Google Gemini · Gemini Apps Privacy Notice · View original document ↗

Third-Party Extension Data Sharing

High severity Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Google Gemini recorded 3 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Google Gemini Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

If you connect third-party extensions to Gemini (such as apps from other companies), your conversation content relevant to those extensions may be shared with those third parties.

This analysis describes what Google Gemini's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Connecting extensions dramatically expands the number of companies that can access your Gemini conversation data, beyond just Google, and each third party has its own privacy policy.

Recent Activity

This document changed recently

Medium May 21, 2026

The updated notice adds new disclosure sections explaining how data flows when using Gemini Spark (remote browser and computer access), how avatar creation collects and processes information, and clarifies that Google collects information about AI reasoning steps during task execution. The notice also refines language around subscription information to specify 'Google AI plan' rather than just generic 'paid subscription.' These changes do not establish new obligations but rather expand the transparency disclosures provided to users about existing and new features.

View change record →
Medium Apr 30, 2026

The updated notice now explicitly identifies Memory as a feature that operates on the basis of user consent, alongside Voice Match. The revised language removes prior geographic restrictions on personalization, meaning Gemini can now reference chat history to generate personalized insights for all users globally, not just those outside the EEA, Switzerland, and the UK. The removal of the statement 'Keep Activity must be on to use this feature' simplifies the operational requirement but does not establish a new obligation. You can learn how to turn the Memory feature on or off through the updated privacy notice.

View change record →
Medium Mar 27, 2026

The updated privacy notice now discloses that Gemini can use data from connected Google apps and imported memory or chats from other AI platforms to personalize your experience and to improve services, including training generative AI models. This data is treated similarly to other Gemini activity. You can manage or delete your imported activity anytime through the Activity controls.

View change record →

Consumer impact (what this means for users)

When you use Gemini, Google collects your conversations, location, device data, and feedback, and may use this to train AI models and allow human reviewers to read your chats. Your conversation history is stored for up to 3 years by default, even if you delete it from your view, with some data retained for up to 18 months in separate review logs. You can turn off Gemini Apps Activity at myaccount.google.com to stop your conversations from being used for AI model training.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    Open Gemini, go to Settings, select Extensions, and review all connected third-party integrations. Revoke access to any extensions you no longer use or do not trust.

Cross-platform context

See how other platforms handle Third-Party Extension Data Sharing and similar clauses.

Compare across platforms →

Monitoring

Google Gemini has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

Third-party data sharing through extensions creates downstream data controller/processor relationships that must be governed by data processing agreements under GDPR Article 28. Compliance teams must assess whether Gemini extension integrations constitute unauthorized data transfers under applicable privacy frameworks.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has jurisdiction over inadequate disclosure of third-party data sharing practices and unfair data handling by connected app ecosystems.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
DMA
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Gemini Apps Privacy Notice
Entity
Google Gemini
Document last updated
May 5, 2026
Tracking information
First tracked
March 20, 2026
Last verified
March 20, 2026
Record ID
CA-P-00326004
Document ID
CA-D-00326
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
a1c750d23c5fa30248c0ca3082a60e98578018886540127e534d8dd99916fab8
Analysis generated
March 20, 2026 06:37 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Google Gemini
Document: Gemini Apps Privacy Notice
Record ID: CA-P-00326004
Captured: 2026-03-20 06:37:24 UTC
SHA-256: a1c750d23c5fa302…
URL: https://conductatlas.com/platform/google-gemini/gemini-apps-privacy-notice/third-party-extension-data-sharing/
Accessed: June 10, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Google Gemini's Third-Party Extension Data Sharing clause do?

Connecting extensions dramatically expands the number of companies that can access your Gemini conversation data, beyond just Google, and each third party has its own privacy policy.

Is ConductAtlas affiliated with Google Gemini?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Google Gemini.