Grok Holds Your Conversations Indefinitely and Hands Them to Nobody

Section 5 of the xAI Privacy Policy is the whole rule, and reads simply enough. If you choose to delete any or all of your conversations, or if you choose to delete your account, xAI will delete the data within 30 days, unless retaining the data is necessary for legal, compliance or safety purposes.

The Consumer FAQs, dated 12 May 2025, say the same thing from the other end. After you indicate that you want your data deleted, removal from xAI systems takes up to 30 days.

Both sentences are built around a person who is alive and pressing a button. The event that eventually reaches every account holder does not appear in the policy anywhere. Not as a trigger, not as an exception, not even as a line saying there is no process.

The mechanics, plainly, because most writing on this subject goes straight to feeling.

• When you die, your Grok conversations stay where they are. The clock starts on a request, never on a death: under the xAI Privacy Policy effective 4 April 2026, xAI deletes conversation data within 30 days of you deleting conversations or deleting your account.

• An account nobody touches keeps everything. xAI publishes no inactivity deletion policy for consumer accounts, and its Consumer FAQs say you can keep your data on your xAI account for as long as you wish.

• xAI operates no legacy contact and no deceased-user process. There is no next-of-kin route and no published position on death at all.

• Grok inside X runs under X, not under xAI. The xAI policy says use of Grok on the X platform is governed by the X Privacy Policy and X Terms. X will deactivate an account on a verified request with a death certificate and requester identification, and grants account access to nobody.

• Four things extend the 30 days: a legal obligation such as a court order, an open request or complaint, protecting the safety, security and integrity of the service, and live litigation or a regulatory matter.

• De-identified data is not on the clock at all. The FAQs carve out conversations that have been de-identified or pseudoanonymised and disassociated from your account.

• The published rights process cannot be operated by your executor. Access runs through validating your own account credentials, or through an Authorized Agent holding written permission signed by you.

That sixth line changes what the 30 days is a promise about, and it sits only in the FAQs rather than in the policy. Data cut loose from your name is on no clock at all. The 30 days covers your account rather than every sentence you ever typed into the box.

Private Chat, the ghost icon in the top right, is the same rule applied in advance. Those conversations stay out of your history, are not used for model training, and are deleted within 30 days, subject to the same legal, compliance and safety exceptions. Private is a retention setting. Private is not a shredder.

Grok lives in two places and answers to two companies.

There is the one inside X, behind an icon in an app you already had open, reached for when a contract clause needs explaining late at night. Then there is grok.com and the standalone app, where you sign in with X, Google or Apple, and where the history usually reaches back further than anybody expects.

xAI states plainly that it is a separate company from X Corp, and its Privacy Policy says use of Grok on the X platform is governed by the X Privacy Policy and X Terms rather than by xAI's. The Consumer FAQs repeat the split and send X users to the X Help Center. Most people who use Grok have used both surfaces and never felt the line under their thumb.

Then open the document you were just sent to. The X Privacy Policy effective 15 January 2026 does not describe Grok anywhere in its text. The only appearance of the word on that page is a footer link inviting you to try grok.com, and "xAI" does not appear on the page at all (checked 30 July 2026). One company points you at another company's policy, and that policy does not mention the product you were asking about.

X does publish a deceased-user process, and deserves the credit for having one. A family member or authorised person submits a death certificate and their own identification, and X will deactivate the account. The same article is explicit that account access is never provided to anyone. So the strongest thing a person who loves you can obtain is the removal of the account, unread.

For the account side of that left-hand column, the profile rather than the assistant sitting inside it, the closest published comparison is what happens to your Facebook account when you die, where memorialisation and a legacy contact do exist and still stop short of the chat data.

If you came here to get into a dead person's Grok account, the answer is no, and no page written by anybody changes that answer. Better to have it in the first minute than after a week of support tickets.

The barrier is not a refusal. Nobody at xAI has slammed a door on a grieving family. The mechanism xAI publishes simply cannot be operated by a person who has died.

Two routes exist on paper. The first is an Authorized Agent. The policy says you must provide your Authorized Agent with written permission to exercise your rights on your behalf, and that xAI may request a copy of that written permission. Permission comes from you. If you never signed one while you were alive, your executor arrives at the form with nothing to attach.

