Privacy Policy
Effective Date: November 18, 2025
Last Updated: November 18, 2025
1. Introduction
Welcome to Grok41 ("we," "our," or "us"). Grok41 is an innovative AI image and video generation platform powered by xAI's Grok 4.1 model, enabling users to create stunning AI-generated images and videos with next-generation quality, lightning-fast processing, and deep contextual understanding. We are committed to protecting your privacy and ensuring the security of your personal information.
This Privacy Policy explains:
- What information we collect and why
- How we use, store, and protect your data
- Your rights and choices regarding your information
- How we comply with GDPR, CCPA, and other privacy regulations
By using Grok41, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide to Us
Account Information
- Name, email address, and password
- Profile information (optional: profile picture, company name, industry)
- Payment information (processed securely through Stripe; we do not store credit card details)
User-Generated Content
- Images and videos you upload for processing or reference
- Prompts and generation parameters you use
- Generated images, videos, and AI-created content
- Comments, feedback, and communications with our support team
Generation Preferences
- Image generation settings and parameters
- Style preferences and editing choices
- Saved prompts and project configurations
2.2 Information We Collect Automatically
Usage Data
- Pages viewed, features used, and time spent on the platform
- Image and video generation requests and activities
- Button clicks, navigation patterns, and interaction data
Device and Technical Information
- IP address, browser type, and version
- Device type, operating system, and screen resolution
- Cookies and similar tracking technologies (see Section 6)
- Referral source and campaign tracking data
Performance Data
- Error logs and diagnostic information
- API response times and service performance metrics
- Feature adoption and engagement analytics
2.3 Information from Third Parties
Authentication Providers
- If you sign in using Google, GitHub, or other OAuth providers, we receive basic profile information (name, email, profile picture) as permitted by the provider
Payment Processors
- Payment confirmation and subscription status from Stripe
- We do not store your full credit card numbers
3. How We Use Your Information
We use the collected information for the following purposes:
3.1 Providing and Improving Our Services
- Account Management: Create and manage your account, authenticate your identity
- AI Processing: Process your prompts and generate AI images and videos using xAI's Grok 4.1 model
- Content Storage: Store and organize your uploaded images, videos, and generated content securely
- Platform Optimization: Improve AI accuracy, user interface, and feature performance
- Customer Support: Respond to your inquiries and provide technical assistance
3.2 Communication
- Service Updates: Send important notifications about service changes, maintenance, or security updates
- Educational Content: Share AI image and video generation tips, feature tutorials, and best practices (you can opt out)
- Marketing: Send promotional emails about new features or plans (with your consent; opt-out available)
3.3 Analytics and Research
- Usage Analytics: Understand how users interact with Grok41 to improve the platform
- A/B Testing: Test new features and design improvements
- Market Research: Anonymized data may be used for research on AI image and video generation usage (never shared without aggregation)
3.4 Legal and Security
- Fraud Prevention: Detect and prevent unauthorized access, abuse, or security breaches
- Legal Compliance: Comply with legal obligations, court orders, or government requests
- Terms Enforcement: Enforce our Terms of Service and protect user safety
4. AI Data Processing and Content Privacy
4.1 How We Process Your Content with AI
When you upload images/videos or request AI-generated content:
- Processing: Your content is sent to third-party AI providers (xAI's Grok 4.1, etc.) for processing
- Purpose Limitation: AI providers process your content solely to generate the requested output (image/video generation, editing, etc.)
- No Training: We have contractual agreements with AI providers that your content will not be used to train their models
- Temporary Storage: AI providers may temporarily cache your content for processing but must delete it afterward
4.2 Content Ownership
- You Own Your Content: You retain all intellectual property rights to the content you upload and create
- Generated Content: AI-generated content based on your inputs is also owned by you
- License to Us: You grant us a limited license to store, process, and display your content to provide our services
4.3 Content Security
- All uploaded files are encrypted at rest and in transit
- Access to your content is restricted to authorized personnel for support purposes only
- You can delete your content at any time (see Section 9)
5. Data Storage and Security
5.1 Where We Store Your Data
- Primary Servers: Hosted on secure cloud infrastructure (Supabase, AWS, or similar)
- Geographic Location: Data is primarily stored in the United States and European Union
- Backups: Regular encrypted backups are maintained for disaster recovery
5.2 Security Measures
We implement industry-standard security practices:
- Encryption: TLS/SSL encryption for data in transit; AES-256 encryption for data at rest
- Access Controls: Role-based access controls and multi-factor authentication for staff
- Monitoring: 24/7 security monitoring and intrusion detection systems
- Audits: Regular security audits and penetration testing
- Incident Response: Documented procedures for responding to data breaches
5.3 Data Retention
- Account Data: Retained as long as your account is active
- Brand Content: Retained until you delete it or close your account
- Usage Logs: Retained for 12 months for analytics and security purposes
- Backups: Deleted backups are purged within 90 days
6. Cookies and Tracking Technologies
6.1 Types of Cookies We Use
Essential Cookies (Required)
- Authentication tokens to keep you logged in
- Session management and security
Functional Cookies (Optional)
- Remember your preferences (theme, language)
- Save your last viewed projects or brand profiles
Analytics Cookies (Optional)
- Google Analytics to understand user behavior
- Performance monitoring (Vercel Analytics, Sentry)
Marketing Cookies (Optional, with consent)
- Track ad campaign effectiveness
- Retargeting and conversion tracking
6.2 Your Cookie Choices
You can control cookies through:
- Browser Settings: Most browsers allow you to block or delete cookies
- Cookie Banner: Manage your cookie preferences when you first visit the site
- Opt-Out Links:
- Google Analytics: https://tools.google.com/dlpage/gaoptout
7. Information Sharing and Disclosure
7.1 We Do Not Sell Your Data
We never sell, rent, or trade your personal information to third parties for marketing purposes.
