LlamaIndex updated its privacy policy to add a new section describing how it handles data from Google Workspace API connections. The updated terms state that when users connect Google Drive, LlamaIndex accesses file content and metadata as Customer Content, uses it to provide services like synchronization and indexing, does not use it to train AI models, does not sell it to data brokers, encrypts it in transit and at rest, and limits access to authorized personnel. Users can disconnect Google Drive at any time, though previously synced data is not automatically deleted.
The updated policy establishes explicit protections for data accessed through Google Workspace API connections. LlamaIndex states it will not use this data to train generalized AI models, will not sell it to data brokers or information resellers, will encrypt it in transit and at rest, and will limit access to authorized personnel and service providers. Users can disconnect Google Drive at any time to stop data access, though previously synced data remains in LlamaIndex services unless separately deleted.
→ Review the Google Workspace API data section to understand how your Google Drive data is accessed and processed.
→ Disconnect Google Drive in LlamaIndex settings if you no longer wish LlamaIndex to access your Google Drive files.
Establishes explicit commitments not to use Google Workspace data for AI model training, not to sell it to data brokers, and to encrypt it in transit and at rest.
Users can disconnect Google Drive to stop data access, though previously synced data is not automatically deleted.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
LlamaIndex added a dedicated section governing Google Workspace API data handling, establishing specific commitments around AI training restrictions, data broker prohibitions, encryption, and access controls. This change may reflect compliance considerations under GDPR (lawful basis …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-X-005677.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
Get alerted when this policy changes again, including what changed and why it matters.