xAI's API training default
xAI's API security documentation is explicit: xAI never trains on your API inputs or outputs without your explicit permission [1]. That default applies to traffic sent to the xAI API under your own API key, which is the path Meetily uses for BYOK summaries.
This is an important distinction to draw, because xAI's consumer Privacy Policy explicitly does not apply to the API. The Privacy Policy states that it does not apply to data that xAI processes on behalf of customers of its business offerings, such as the xAI API [2][3]. Instead, API traffic is governed by xAI's Data Processing Addendum, under which xAI acts as a processor on the customer's behalf [3]. Reporting and guidance about consumer Grok on X (where public posts and Grok conversations are used for training by default unless you opt out [4]) describes the consumer surface, not the API. None of that consumer-side training behavior describes what happens to a Meetily BYOK request.
Retention
By default, xAI's documentation states that API requests and responses are temporarily stored on its servers for 30 days in case they need to be audited for potential abuse or misuse [1]. This is an abuse-monitoring retention window, not a training corpus.
For exact processing terms, geographic scope, and the current subprocessor list, the authoritative source is xAI's Data Processing Addendum, which is incorporated into the Enterprise Terms of Service [3]. Reviewing the DPA before deployment is recommended for any regulated workload.
Zero data retention
xAI offers Zero Data Retention as an enterprise feature that prevents xAI from storing any API request or response data, and it is exclusively available to enterprise accounts [1]. Under ZDR, the standard 30-day audit retention does not apply: prompts, completions, and associated metadata are processed in real time but not persisted, and once a response is delivered no record of the exchange remains [1]. Safety and content moderation checks still run in real time, but their results are not stored under ZDR [1]. To enable it, contact xAI sales; it is not a self-serve toggle for standard accounts.
How Meetily uses xAI Grok
Meetily transcription is always 100% local, and audio never leaves your device. When you select an xAI Grok model as your summary provider in the BYOK flow, Meetily sends transcript text to the xAI API over TLS using your own API key, and the summary is returned to Meetily and stored locally on your device.
The xAI API is OpenAI-compatible: xAI documents that you can use the OpenAI SDK by pointing it at the base URL https://api.x.ai/v1, and most OpenAI-compatible tools work without modification [5]. Meetily configures it as an OpenAI-compatible base URL, so your traffic runs under your own xAI account and its contract terms, not Meetily's.
If you want stronger guarantees than the cloud default offers, switch your summary model to a local provider such as Ollama. Meetily's transcription path is already local, so the local-summary route keeps the entire pipeline on-device.
References
- FAQ - xAI API Security, xAI (publisher: xAI). https://docs.x.ai/developers/faq/security. Accessed 2026-06-29.
- Privacy Policy, xAI (publisher: xAI). https://x.ai/legal/privacy-policy. Accessed 2026-06-29.
- Data Processing Addendum, xAI (publisher: xAI). https://x.ai/legal/data-processing-addendum. Accessed 2026-06-29.
- About Grok, X Help Center (publisher: X Corp.). https://help.x.com/en/using-x/about-grok. Accessed 2026-06-29.
- API: Frontier Models for Reasoning & Enterprise, xAI (publisher: xAI). https://x.ai/api. Accessed 2026-06-29.