7.2 When We Share Your Information
We may share your information only in the following circumstances:
Service Providers
- AI Providers: xAI's Grok 4.1 (for image generation only)
- Payment Processing: Stripe, PayPal (for billing and subscriptions)
- Cloud Hosting: Vercel, AWS (for infrastructure)
- Analytics: Google Analytics (for usage analytics)
- Email Services: SendGrid, Resend (for transactional emails)
All service providers are bound by strict data protection agreements.
Legal Requirements
- To comply with valid legal processes (subpoenas, court orders)
- To protect our rights, safety, or property
- To investigate fraud or security issues
Business Transfers
- In the event of a merger, acquisition, or sale of assets, your information may be transferred (you will be notified)
With Your Consent
- Any other sharing requires your explicit permission
8. International Data Transfers
Grok41 operates globally and may transfer your data across borders:
- EU to US Transfers: We comply with GDPR requirements using Standard Contractual Clauses (SCCs)
- Data Protection: All international transfers meet applicable data protection laws
- Your Rights: EU users retain all GDPR rights regardless of where data is processed
9. Your Rights and Choices
9.1 Access and Portability
- View Your Data: Access all personal information we hold about you
- Download Your Data: Export your generated images and account data in standard formats (JSON, CSV)
9.2 Correction and Update
- Edit Profile: Update your account information at any time
- Correct Inaccuracies: Request corrections to inaccurate data
9.3 Deletion (Right to be Forgotten)
- Delete Content: Remove individual generated images or uploaded content
- Close Account: Permanently delete your account and all associated data
- Automated Deletion: All data is removed within 30 days of account closure
9.4 Opt-Out and Restriction
- Marketing Emails: Unsubscribe from promotional emails (essential service emails cannot be disabled)
- Analytics: Opt out of analytics tracking (some functionality may be affected)
- AI Processing: Choose not to use AI features (limits platform functionality)
9.5 Object and Complain
- Object to Processing: Contest certain uses of your data
- File a Complaint: Contact your local data protection authority (see Section 13)
9.6 How to Exercise Your Rights
Email us at [email protected] with:
- Subject line: "Data Rights Request"
- Your account email address
- Specific request (access, deletion, correction, etc.)
- We will respond within 30 days (or as required by law)
10. Children's Privacy
Grok41 is not intended for children under 13 years old (or 16 in the EU).
- We do not knowingly collect data from children
- If we discover we have collected data from a child, we will delete it immediately
- Parents/guardians can contact us at [email protected] to request deletion
11. Third-Party Links and Services
Grok41 may contain links to third-party websites (e.g., social media platforms).
- We are not responsible for the privacy practices of external sites
- We encourage you to review their privacy policies before providing information
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically:
- Notification: We will notify you via email or prominent website notice for material changes
- Effective Date: Changes take effect on the date specified at the top of this policy
- Continued Use: Your continued use after changes constitutes acceptance
Version History:
- Version 1.1 (November 18, 2025): Updated for video generation capabilities and brand consistency
- Version 1.0 (October 29, 2025): Initial policy
13. Contact Us
Data Protection Officer (DPO)
Email: [email protected]
Response Time: Within 30 days
General Inquiries
Website: https://grok41.com
Support Email: [email protected]
Legal Address
Grok41
[Street Address]
[City, State, ZIP Code]
[Country]
Data Protection Authorities
EU Users: Contact your local supervisory authority:
California Users: Contact the California Attorney General:
- Website: https://oag.ca.gov/privacy
14. Legal Bases for Processing (GDPR)
For EU users, we process your data under the following legal bases:
- Contract Performance: To provide services you've requested
- Legitimate Interest: For analytics, security, and service improvement
- Consent: For marketing communications and optional tracking (you can withdraw anytime)
- Legal Obligation: To comply with laws and regulations
15. California Privacy Rights (CCPA)
California residents have additional rights:
- Right to Know: What personal information we collect and how it's used
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt out of the "sale" of personal information (note: we do not sell data)
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights
How to Exercise: Email [email protected] with "CCPA Request" in the subject line.
Thank you for trusting Grok41 with your AI image generation needs. Your privacy is our priority, and we are committed to protecting your data while providing you with powerful AI image generation capabilities.
Last Reviewed: November 18, 2025