Data PrivacyGoogle / Google Search Help

Google explains cross-service data and commercial display uses: review settings before connecting AI features

Google's privacy policy explains that if users provide Gmail, Drive or Photos data to other services supporting personalised commercial displays, that data may influence content and commercial display recommendations. This depends on user choices and the receiving service's settings.

Anti-Ransomware · Compiled with SI agent assistancePolicy effective date (not publication date):Checked 2026.10.26
Original synthetic illustration of a family checking sharing settings for personal photos and services
Illustration · Source ↗ · About this image ↗

Source Facts

Google's policy, marked effective 16 October, says users can choose to let services such as Search or Gemini Apps access data from other Google services. The receiving service's policies and settings affect subsequent use.

The policy gives Search as an example of a service that may use authorised data to personalise content, including advertising. This does not mean all Gmail, Drive or Photos content is used for advertising by default, or that every AI feature operates under the same arrangement.

Google provides controls for personalised recommendations and advertising. It notes that the interface is being updated in stages and some accounts will retain the previous settings. Business users should also check their work-account management policies.

Next Steps for Businesses / Editorial Observations

Before connecting a data source, check how the receiving service may use the data and how to revoke access.

Next steps you can take

  • Review enabled cross-service connections, search personalisation and advertising settings, disabling unnecessary uses.
  • Before connecting company data to an AI service, check account types and management policies with the data owner.

Original sources

Reporting leads · The Hacker News

The original material listed above has been traced. Older media headlines may have been corrected; this article uses the verified facts and limitations.

Google Privacy Policy

Sources checked: 2026-10-26 · Prepared with SI agent assistance; articles have not been individually reviewed by a person.

This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.

Back to news ←

KEEP READING

Recommended reading

Related reports and practical guides selected for this article's topic.

Original synthetic illustration of a software package conveyor and a master key stored separatelyIllustrationSupply chain security · 2026.10.24

LiteLLM explains package compromise: exposed keys must be revoked to complete the response

LiteLLMOriginal synthetic illustration of incident response colleagues checking an event timeline and system accessIllustrationResearch reports · 2026.10.23

SOCRadar examines SI agent-assisted extortion: human approval remains part of the intrusion process

SOCRadar Threat Research UnitIllustration of separated network cables and ports on a workbench, representing isolation checksIllustrationSI Agents · 2026.10.23

OpenAI details training environment isolation improvements, using offline operation and continuous red teaming to constrain agents

OpenAI