Google updates its privacy policy to allow Gmail, Drive, and Photos data to shape personalized ads for users opted into Personal Intelligence and AI Mode.

For years, Google maintained a relatively firm boundary regarding the most intimate corners of its ecosystem. The company explicitly stated that content from Gmail, Google Drive, and Google Photos was off-limits for personalized advertising. This firewall provided a layer of psychological security for millions of users who trusted these services as private repositories for their digital lives. However, a policy update enacted on October 16 has introduced a critical exception that fundamentally alters this dynamic.

The revised language now specifies that Google does not show personalized ads based on content from these services unless the user chooses to make that data available to other Google services that support personalized ads. This shift is not a random administrative tweak but a strategic alignment with the rollout of Google's AI-driven ecosystem, specifically the Personal Intelligence feature.

The mechanism of Personal Intelligence

Personal Intelligence, launched as a Labs experiment in January 2026, is designed to transform the search experience from a generic query-response model into a highly contextual personal assistant. By allowing Gemini and AI Mode in Search to pull data from connected apps, the AI can provide answers tailored to the user's actual life. For instance, if a user asks for restaurant recommendations, the AI might analyze past reservations found in Gmail to suggest a venue that fits the user's known preferences.

While the utility of such a feature is evident, the cost is a significant expansion of the data available for ad targeting. When a user opts into this integration, they are effectively granting Search and Gemini permission to process their private documents and emails. Google has confirmed that it is already testing AI Mode ads for users who have enabled these connections. This means the very context that makes the AI helpful is now being leveraged to make the advertising more precise.

How your inbox becomes an ad signal

A crucial distinction exists in how Google describes this process. The company asserts that ads are not based directly on the raw content of a Gmail inbox or a Photos library. Instead, the system utilizes summaries, excerpts, and inferences. If the AI identifies a pattern of interest—such as a series of emails about hiking gear—it can create an inference about the user's hobbies, which then triggers relevant ads in AI Mode.

To mitigate privacy concerns, Google has outlined several safeguards. The company states that advertisers do not get access to the actual files in Drive, the text of emails in Gmail, or the images in Photos. Furthermore, personally identifying information, such as names or email addresses, is not shared with advertisers. Google also maintains a ban on using sensitive categories for ad personalization, specifically excluding data related to health, religion, race, or sexual orientation.

A strategic pivot in the AI race

This policy shift reflects the broader tension facing big tech companies: the need to provide "magical" AI experiences that require deep data integration versus the need to maintain user trust and regulatory compliance. By making the data sharing opt-in, Google attempts to shift the responsibility to the user. The trade-off is explicit: in exchange for a more intelligent, personalized AI assistant, the user accepts that their private data will inform the commercial signals Google sells to advertisers.

The timing is particularly notable as Google competes with other LLM providers. To make Gemini a truly indispensable tool, it must have access to the user's personal knowledge graph. Integrating connected apps is the most efficient way to achieve this. However, by dismantling the firewall between productivity tools and the ad engine, Google is returning to a practice it had largely abandoned after 2017, when it stopped scanning free Gmail accounts for ad targeting.

The divide between global markets

Interestingly, this new capability is not being deployed uniformly across the globe. While it is available for eligible Google AI Pro and Ultra subscribers in the U.S., there is a stark geographical divide. The feature, and the accompanying data-sharing mechanism for ads, is currently not available in the European Union, the United Kingdom, or Switzerland.

This exclusion is almost certainly a response to the stringent data protection regimes in those regions. The ability to draw inferences from private emails to serve ads would likely face intense scrutiny from regulators who view such processing as high-risk. For now, the "AI-powered ad" experiment is primarily a North American venture, creating a fragmented user experience where privacy protections vary based on the user's GPS coordinates.

The updated policy keeps the statement that Google doesn't use Drive, Gmail, or Photos for ads, but adds a pivotal exception for those who connect these services to other Google tools.

Implications for international businesses and entrepreneurs

For entrepreneurs and business owners in the USA and UK, this development signals a shift in how consumer intent is captured. In the US market, the ability for AI to infer needs from personal data means that the "top of the funnel" for lead generation is becoming more invisible and more accurate. Businesses targeting high-net-worth individuals or specific niches may find that AI-driven ads are significantly more effective than traditional keyword targeting, as they are based on actual life events documented in a user's ecosystem.

However, the regulatory landscape remains a minefield. In the UK, businesses must remain mindful that while Google may offer these tools in the US, the UK's data protection standards often mirror the EU's caution. Companies relying on Google's ecosystem for their own marketing strategies should be aware that the data signals available in the US may not be available for their UK or European customers. This creates a "data asymmetry" where marketing campaigns must be designed differently for different regions.

Furthermore, for B2B entrepreneurs, it is important to note that Google has excluded Workspace business, enterprise, and education accounts from this specific Personal Intelligence experiment. This suggests that Google is maintaining a stricter boundary for corporate data than for personal data, likely to avoid legal conflicts with corporate privacy agreements and industry-specific compliance standards. For the global entrepreneur, the lesson is clear: the boundary between personal productivity and commercial monetization is blurring, and the "opt-in" button is the new gateway to a more invasive, yet more efficient, advertising era.

FAQ

---

Sources: Searchenginejournal, Arstechnica, Notebookcheck ·