Superhuman Go Privacy Review for Solo Freelancers — AI tool privacy review for freelancers

Superhuman Go Privacy Review for Solo Freelancers

Short answer: on Free, Pro, and Business plans, Superhuman Go can use your writing to train its AI models unless you switch that off, and it reads the full content of the emails, docs, and connected apps it works in. Our verdict is USE WITH CAUTION: fine for client work once training is off and client inboxes stay disconnected. Policy reviewed September 2026. Superhuman Go is the new cross-app assistant from the company formerly known as Grammarly, relaunched on Product Hunt on September 22. It sits in Gmail, Slack, Google Docs, and your browser, drafts replies in your voice, and runs scheduled agents. For a freelancer, that means one vendor sees your client threads, proposals, and meeting prep in a single place. Here’s how we vet privacy claims before any tool gets a verdict.

What Superhuman Go does with your data

Privacy at a glance

Privacy dimensionSuperhuman Go’s answer (sourced)
Trains on your data?Yes on Free, Pro, Business unless you opt out
Training opt-outAccount toggle; off by default on Enterprise only
Data retentionNo fixed period; varies by data type and settings
Third-party sharingService providers, marketplace agents, ad partners (IDs only)
Storage regionUS transfers under EU-US Data Privacy Framework
Reads connected appsYes, including apps you don’t have open
Sells your content?No, per vendor trust page
Enterprise-team tierEnterprise: training off, SSO, audit logs, admin controls

The Superhuman privacy policy covers Go, Mail, Docs, and the Grammarly writing assistant under one document (per Superhuman’s privacy policy, effective July 6, 2026, retrieved 2026-09-27). It lists four buckets of data: your account details, the user content you type or connect, usage data, and technical information. The technical bucket is broader than most AI assistants collect. It includes the apps installed on your device, your browser plugins, and details about the third-party tools where you use the product.

On training, the policy is direct. Superhuman uses what it collects to train its own AI models, and you decide whether your user content is included through a training control in account settings. The Go plan comparison page shows that control set to opt out on the Free, Pro, and Business plans, and off by default only on Enterprise (per Superhuman’s Go pricing page, retrieved 2026-09-27). Grammarly’s support article on the same control adds that aggregated writing statistics, such as word counts and accepted suggestions, are collected even when training is off.

Three other points matter for client work:

  • Scope of reading. Go reads the full document or app you’re working in, not just the sentence under your cursor. Connected apps such as Gmail or Google Calendar can be searched even when they aren’t open, according to Superhuman’s Go Data & Privacy FAQ as indexed on 2026-09-27 (direct fetch was blocked).
  • Who else touches it. The policy names the Superhuman corporate family, service providers for AI, payments, and cloud storage, and third-party agents you install from the marketplace. Superhuman says it contractually blocks its AI providers from training on customer content.
  • Retention. Data is kept as long as needed for the service, legal duties, and other legitimate business purposes, with periods varying by data type. Documents saved in the Grammarly editor stay until you delete them.

People you email who don’t use Superhuman also end up in its systems. The policy says it uses that non-user data only to provide the product to you, and never to market to those contacts.

What this means for solo freelancers

Go’s value comes from context, and context is exactly what your clients expect you to protect. Reading the policy as written against typical freelance contracts, three scenarios stand out.

  1. You draft a proposal inside a client’s shared Google Doc. Go reads the whole document, not just your paragraph. On a Pro plan with the default training setting, samples of that text can feed Superhuman’s model training after de-identification. De-identification lowers the risk, but it doesn’t remove confidential numbers or product plans from the text. Based on the policy as written, this carries a real NDA breach risk if your contract bans sharing client material with AI vendors.
  2. You connect Gmail so Go can prep your meetings. Every thread in that mailbox becomes searchable context, including old client conversations you’d forgotten about. If you work from an inbox a client gave you access to, you’re granting a new vendor access that the client never approved. Our client inbox access review covers why that permission chain matters.
  3. You serve EU clients from a US-hosted stack. Superhuman relies on the EU-US Data Privacy Framework and standard contractual clauses for transfers. That gives you a documented route, but you still need to tell clients a new processor is involved, and the individual plans don’t hand you a signed data processing agreement by default. Based on the policy as written, the gap is paperwork, not encryption.

Scheduled agents raise the stakes further. An agent that summarizes your inbox every morning or updates a project tracker overnight runs without you watching each step. Go suggests rather than sends for most actions, but every run still pulls client content through Superhuman’s servers, whether or not you read the result.

The advertising section adds a smaller wrinkle. Superhuman may turn your email address into a hashed identifier for ad partners promoting its own products. Your writing isn’t included, but your account email is, unless you opt out.

How to use it safely

None of these settings is hidden, but none is on by default either. Work through them before Go touches a single client file.