The second is verification. xAI says it may require you to verify your identity by validating your account credentials or submitting additional information. Validating account credentials means holding the login. Which reduces the practical answer to a single sentence: your family reaches your Grok history only if you handed over the password before you died.

Section 6 of the same policy tells you not to do that, in as many words. You are solely responsible for protecting your log-in and password and for limiting access to your devices. A shared password is not a plan. A shared password is an arrangement that breaches the document you agreed to, sits in a drawer for years, and is usually out of date by the time anybody reaches for the drawer.

This is where a named digital executor earns the title, and the verified hand-over described in how Executor Lock releases a record after a death is the mechanism I would rather families had. Naming somebody confers no authority over xAI. What naming somebody gives you is a person who knows the account exists, and an account your family has never heard of is an account that never gets closed.

The two big privacy laws give strong powers to living people and close to nothing to dead ones. The rights you have read about in a privacy explainer are yours, and they end when you do.

Under the CCPA, California Civil Code section 1798.130(a)(2) requires a business to delete personal information within 45 days of receiving a verifiable consumer request, extendable once by a further 45 days if the consumer is given notice inside the first period. That right belongs to a consumer, defined as a natural person who is a California resident. Whether a deceased person remains a consumer who can be represented has not been settled, and xAI's own process still runs through verification and written authorisation either way.

The GDPR position is blunter, and the bluntness is written into the Regulation. Recital 27 of Regulation (EU) 2016/679 states that the Regulation does not apply to the personal data of deceased persons, and that Member States may provide their own rules instead. There is no EU-wide right of erasure over a dead person's Grok history. Some Member States have legislated their own regimes, France and Spain being the usual examples, and that is national law rather than GDPR.

While you are alive, both laws work well. Article 12(3) of the GDPR gives you a response within one month, extendable by two further months for a complex request. xAI's own numbers, in a moment, come in faster than either statute demands.

Put the two laws side by side and the shape is the same in both. Powerful rights for the person typing. Nothing for the people who outlive them. Erasure is the one power that survives you, and erasure is the power that helps your family least.

Start building your legacy Free build, 50 memories, no card required.

xAI publishes a CCPA Transparency Report covering 1 January 2025 to 31 December 2025. For US-based users it recorded 229,589 account data downloads through xAI Data Controls, with an average of 1 day to respond, 229,589 completed and none denied. Requests to delete, submitted to the xAI privacy team by people identifying as California residents, totalled 65, with an average of 1 day to respond, all 65 completed and none denied.

The two rows count different populations, and the difference is worth stating: downloads covers US-based users pressing a button inside the product, while deletions counts only people who identified themselves as California residents and wrote to a privacy team. Even allowing for that, the shape holds. The self-service machinery works, at scale, in about a day. The formal legal channel is a rounding error, because deletion is a button and a button needs no lawyer.

xAI built genuinely good tools for a living account holder. So did everybody else in the table further down. Which is the argument for using them this week, while you are still the account holder.

1. Open grok.com and sign in, or open the Grok app.

2. Go to Settings, then Data Controls (on grok.com the xAI Consumer FAQs call the same area Settings, then Data, so check both labels).

3. Use the download control to request your account data. xAI's CCPA report shows an average turnaround of 1 day, so expect a wait rather than an instant file.

4. In the same panel, check whether "Improve the model" and "Personalize Grok using X" are set the way you actually want.

5. Go to grok.com/share-links and press Remove on every share link you no longer want live.

6. Open your conversation history and delete anything you would not want read aloud. On the apps, press and hold a conversation and choose Delete Conversation. To clear everything, use Delete All Conversations in Data Controls.

7. If you used Grok inside X as well, repeat the relevant parts through X's own settings, because that history sits on the other side of the policy line.

Step 5 is the one people skip and the one that bites. xAI's FAQs warn that a share link is accessible to anyone who has it, and that a link posted publicly may be indexed by a search engine like any other public content. X's own policy adds that public content can exist elsewhere after removal, because search engines and third parties may keep copies under their own policies. Deleting your account does not reach into Google's index. A Grok conversation you shared in 2025 can outlive the account it came from, and outlive you.

The Consumer FAQs page is dated 12 May 2025 while the Privacy Policy is dated 4 April 2026, so the menu labels above may have moved. The structure has held.

Every assistant in this comparison built the two buttons a living user asks for, and not one built the third thing every user eventually needs: a verified way to say who this goes to.

