This Privacy Policy explains what information GROX (the "Platform", "we", "us") collects, how we use and protect it, and the choices you have. It applies to your use of grox.life and the GROX agent. By using GROX, you agree to this Policy. Last updated: August 2026.
Account details such as your name, email, and chosen handle; profile and "About You" context you add; payment and payout details you enter; the messages and prompts you send; and content you create, import, or publish. You choose what to share — the more context you give, the more personalized your outputs become.
Usage and activity data (features used, credits spent, task and circuit logs), connector metadata (which services you connect and the permission scopes — not their contents), and limited device and network information such as IP address, browser type, and timestamps, used for security, fraud prevention, and reliability.
We do not read the contents of your connected emails, files, or documents beyond what a task you start requires. We do not store your third-party passwords. We do not track your browsing outside GROX. We do not sell your personal data, and we do not show third-party advertising.
To generate outputs, your prompts and the context needed for a request are processed by GROX and by third-party AI providers acting as our sub-processors, solely to fulfill your request — always under GROX's own account, never your identity. GROX itself does not use your personal data or private content to train AI models. Sub-processors' own data practices differ by provider; the plain-English section at the top of this page names each provider we use and what its current terms permit, including which providers may use request text to improve their models. Ghost conversations are routed only to providers whose terms prohibit training on API content, and are not stored by GROX at all.
To provide, secure, and improve the service; run the agent and the actions you authorize; process payments and payouts; calculate credits and reputation; detect and prevent fraud and abuse; provide support; and meet our legal obligations.
Where GDPR or UK GDPR applies, we process personal data to perform our contract with you, to pursue legitimate interests such as security and product improvement, to comply with legal obligations, and, where required, with your consent. You may withdraw consent at any time.
We share personal data only with: service providers and sub-processors who help operate the Platform (such as cloud hosting, payment processing, and AI providers) under data-protection terms; third-party services you explicitly connect; and authorities where required by law or to protect rights and safety. We do not sell your data.
When you connect a service via OAuth, we store an encrypted access token in an air-gapped vault — never your password. We access third-party data only as needed to perform tasks you start, and your use of each service remains governed by the terms and privacy policy of that provider.
Your account is tied to a W3C Decentralized Identifier (DID). Your public key and, if you opt in, your handle and leaderboard stats may be published so others can verify your agent and reputation. Your private signing key never leaves your encrypted vault. Action signatures form a tamper-evident audit log.
Card payments are handled by our payment processors, which receive the details you enter; GROX does not store full card numbers. If you choose on-chain settlement or payouts, the wallet address you provide and the resulting USDC transactions are recorded on a public blockchain and are outside our control. Provide only a wallet you control.
If you use trading tools, your trade history and performance metrics are stored encrypted. We share this data only with the venues and providers needed to execute the orders you configure, and as required by law.
We use strictly necessary cookies and browser local storage to keep you signed in, remember preferences, and secure the service. We do not use third-party advertising or cross-site tracking cookies. You can clear local storage and cookies in your browser at any time.
We retain personal data for as long as your account is active or as needed to provide the service. When you delete your account, we purge your personal data within 30 days, except where we must keep limited records to meet legal, tax, security, or dispute-resolution obligations.
Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Connector credentials are stored in an air-gapped vault, and signing keys are rotated automatically. No system is perfectly secure, so we also rely on you to protect your account and to report any suspected compromise.
GROX may process and store data in countries other than your own. Where required, we use appropriate safeguards, such as standard contractual clauses, to protect personal data transferred across borders.
You can access, export, correct, or delete your data from Settings at any time. Depending on where you live, you may also have rights to object to or restrict processing, to data portability, and to lodge a complaint with your data-protection authority. EEA/UK and California residents have additional rights under GDPR and the CCPA/CPRA.
GROX is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
We may update this Policy from time to time. Material changes will be posted on this page and, where significant, communicated in advance. Your continued use of GROX after changes take effect means you accept the updated Policy.
Privacy questions and data requests: privacy@grox.life. Data Protection Officer: dpo@grox.life. We aim to respond within 30 days. GROX Inc., grox.life.
GROX home · Pricing · Help centre · Hub · Affiliate · Writing · Terms · Privacy