  1. Turn off training. On a Free or Premium Grammarly account, open account.grammarly.com/security/privacy and switch off Product Improvement and Training. On Pro, the same toggle sits under account.grammarly.com/admin/data_settings. Check the training control in your Superhuman account settings too. More detail in our guide to opting out of AI training.
  2. Switch off tailored assistance at account.grammarly.com/customize/features if you don’t want personalization data stored. Grammarly says that data is deleted when you turn the feature off.
  3. Connect only your own inbox and calendar. Skip connectors for any client-provided account, and remove connectors you tried once and forgot.
  4. Limit the browser extension. In Chrome, right-click the Go icon, choose site access, and set it to run only when clicked. Then it won’t read client portals, banking pages, or password vaults by default.
  5. Avoid third-party agents from the store for client work. Each one follows its own privacy policy, not Superhuman’s.
  6. Opt out of ad sharing. Click Your Privacy Choices in the footer of the Superhuman site and turn on Global Privacy Control in your browser.
  7. Review access once a month. Open your connectors list and the agents you’ve enabled, and remove anything tied to a finished client project. Old access is the easiest leak to forget.
  8. Redact before you ask. Replace client names and figures with placeholders when you want a rewrite of a sensitive paragraph, and delete saved editor documents when a project closes.

Privacy-friendlier alternatives

Go is a productivity-AI writing assistant, so the fair comparison is other writing and email helpers, not password managers. All three below are direct links with no affiliate commission.

  • Proton Mail with Proton Scribe: what it gives you that Go doesn’t is a local mode that downloads a small model to your device, so drafts never leave it. Local mode works in English only. Scribe comes with the Proton Duo and Family plans and costs about 3 dollars per user per month as a Business add-on. Best for freelancers who want AI email drafting inside an encrypted mailbox.
  • Lumo by Proton: a chat assistant that doesn’t keep server-side logs of your conversations and doesn’t train on them. It has a free tier and a paid tier around 10 dollars a month. It won’t live inside Gmail the way Go does, so you trade convenience for control. See our Lumo privacy review for the full breakdown. Best for consultants who paste client material into a chat window and want it forgotten.
  • LanguageTool: what it gives you that Go doesn’t is an open-source engine you can self-host on a small server, so grammar checks never reach a vendor. The hosted Premium plan runs roughly 5 to 8 dollars a month depending on billing; the self-hosted version drops the AI rewrite features. Best for writers and translators who mainly need proofreading, not agents.

For comparison, Go Pro lists at 12 per member per month on annual billing and Business at 33, on the plans page we loaded (priced in euros from our location). The Proton options land at a similar or lower cost, while self-hosted LanguageTool costs only the price of a small server. A quick rule for choosing: if you mostly write email, pick Scribe; if you mostly paste material into a chat, pick Lumo; if you mostly proofread, pick LanguageTool.

If your real need is Go’s cross-app agents, no private alternative matches it yet. The workable compromise is Go with training off and only your own accounts connected. Microsoft’s equivalent faces similar questions, covered in our Microsoft Copilot review.

The verdict

ATP Privacy-Vetted: USE WITH CAUTION

Our verdict for Superhuman Go is USE WITH CAUTION for client work. On Free, Pro, and Business plans, Superhuman’s policy allows training on your content until you switch the control off, and Go reads entire documents plus any connected app, so a default install exposes more client material than a freelancer should accept. The vendor doesn’t sell content, blocks its AI providers from training on it, and relies on recognized transfer frameworks, which makes Go workable once you disable training, connect only your own accounts, restrict the browser extension, and skip marketplace agents for client files.

Frequently asked questions

Does Superhuman Go train on my emails and documents?

On Free, Pro, and Business plans, it can, unless you turn training off. Superhuman’s privacy policy says it trains its own models on collected data and gives you an account control to exclude your user content. Its plan comparison shows training off by default only on Enterprise. Grammarly adds that sampled content is de-identified first, and that aggregated writing statistics are collected even after you opt out.

Is Superhuman Go GDPR-friendly for EU client work?

Based on the policy as written, it offers a workable path but needs paperwork. Superhuman transfers EU, UK, and Swiss data to the US under the Data Privacy Framework and uses standard contractual clauses elsewhere. You still have to disclose the new processor to clients, switch off training, and keep personal data out of prompts. Solo plans don’t come with a signed agreement the way enterprise contracts do.

Can I use Superhuman Go for HIPAA-covered data?

Not on a solo plan. The Go plan comparison lists HIPAA support among the security and administration features aimed at organization accounts, and a Free or Pro account gives you no Business Associate Agreement. Based on the policy as written, pasting protected health information into Go from an individual account would leave that data outside any signed safeguards. Keep health data in tools your client has already contracted and approved.

Can Superhuman Go read apps I don’t have open?

Yes, once you connect them. Superhuman explains that connectors let Go search and pull information from linked apps like Gmail or Google Calendar even when those apps aren’t open on your screen. That’s what makes meeting prep and cross-app summaries work. It also means one connected mailbox exposes its full history. Connect only accounts you own, and disconnect anything you no longer use.

Is Superhuman Go the same as Grammarly for privacy?

Largely, yes. Grammarly’s company renamed itself Superhuman, and one privacy policy now covers Grammarly, Go, Mail, and Docs. The same Product Improvement and Training control governs Grammarly suggestions and Go content. The difference is reach: Grammarly mainly saw the text box you typed in, while Go reads whole documents and connected apps and can run scheduled agents on its own.

Sources

Reviewed by Jérémy, founder of AidTaskPro and GreenBudgetHub. Based in central France. Privacy posture sourced from public policies and vendor documentation as of 2026-09-27.

Get Your Free Cybersecurity Checklist

Protect your digital life in 5 minutes. Free checklist + weekly productivity & security tips.

Similar Posts