Google can now target ads with Gmail, Drive and Photos data
Google's October 16 privacy policy lets Gmail, Drive and Photos data shape personalized ads if you connect them to Gemini or Search. Here's what to check.
Google quietly changed one sentence in its privacy policy, and it matters if your business runs on Gmail. The policy used to say Google does not show you personalized ads based on your Gmail, Drive, or Photos content. As of October 16, that sentence has an exception: unless you make that data available to other Google services that support personalized ads. In practice, that means Gmail, Drive, and Photos data can now shape ads if you connect those apps to Gemini or Search through Personal Intelligence.
What actually happened
Google's privacy policy, effective October 16, 2026, now reads that Google doesn't show personalized ads based on Drive, Gmail, or Google Photos content "unless you choose to make data from these services available to other Google services that support personalized ads." The policy still says Google does not personalize ads on sensitive categories such as race, religion, sexual orientation, or health.
9to5Google reports that the change ties to Personal Intelligence, the Gemini feature that started rolling out in beta in January and lets Gemini pull from Gmail, Photos, Search, and Drive. Personal Intelligence is opt-in for now. The settings live under My Account > Data & privacy > Personalization settings. 9to5Google also notes that advertisers still don't get your name or email address without permission.
Why the Gmail ad targeting change matters for your business
Your inbox is business data. Invoices, supplier quotes, customer complaints, payroll PDFs. If an owner or employee turned on Personal Intelligence on a personal Gmail used for work, that content now feeds more than an assistant.
Connecting an AI assistant is a data decision. We said this about Google's small business hub this week, and it applies here too. Every "connect your apps" button widens what the vendor can use. Read the policy line it triggers, not the onboarding screen.
Personal accounts are the gap. Many small teams run on personal Gmail and shared passwords. A managed business account with an admin console gives you one place to set the rules. Personal accounts give you none.
Key takeaways
- Google's October 16 privacy policy lets Gmail, Drive and Photos data inform personalized ads if you share it with ad-supported services
- The trigger is connecting those apps to Gemini or Search via Personal Intelligence, which is opt-in for now
- Sensitive categories such as health and religion stay excluded from ad personalization
- Check Personalization settings on every Google account your team uses for work
- Move business email off personal Gmail accounts so an admin sets the rules
Want AI that reads your inbox without selling against it? We build assistants on your own accounts and APIs, scoped to the data they need, with logs you can read. See how we build private AI workflows, or talk to us about moving your team off personal accounts.
Sources: Google Privacy Policy, 9to5Google.
- #privacy
- #gemini
- #gmail
- #ai-assistants
Tommy Rush — Founder, Rush Commerce
Operator turned builder. 15+ years running operations — now shipping the systems businesses run on. More
Get The Rush Report weekly — one email, zero fluff.
Keep reading
Cortex XDR One: inventory the AI agents on your laptops
Palo Alto's Cortex XDR 6.0 and XDR One find AI agents, MCP servers and plugins on endpoints and block bad actions. Here's the inventory to start today.
Read itDayforce buys Ribbon AI voice interviewer: audit the defaults
Dayforce is acquiring Ribbon AI, a voice AI interviewer with 1M+ completed interviews. 90% of customers run its default setup. Check yours before you hire with it.
Read it