If a business uploads or processes data on Google Cloud, that data is not covered by this privacy notice. Instead, it is governed by a separate contract between Google and that business.
This analysis describes what Google Cloud's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision means that individuals whose personal data is processed through a Google Cloud-powered application have no direct rights under this public notice; their protections depend entirely on what the deploying business negotiated with Google.
End users of business applications built on Google Cloud cannot rely on this notice to understand how their personal data is handled; the operative rules are contained in a private agreement between the business and Google that is not publicly disclosed in this document.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
It also means we are unable to provide any information about messages in your Revolut Messenger even if you ask us for it.
"This Privacy Notice does not apply to Customer Data — content that customers provide to Google Cloud for processing on their behalf. The handling of Customer Data is instead governed by the applicable agreement between Google Cloud and the customer, which includes data processing terms.Excerpt from Google Cloud's Privacy
REGULATORY LANDSCAPE: This provision directly implicates GDPR Article 28, which requires that processing on behalf of a controller be governed by a binding contract specifying the processor's obligations.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision means that individuals whose personal data is processed through a Google Cloud-powered application have no direct rights under this public notice; their protections depend entirely on what the deploying business negotiated with Google.
End users of business applications built on Google Cloud cannot rely on this notice to understand how their personal data is handled; the operative rules are contained in a private agreement between the business and Google that is not publicly disclosed in this document.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Google Cloud.