Google Gemini · Gemini Apps Privacy Notice

Gemini Extensions Third-Party Data Access

High severity
Share 𝕏 Share in Share 🔒 PDF
Watch Google Gemini Get alerts when this provision or policy changes.
Watch — $9.99/mo

Why it matters (compliance & risk perspective)

Enabling extensions dramatically expands the scope of data Gemini can access and potentially retain, including highly personal email content, documents, and calendar entries that users may not consider 'AI conversation data.'

Consumer impact (what this means for users)

Using Google Gemini means your conversations — including any personal details you share — are stored for up to 3 years and may be read by Google employees for safety and quality purposes. Your chat history being deleted from your account does not necessarily stop Google from retaining associated data for AI training, which is a significant privacy implication many users would not anticipate. You can limit data retention by visiting myactivity.google.com, navigating to Gemini Apps Activity, and changing or disabling the auto-delete settings.

How other platforms handle this

Salesforce Medium

We may share your Personal Data as follows: Service providers; Salesforce affiliates; event sponsors; partners; customers with whom you are affiliated and/or the applicable partner responsible for access to your services; contest and promotion sponsors; third-party networks and websites; Salesforce-...

Anthropic Medium

We and our service providers use cookies, scripts, or similar technologies ('Cookies') to manage the Services and to collect information about you and your use of the Services. These technologies help us to recognize you, customize or personalize your experience, market additional products or servic...

Shopify Medium

We may disclose your personal information in response to a subpoena, search warrant, court order, or other request for information by a government authority, or when we believe disclosure is necessary to prevent physical harm or financial loss, to report suspected illegal activity, or to investigate...

See all platforms with this clause type →

This clause could change without notice.

Get alerted when Google Gemini updates this policy — with plain-language summaries and severity ratings.

Watch Google Gemini Need compliance memos? Professional →
View original clause language
If you choose to connect Gemini extensions, Gemini can retrieve and display information from other Google products or third-party services on your behalf. For example, if you use the Gmail extension and ask Gemini to summarize your emails, Gemini will access your Gmail to retrieve relevant content and include it in the response. The content from these services may be included in your Gemini conversations and saved to your Gemini Apps Activity.

Applicable regulations

BIPA
Illinois, USA
CCPA/CPRA
California, USA
COPPA
United States Federal
CAN-SPAM
United States Federal
DMA
European Union
FCRA
United States Federal
GDPR
European Union
GLBA
United States Federal
HIPAA
United States Federal
UK GDPR
United Kingdom

Provision details

Document information
Document
Gemini Apps Privacy Notice
Entity
Google Gemini
Document last updated
April 29, 2026
Tracking information
First tracked
April 9, 2026
Last verified
April 9, 2026
Record ID
CA-P-002311
Document ID
CA-D-00326
Evidence Provenance
Source URL
Wayback Machine
SHA-256
ab465f10e542a5b169b41a5ee957bfd2a68173d61a01b73ea5e8c11a31cf030a
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Google Gemini | Document: Gemini Apps Privacy Notice | Record: CA-P-002311
Captured: 2026-04-09 09:06:18 UTC | SHA-256: ab465f10e542a5b1…
URL: https://conductatlas.com/platform/google-gemini/gemini-apps-privacy-notice/gemini-extensions-third-party-data-access/
Accessed: May 4, 2026
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Don't miss changes to this clause.

Google Gemini has updated this policy before. Get alerted on the next change.

Watch Google Gemini

Frequently Asked Questions

What does Google Gemini's Gemini Extensions Third-Party Data Access clause do?

Enabling extensions dramatically expands the scope of data Gemini can access and potentially retain, including highly personal email content, documents, and calendar entries that users may not consider 'AI conversation data.'

Is ConductAtlas affiliated with Google Gemini?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Google Gemini.