Google has revised its privacy policy in a way that could expand how personal data from Gmail, Google Drive, and Google Photos is used for advertising. The update adds a narrow-sounding exception to Google's long-standing statement that it does not use content from those services for personalized ads. Under the new language, Google says it will not use that data for ads unless a user chooses to make data from those services available to other Google services that support personalized advertising.

The change is easy to miss. It appears as an added clause rather than a headline-grabbing overhaul. But privacy advocates and users who rely on Google's productivity and storage tools are likely to examine what it means in practice. The exception is tied to features that let Google's AI systems draw on a user's own information to provide more relevant answers, recommendations, and assistance. When a user connects Gmail, Drive, or Photos to those features, the policy now leaves room for that content to influence ads served elsewhere in Google's ecosystem.

What changed in the policy

Previously, Google's policy said it did not use data from Google Drive, Gmail, and Google Photos for personalized ads. That commitment was one of the clearer lines between Google's advertising business and its cloud storage and email products. The revised policy adds an exception: Google may use such data if the user chooses to make it available to other Google services that support personalized ads.

The relevant language explains that users may allow certain Google services, including Search or Gemini Apps, to access data from other Google services such as Google Photos and Workspace apps like Gmail and Drive. That access is intended to provide a more personalized experience, subject to the policies and settings of the service receiving the data. The policy then gives an example: Search may process some of the data a user allows it to access in order to personalize content, including ads.

Google also says that, depending on settings, it may show personalized ads based on interests, activity, or personalized content from Google services. The example offered is straightforward: if a person searches for mountain bikes, they may see ads for sports equipment on YouTube. That example is not specifically about Gmail or Photos, but it illustrates how activity in one Google service can shape advertising in another.

How the data connection works

The key mechanism is a feature that lets Google's AI tools use personal context. Search and Gemini can be connected to apps such as Gmail, Drive, and Photos so that responses can reflect a user's own messages, files, and images. Google has marketed this kind of integration as a way to make AI assistance more useful. A user might ask for a summary of an email thread, help finding a document, or a recommendation based on a photo. The system can provide better answers when it has access to the relevant material.

But the same connection changes the privacy calculation. Once a user links a service to an AI tool, the data is no longer confined to the original product. It can become part of the context available to the receiving service. The updated policy says that context can be used to personalize content, including ads, depending on the user's settings. That does not mean every Gmail message or every photo becomes an ad signal. It means the door is open for connected data to inform personalization if the user has enabled the relevant features.

The policy's wording matters. It refers to services that support personalized ads and to data the user chooses to make available. That suggests the change is not a blanket reuse of all Gmail, Drive, and Photos content for advertising. It is conditional on user choices and service settings. Still, the condition may be easier to trigger than users expect. A person who connects an account to an AI feature for convenience may not be thinking about how that choice interacts with advertising settings.

What advertisers can and cannot see

Google's policy update does not mean advertisers receive access to Gmail messages, Drive files, or Google Photos libraries. The company says advertisers do not get access to that information or to personally identifying details such as a user's name or email address. Ad targeting is based on Google's own systems and the categories or signals those systems derive. Advertisers buy audiences or placements; they do not browse a user's inbox.

Google also says it will not show ads based on sensitive categories such as race, sexual orientation, religion, or health. Those limits are important, but they do not eliminate every concern. Even without exposing raw content, a system can infer interests from patterns. A document about a medical condition, a photo from a protest, or an email about a personal financial issue could, in theory, contribute to a profile. Google's restrictions are meant to prevent the most sensitive targeting, but the underlying data can still be personal.

There is also a difference between transparency and control. The policy language explains what may happen, and the settings page gives users options. But the burden falls on users to understand which services are connected, what data those services can access, and whether personalized recommendations are turned on. For many people, those settings are buried in account controls that are rarely visited.

Why the change matters

The update reflects a broader tension in the AI era. AI assistants are more useful when they have context. A generic chatbot can answer general questions, but a personalized assistant can help with a user's actual life: scheduling, travel, work documents, photos, and messages. Companies therefore have an incentive to connect products and let AI systems draw on as much relevant data as possible. The privacy challenge is that the same data that makes assistance useful can also make advertising more effective.

Google has long positioned its advertising business as dependent on context and settings rather than on selling personal information. The company's policy language usually draws careful distinctions between data used to show ads and data shared with advertisers. This update follows that pattern. It does not say advertisers can read Gmail. It says Google may use connected data to personalize content, including ads, when users have allowed the connection. The distinction is meaningful, but it may not reassure users who thought the Gmail, Drive, and Photos carve-out was absolute.

The change also arrives as regulators and lawmakers in several countries scrutinize how large platforms combine data across services. Consent, purpose limitation, and data minimization are central issues. A policy update that links AI personalization to advertising could attract attention because it touches on both. The question is not only whether users consent, but whether they understand what they are consenting to and whether the choice is genuinely meaningful.

Background on Google's data promises

For years, Google's advertising system has relied on signals from Search, YouTube, Maps, and other products. The company has consistently said it does not sell personal information, and it has drawn lines around certain sensitive data. The Gmail, Drive, and Photos carve-out was one of those lines. It signaled that content stored in productivity and photo services would not be used to target ads, even as Google used other activity to personalize advertising.

The new exception does not erase that history, but it changes the boundary. It recognizes that AI features can blur the line between services. When Search or Gemini can access Gmail, Drive, or Photos, the data is being used to personalize the AI experience. The policy now acknowledges that the same access may support ad personalization. That is a notable shift in how Google describes the relationship between its AI tools and its advertising business.

Users do not need to understand every technical detail to grasp the practical question: if I connect my inbox to an AI assistant, can that connection affect the ads I see? The updated policy says it can, depending on settings. That is the central fact to weigh. The answer is not hidden in a separate ad product; it is built into the permissions that let AI tools draw on personal data.

How users can manage their settings

Users who want to keep personal data out of ad personalization have several options. They can review which apps are connected to Search's Personal Intelligence features and disconnect the ones they do not want linked. They can also disable personalized recommendations through the Search Services Personalization settings page. These controls are designed to let users decide which services can draw on their data and how that data is used.

It is worth checking those settings periodically. Connected services can change over time, and a feature that was enabled for a one-off task may remain connected long after. Users who share devices or accounts should also consider whether other profiles have linked services. The policy applies at the account level, so the choices made by one user may affect the data available for personalization across that account.

For users who value AI features, the trade-off may be acceptable. Connected data can make Search and Gemini more helpful, and the policy says advertisers still do not receive raw content. For users who prefer stricter separation, disconnecting services or turning off personalized recommendations is the clearest path. The update does not remove those controls; it makes the relationship between AI personalization and advertising more explicit.

Key facts

• Google updated its privacy policy with an exception to its promise not to use Gmail, Drive, or Photos data for personalized ads.
• The exception applies when a user chooses to make data from those services available to other Google services that support personalized ads.
• Connecting Gmail, Drive, or Photos to AI features such as Search and Gemini can allow connected data to inform personalized content, including ads.
• Advertisers do not receive access to Gmail, Drive, or Photos content or personally identifying details such as names or email addresses.
• Google says it will not show ads based on sensitive categories such as race, sexual orientation, religion, or health.
• Users can disconnect apps from Search's Personal Intelligence features or disable personalized recommendations in settings.
• The policy change was made on October 16 and reported on October 23.

Source: The Verge News