audit records of portal, download, and operator actions for security and dispute resolution, with retention limited to what those purposes require.

Your waitlist entry stays until you unsubscribe. Your local app data is deleted by you - clear it from the app’s settings, or uninstall the app and remove its data folder. Because it lives on your machine, we cannot delete it for you.

To request deletion of account, support, or waitlist data we hold, email [email protected].

For the little we hold - optional support email, device metadata tied to any legacy activations, support threads, audit records, and a waitlist entry - you can ask us to give you a copy, correct it, delete it, or hand it to you in a portable form. Email [email protected] and we will act on it.

Our legal bases are: performing a contract with you when you request support or optional paid support, our legitimate interest in preventing fraud and securing the service, and your consent (the waitlist, which you can withdraw at any time).

Stripe and Resend may process your data in the regions where they operate, under the standard contractual clauses they maintain. We share nothing else internationally.

If we change this policy, we will update the effective date above and, for anything material, note what changed. Continued use after a change means you accept the updated policy.