Is Grammarly Safe? What It Reads in Client Emails

It depends on your practice’s approved use: Grammarly can read client email drafts and web forms wherever its writing assistance is active.

Is Grammarly Safe for Client Documents?

Grammarly processes text you let its writing tools access, including client information in editable email drafts and web forms. Keep it out of client work until your practice approves the account, features and data handling.

A spelling suggestion still requires access to the text being checked. Staff do not have to press an AI rewrite button before Grammarly can process their writing.

Grammarly’s privacy explanation says it accesses text when you actively use its products. It says sensitive fields, including passwords and payment information, are excluded on a best-efforts basis.

That field protection does not establish that a client’s tax information in an ordinary email body is excluded. A client’s income figures remain confidential even when the text field looks like any other email draft.

For example, a practice manager editing a client’s tax return summary needs approval for the writing assistant to process that summary. A staff member’s personal Grammarly subscription does not establish the practice’s permission to disclose it.

What Grammarly Reads and Keeps

Grammarly’s storage depends on how you use it. Documents saved in the Grammarly Editor remain stored until you delete them or the account. Text checked through other products is processed to deliver and administer those services.

Grammarly’s privacy and security FAQ says data is stored in the United States. It also says generative AI features share prompt text, prompt type and context with service providers that cannot train their models on user content.

A rewrite request therefore adds your prompt and its context to the processing. Turning off generation alone does not turn off the ordinary writing checks running in the email or form.

The User Trust Centre explains another storage choice. Tailored assistance can store data against your account to personalise suggestions. Turning off a tailored-assistance feature deletes the data stored for that feature. This is separate from documents you deliberately save.

Model Training Settings

Grammarly’s training-setting instructions distinguish individual accounts from managed subscriptions. Do not assume that paying for Grammarly turns training off.

• Free, Premium and single-user Pro accounts have Product Improvement and Training on by default.
• Multi-user Pro accounts purchased through the website also start with it on. An administrator can turn it off for the organisation.
• Enterprise accounts have it off by default. Pro and Business subscriptions purchased through Sales also have it off.

For Free and Premium accounts, open the account’s Privacy settings. For Pro accounts, use Data settings. Set Product Improvement and Training to off. Only administrators can change it for multi-user Pro accounts.

With it off, Grammarly says it will not use content for training or product improvement for other users. It can still collect writing statistics. The setting also leaves the text processing needed for your writing suggestions in place.

Grammarly Business Controls

Grammarly Enterprise administrators can block the websites and desktop applications where Grammarly runs. These settings are Enterprise features, so a business subscription name alone does not establish that your practice has them.

Block Client Websites

Use domain controls to prevent Grammarly from operating on selected websites.

1. Open the admin Home page, then Organization, Enterprise Security and Domains and apps.
2. Select Add to block list and choose Domain.
3. Enter the domain without a protocol prefix or www.
4. Select Include subdomains when the restriction must cover the portal’s subdomains too.
5. Apply the restriction to Entire organization or the relevant Specific groups, then select Save.
6. Open the blocked site in a managed staff account with harmless sample text. Confirm Grammarly does not operate there.

Grammarly lists this feature for its Chrome, Firefox and Edge extensions and its Windows and Mac applications. Safari is outside that published list. Include every browser staff actually use in the device policy.

Block Desktop Applications

Application controls use the same Domains and apps page. Choose Application and enter the Windows executable name or the Mac application’s bundle identifier. Add separate entries when blocking the same application on both operating systems.

Apply each entry to the organisation or intended groups and save it. Check the restriction in the affected application using a staff account. This feature applies to Grammarly for Windows and Mac.

Enterprise confidential mode can also deactivate Grammarly in Gmail confidential drafts and selected Word sensitivity labels. Gmail support covers the Chrome, Firefox and Edge extensions. Word label support covers Grammarly for Windows.

These restrictions depend on the supported application and label settings. An ordinary email containing confidential information does not automatically become a Gmail confidential-mode message.

Removing Grammarly From Practice Computers

Remove each installed Grammarly product and then deal with stored account content separately. Uninstalling the desktop application does not remove its browser extension or delete the online account.

Before account deletion, save any records your practice must retain in its approved document storage. Account deletion is permanent. You need the account holder or authorised administrator to complete it.

Uninstall on Windows

1. Select the Grammarly icon in the system tray and choose Quit.
2. Open Windows 11 Settings, then Apps and Installed apps.
3. Find Grammarly for Windows, open its More menu and select Uninstall.
4. Follow the removal prompts and confirm Grammarly no longer appears in Installed apps.

These steps combine Grammarly’s desktop removal instructions with the current Windows uninstall menu.

Delete Grammarly From a Mac

1. Select Grammarly in the menu bar and choose Quit.
2. Open Finder, then Applications.
3. Move Grammarly for Mac to the Bin.
4. Reopen the application where staff write and confirm Grammarly is no longer active.

If the Mac says Grammarly is still open, quit it before retrying. If suggestions remain after removal, inspect browser extensions and any separate Office add-in. A second installation can remain active after the desktop application is removed.

Remove the Browser Extension

Follow the browser-extension removal instructions in every staff browser profile.

• In Chrome, right-click the Grammarly toolbar icon and select Remove from Chrome.
• In Firefox, open about:addons, select Extensions, find Grammarly and choose Remove.
• In Edge, open Extensions, select Grammarly for Microsoft Edge and choose Uninstall.
• In Safari, open Settings, then Extensions. Select Grammarly and choose Uninstall, following the prompt to remove its application. Quit Grammarly for Safari before moving it from Applications to the Bin.

Apple’s Safari extension instructions describe the current Settings menu. Grammarly says the extension can show the Superhuman logo after activating Superhuman Go, so inspect the installed extension list as well as its icon.

Restart the browser and revisit a test page with harmless text. Confirm the extension is absent from the installed list and Grammarly suggestions no longer appear. Ask the administrator to remove an extension if the browser prevents removal.

Delete the Account and Stored Text

Grammarly’s account-deletion instructions say deletion removes personal information, including documents saved in the Grammarly Editor.

1. If the account belongs to an organisational subscription, ask its administrator to remove it from that subscription first.
2. For a free Grammarly account, open Profile and sign in.
3. Select Delete Account and complete the required password, sign-in or email-code verification.
4. If a paid subscription is still active, use the support request linked in the deletion instructions.
5. For a Superhuman account, follow the same help page’s separate direction to email care@superhuman.com for deletion.

Keep the completed deletion confirmation with the practice’s removal record. A cancelled subscription or an uninstalled application is not confirmation that stored documents were deleted.

Record the extension decision in your cyber security policy for accountants. Include personal accounts and unapproved browser tools in your shadow AI review so another installation does not restore the same exposure.