Google has updated its privacy policy in a way that could change how personal data from Gmail, Google Drive, and Google Photos is used for advertising. The revised terms, which took effect on October 16, add an exception to the company’s earlier promise that content from those services would not be used to personalize ads. Under the new language, if a user chooses to make data from those services available to other Google products that support personalized advertising, that information may now help shape the ads the user sees.

The change is tied to Google’s expanding set of AI-powered features. Personal Intelligence, AI Mode, and other Search tools can use information from a user’s Google account to provide more tailored answers and recommendations. Connecting Gmail, Drive, or Photos to those tools can make the experience more useful because the assistant has more context about the user’s life, work, and interests. The updated policy makes clear that the same connection may also feed ad personalization. As the new terms put it, sharing data for better AI recommendations can also mean opening it up for more personalized ads.

What the policy says

The previous version of the policy simply said that Google would not use data from Drive, Gmail, or Google Photos for personalized ads. The new version adds a notable qualifier: Google says it will not do so “unless you choose to make data from these services available to other Google services that support personalized ads.” That exception is the heart of the change. It means the old promise still applies in some circumstances, but it no longer covers users who have linked those services to AI features and other tools that support personalized advertising.

The policy goes on to explain how the data may be processed. In Google’s words:

“You may choose to allow certain Google services, including services like Search or Gemini Apps, to access data from other Google services you use, such as Google Photos and Workspace apps like Gmail and Drive, in order to provide you with a more personalized experience, subject to the policies and settings of the accessing service. For example, Search may process some of the data that you allow Search to access to personalize content, including ads.”

A second passage makes the advertising link even more direct:

“Depending on your settings, we may also show you personalized ads based on your interests, activity, or personalized content from Google services. For example, if you search for ‘mountain bikes,’ in Search you may see ads for sports equipment on YouTube.”

That example is simple, but the underlying shift is broader. The policy does not say that advertisers receive emails, files, or photos. It says Google may process data that a user has allowed Search or another service to access, and that this processing can personalize content, including ads. In practical terms, the change gives Google more room to use signals from connected services when building the profile that determines which ads a user sees.

Key facts at a glance

• Google updated its privacy policy on October 16 to add an exception to its promise not to use Drive, Gmail, or Google Photos data for personalized ads.
• The exception applies when users choose to make data from those services available to other Google services that support personalized ads.
• Users who connect Gmail, Drive, or Photos to AI Mode and other Search tools through Personal Intelligence may see ads targeted on the basis of that content.
• Advertisers do not get access to the underlying emails, files, photos, or personally identifying details such as a user’s name or email address.
• Google says it will not show ads based on sensitive categories such as race, sexual orientation, religion, or health.
• Users can disconnect apps from Search’s Personal Intelligence features or disable Personalized Recommendations through the Search Services Personalization settings page.

Why the change matters

The update matters because it blurs a line that many users assumed was fixed. Gmail, Drive, and Photos are among the most personal services Google offers. They can contain private messages, work documents, family photographs, travel plans, medical information, financial records, and years of correspondence. Google had long treated those services differently from its advertising products, at least in its public promises. The new exception means that the boundary between “data used to improve my AI assistant” and “data used to choose my ads” is less absolute than it once appeared.

For users, the risk is not necessarily that a specific email or photo will appear beside an ad. The more likely consequence is that Google’s advertising systems will draw on a wider set of signals when deciding what to show. That could make ads more relevant, but it could also make them feel more intrusive because they are based on information that users may have shared for a different purpose. Someone who connected Gmail to an AI search tool to get better answers about an upcoming trip, for example, might not expect that same connection to influence the ads they see later.

The change also arrives at a moment when AI features are becoming central to how search engines and assistants work. Personalized AI is useful precisely because it can remember context and draw on a user’s own information. But personalization requires data, and ad-supported services need ways to monetize that data. The new policy reflects that tension. It attempts to preserve user choice by tying the ad use to settings and connections, while giving Google more flexibility to use connected data in the same systems that power personalized content.

Safeguards and limits

Google has emphasized several limits. Advertisers do not receive access to Drive, Gmail, or Photos information, nor do they get personally identifying details such as a user’s name or email address. The company also says it will not show ads based on sensitive categories including race, sexual orientation, religion, or health. Those safeguards are meaningful, especially for users who worry about raw personal content being handed to advertisers. But they do not eliminate the broader privacy question. Targeted advertising does not require an advertiser to see the source data; it only requires the ad platform to infer interests and select an audience.

The policy language also places significant weight on user settings. The exception applies when a user “chooses” to make data available to other services, and the examples refer to what happens “depending on your settings.” That framing puts the burden on users to understand which services are connected, what those connections allow, and how personalization settings interact with advertising. Many users may have connected AI features months earlier and may not remember which parts of their account are linked. The policy update does not necessarily change those connections, but it changes what those connections may mean for advertising.

How users can respond

Users who want to prevent their personal data from being used for targeted ads have some controls. They can choose which apps to disconnect from Search’s Personal Intelligence features. They can also disable Personalized Recommendations entirely through the Search Services Personalization settings page. Those steps may reduce ad personalization, but they may also affect the usefulness of AI-powered recommendations. The trade-off is familiar: the more context a service has, the more tailored its answers can be, and the more data it may use for other purposes.

It is worth reviewing connected services periodically, especially after a company changes its terms. A connection that once seemed harmless—such as linking Photos to an AI assistant for better image search—may carry different implications under a new policy. Users who are uncomfortable with the advertising link can disconnect individual services or turn off personalized recommendations altogether. Users who value the AI features may decide that the convenience is worth the added personalization, provided they understand what they are agreeing to.

The bigger picture

The update fits a broader pattern in the technology industry. Companies are building AI assistants that rely on personal context, and they are searching for business models that can support the cost of those systems. Advertising remains the dominant model for many consumer services. As AI tools become more capable, the line between a helpful recommendation and an advertisement may become harder to see. A search result, a suggested product, and a sponsored link can all be shaped by the same underlying profile of a user’s interests.

Privacy advocates are likely to focus on consent and transparency. The key question is not only whether users can opt out, but whether they understand what they are opting into. A policy that says data may be used for personalized ads when a user connects a service is legally clearer than one that leaves the possibility unstated, but it may still surprise people who thought of Gmail, Drive, and Photos as private storage rather than advertising inputs. Regulators in multiple regions have been paying closer attention to how large platforms obtain consent and how clearly they explain data use. Changes like this one could invite scrutiny if users feel that the controls are difficult to find or that the consequences of connecting AI features are not obvious.

For advertisers, the change could be significant. Gmail, Drive, and Photos contain rich signals about intentions, routines, relationships, and purchases. Even without direct access to that content, ad systems that can learn from it may become more effective at predicting what people want to buy or do next. That is the commercial logic behind the update. The policy does not hand advertisers a database of private emails; it gives Google’s ad systems another set of signals to work with when those signals have been connected to services that support personalized advertising.

For now, the practical effect depends on individual settings. Users who have not connected Gmail, Drive, or Photos to AI Mode or other Search tools may see no change. Users who have connected those services may now be exposed to ad personalization shaped by that data, unless they adjust their settings. The policy language is live, and the choices users make about connected services and personalized recommendations will determine how much of their personal data flows into the advertising system.

Source:The Verge News