That is the finding across all seven of these pages, Grok included.

Two providers get close at the account level and then stop at the assistant. Google's Inactive Account Manager fires after an inactivity period you choose and shares the data types you pick with the contacts you pick, and Google's help page gives Blogger, Drive, Mail and YouTube as its examples. Microsoft's OneDrive Digital Legacy gives a nominated contact read-only access to your files and photos after your death. Neither tool's documentation says anything about assistant chat history in either direction. The same gap runs through what happens to your ChatGPT memories when you die, which is the hub for this whole comparison, and through what happens to your Claude conversations when you die and what happens to your Gemini history when you die.

Negligence is not the explanation. A hand-over needs three things a chat product has no reason to build: proof that a specific person died, proof that a specific living person was chosen by them, and a delay long enough for a fraudulent claim to fall over. Those three requirements add up to an identity system, and an identity system is a different company, which is why the question sits underneath who controls your identity after you die.

Every row was checked against the vendor's own published policy on 30 July 2026. These policies change without notice, so treat the date as the important column.

So the honest description of your Grok history is a private working record with an expiry switch and no forwarding address. Which is fine, and even a little reassuring, unless you were quietly relying on that history to be something more.

Grok does the export properly. A file in about a day, at scale, with no denials. Those numbers earn the credit.

At Afterlife.ai™ we built the other half.

A guide called Idy interviews you. Ordinary conversation, across as many sessions as you want, and the answers become memories written in the first person and in the language you used, with the concrete details carried over exactly as you gave them: the names, the numbers, the objects. The conversation itself is kept as well, so nothing rests on a summary being perfect. Your voice is cloned from recordings you make yourself, so what answers later sounds like you rather than like a stock narrator. We call the result a "Persona".

Built from what you actually said, and only from that. Where you never covered something, nothing gets invented to fill the space, and no scene is manufactured because the moment seems to call for one. What your family gets is your material, in your voice, held to the record.

The difference from an export is the hand-over. You nominate the people who get access. Nothing reaches them while you are alive. Release runs through Executor Lock™: a seven-day, evidence-verified hold, where a nominated person submits proof, a countdown runs, and you can stop the whole thing during that window if the claim is wrong. Seven days exists so a false claim has time to fail.

At lock, the whole record is snapshotted in the state you left behind. Nothing pruned, nothing down-weighted, no tidying pass over the parts that came out awkwardly. After lock the personality does not change, and holding that line is the hardest promise in the product rather than a footnote in the terms.

You can do a good deal of this without us, and you should hear that from me rather than work it out later. Sit down with a recorder and answer real questions about your own life and you have most of the value already. The interview and the release mechanism are what we sell. The idea that somebody should be able to ask you a question in 2049 is free.

Your first 50 memories are free, no card is asked for to begin, and a free build never expires, so the answers you record this week are still there whenever you come back to them. If you want to see what sits beyond the free build first, the plans page lists what each one includes.

If your instinct is that nobody would want any of this from you, that objection has a page of its own: why "I am not important enough to leave anything behind" is the wrong test.

Start building your legacy Free build, 50 memories, no card required.

If I stop using Grok, does xAI delete my account automatically?

No. xAI publishes no inactivity deletion policy for consumer accounts. The Consumer FAQs say you can keep your data on your xAI account for as long as you wish, and the 30-day clock only starts when a deletion is requested. An account left alone keeps its conversation history indefinitely.

Can my executor get a copy of my Grok conversations?

No published process exists. xAI's rights framework requires either your own identity verification, including validating account credentials, or an Authorized Agent holding written permission from you. A dead person cannot grant that permission. X's separate deceased-user process handles deactivation only and states that account access is never provided to anyone.

Does GDPR give my family the right to erase my Grok data?

Not by itself. Recital 27 of Regulation (EU) 2016/679 says the GDPR does not apply to the personal data of deceased persons, and leaves it to Member States to make their own rules. Some have, including France and Spain. So any right your family holds comes from national law in your country, not from the GDPR.

What happens to Grok conversations I shared with a public link?

They stay up until you remove the link. Go to grok.com/share-links and press Remove. xAI warns that a share link is accessible to anyone holding it and may be indexed by search engines if you post it publicly, and X's policy notes that third parties may keep copies after removal. Deleting your account does not clear a search engine's cache.

Does Private Chat mean the conversation is never stored?

