If you connect third-party extensions to Gemini (such as apps from other companies), your conversation content relevant to those extensions may be shared with those third parties.
Connecting extensions dramatically expands the number of companies that can access your Gemini conversation data, beyond just Google, and each third party has its own privacy policy.
Third-party data sharing through extensions creates downstream data controller/processor relationships that must be governed by data processing agreements under GDPR Article 28. Compliance teams must assess whether Gemini extension integrations constitute unauthorized data transfers under applicable privacy frameworks.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
When you use Gemini, Google collects your conversations, location, device data, and feedback, and may use this to train AI models and allow human reviewers to read your chats. Your conversation history is stored for up to 3 years by default, even if you delete it from your view, with some data retained for up to 18 months in separate review logs. You can turn off Gemini Apps Activity at myaccount.google.com to stop your conversations from being used for AI model training.