“Yet, by explicit definition, any tool that logs a user’s keystrokes and sends them to a third party is technically a keylogger.”
Grammarly says it reads only the text you’re actively writing. That text is your email, your contract draft and your company’s internal docs, all shipped to Grammarly’s servers. Employees install it without asking anyone. Security teams spend millions on data loss prevention and then let a browser extension read everything typed.