Not never, just briefly. Private Chat keeps the conversation out of your visible history and out of model training, and xAI deletes it from its systems within 30 days. The same exceptions apply, so a conversation can be kept longer where necessary for legal, compliance or safety purposes.

What does Afterlife.ai cost, and what if the company shuts down?

Your first 50 memories are free, no card is asked for to begin, and a free build never expires, so you can put real answers in before paying anything. Paid plans are listed on the plans page. On company failure, the honest answer is that any service can fail, which is why you can export your memories and your conversations at any time as a plain JSON file that is yours to keep. Ask that question of every service holding something you care about.

• What happens to your ChatGPT memories when you die is the hub for this comparison and covers the assistant most people have the deepest history with.

• What happens to your Meta AI memories when you die matters if you also talk to the assistant inside WhatsApp or Instagram, where the account rules differ again.

• What happens to your Perplexity account when you die is worth reading if your research history is the part you would least want lost.

• How Google's Inactive Account Manager hands over an account is the one advance-nomination tool that actually exists in consumer software, and worth setting up while you are thinking about this.

Every retention and process claim here comes from primary sources read directly on 30 July 2026: xAI's own Privacy Policy, Consumer FAQs and CCPA Transparency Report, X's Privacy Policy and its Help Center article on a deceased family member's account, the text of the GDPR itself for Recital 27 and Article 12(3), and the California Civil Code for the CCPA response window. Every row of the seven-assistant table was read the same day on the vendor's own help pages, which are linked in the table and listed in full under Sources. Where a document carries an effective date, that date is printed next to the claim. Nothing here rests on a secondary summary or a press report.

Platform policy also moves without notice, which is why this page runs on a 30-day recheck cycle. If you are reading a long way past the review date below, open the source links and check the wording yourself before acting on any of this. The page is not legal advice, and nothing here recovers a conversation that has already gone.

What is unsettled, plainly: whether an executor has any standing at all over a dead person's data under the CCPA, since "consumer" is defined as a natural person and the position on representation after death has not been tested; which national rules fill the gap the GDPR leaves open in each Member State, beyond the usual French and Spanish examples; and what xAI would actually do with a next-of-kin approach, because xAI publishes no deceased-user process to judge. Absence of a published process is not the same as a refusal, and this page does not claim otherwise.

Found something out of date or wrong? Tell us on the Afterlife.ai contact page and we will check the source and correct the page.

• xAI Privacy Policy, effective 4 April 2026, sections 5 and 9. x.ai/legal/privacy-policy

• xAI Consumer FAQs, dated 12 May 2025. x.ai/legal/faq

• xAI CCPA Transparency Report, reporting period 1 January 2025 to 31 December 2025. x.ai/legal/ccpa

• xAI Europe Privacy Policy Addendum, effective 24 April 2025. x.ai/legal/europe-privacy-policy-addendum

• X Privacy Policy, effective 15 January 2026, sections 4 and 5.2. x.com/en/privacy

• X Help Center, contacting X about a deceased family member's account. help.x.com deceased-account article

• Regulation (EU) 2016/679 (GDPR), Recital 27, personal data of deceased persons. https://gdpr-info.eu/recitals/no-27/

• Regulation (EU) 2016/679 (GDPR), Article 12(3), one-month response period. https://gdpr-info.eu/art-12-gdpr/

• California Civil Code section 1798.130(a)(2) (CCPA), 45-day response period. https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.130

Comparison table, read on 30 July 2026:

• OpenAI Help Center, chat and file retention policies in ChatGPT, and exporting your ChatGPT history and data. retention, export

• Anthropic Privacy Center, how long do you store my data, and export your Claude data. retention, export

• Google Gemini Apps Privacy Hub, Inactive Account Manager, and the deceased-user request process. Gemini, Inactive Account Manager, deceased user

• Microsoft Support, Copilot activity history in the privacy dashboard, Copilot privacy controls, the legal-guidance page for a deceased account holder, and OneDrive Digital Legacy. dashboard, privacy controls, legal guidance, Digital Legacy

• Meta Help Center, manage your information on Meta AI. Meta AI

• Perplexity Help Center, account deletion and GDPR compliance at Perplexity. deletion, GDPR

Platform policy checked: 30 July 2026. Last reviewed: 30 July 2026. Next review due: 29 August 2026 (30-day cycle).