Professional Plan

Policy monitoring infrastructure for compliance, legal, and research teams

Every policy change across 320+ platforms, analyzed with regulatory citations, cross-platform comparisons, and historical version tracking. The archive your team needs to stay ahead of compliance obligations.

$149/month or $1,290/year
Start free trial → Compare plans
Full compliance memo
Not a summary. A memo your team can act on.

Every change record includes a structured compliance memo written for legal and risk teams — with specific regulatory citations, escalation triggers, board language, and a recommended action with deadline.

Google Gemini — Gemini Apps Privacy Notice · March 30, 2026
Medium
Assessment
Google Gemini removed five sentences describing the Connected Apps personalization feature. This affects transparency obligations under GDPR Art. 13 and CCPA §1798.100. Compliance officers with Google Gemini in their vendor stack should verify whether this represents a feature removal or an undisclosed continuation of the same processing activity.
Regulatory Exposure
GDPR Art. 13(1)(c) and 13(2)(b) — removal of purpose description may create transparency gap. CCPA Cal. Civ. Code §1798.100 and §1798.110 — consumers' right to know may be impaired. UK GDPR Art. 13 (retained) — same transparency obligations apply to UK users. FTC Act Section 5 — deceptive practices risk if processing continues without disclosure.
Obligation Change
Organizations with Google Gemini in their vendor stack who referenced Connected Apps personalization in their DPAs or data inventories must update those documents. If the feature continues without disclosure, organizations may face a secondary obligation to update their own privacy notices.
Silence Signal
The removal eliminates the only documented disclosure of how Connected Apps data was used for personalization. What is now absent: the user's opt-in mechanism, the specific data types used, and the processing purpose. Regulators and plaintiff attorneys will note this absence.
Escalation
Escalate to DPO and privacy legal counsel if your organization's privacy notices or data inventories referenced Google Gemini's Connected Apps feature. No emergency action required, but DPO review should be completed before the next scheduled privacy notice review cycle.
Board Language
"Google Gemini removed its documented opt-in personalization feature from its privacy policy on March 30, 2026, creating a transparency gap that may affect our GDPR disclosure obligations; legal and the DPO are reviewing whether our vendor disclosures or DPAs need updating."
Recommended Action
By April 13, 2026: DPO should audit internal RoPA and any vendor DPA with Google to confirm whether Connected Apps personalization is still active. Update any cross-references in internal privacy notices. Confirm with Google's enterprise account team whether this feature has been deprecated.
Ask ConductAtlas — Unlimited
Query 320+ platforms in plain language

Professional subscribers get unlimited queries. Ask anything across the entire archive — no SQL, no filtering, no digging through feeds.

Query: Which platforms changed their data retention policies in Q1 2026?
Based on the ConductAtlas archive, two platforms made material changes to data retention language in Q1 2026:

1. Google Gemini (CA-C-000143) — Modified language around Connected Apps data retention on March 27, 2026. The change removed explicit retention period commitments for personalization data.

2. Stripe (CA-C-000022) — Updated privacy policy on March 16, 2026 to clarify retention schedules for payment processing data under GDPR Art. 5(1)(e) storage limitation requirements.

No other platforms in the archive made explicit data retention changes during this period, though 23andMe (CA-C-000062) made related changes to their data deletion procedures in March 2026.
Records cited
CA-C-000143 CA-C-000022 CA-C-000062
Everything in Professional
Built for compliance teams
Intelligence

Full compliance memo per change

Every change record includes regulatory exposure, silence signal analysis, counterparty exposure, escalation trigger, board language, and recommended action with deadline.

Query

Ask ConductAtlas — unlimited

Query the entire archive in plain language. Cross-platform, cross-time, cross-clause-type. No limits on Professional.

Evidence

Citation-grade records

Every record carries a SHA-256 hash, UTC timestamp, and stable permalink. Citable in filings, board reports, and regulatory submissions.

Export

Clause-level analysis

Before/after clause text for every modified provision. See exactly what changed at the sentence level.

Export

Board-ready briefs

One sentence a compliance officer can read verbatim to a risk committee or board. Ready to copy and send.

Export

PDF export

Download any change record as a formatted PDF for filing, sharing, or archiving.

Export

CSV export

Export your watchlist changes to CSV for import into ServiceNow, Archer, or any GRC platform.

API

API access — 1,000 requests/day

Programmatic access to all records, provisions, and events. Resets midnight UTC. Upgrade to Enterprise for unlimited.

Coverage

320+ platforms monitored

Full watchlist access — monitor as many platforms as you need. No limit on Professional (Watcher is capped at 10).

Analysis

Policy drift reports with date-range filtering

Analyze how any platform's policies evolved over any time period. Filter by date range, export as PDF. Built for quarterly vendor reviews and board presentations.

Analysis

Full obligation audit trail

Complete ledger of every obligation added, expanded, or removed across your watched platforms — with affected party, severity, and plain-language impact.

Intelligence

Cross-platform pattern detection

Full pattern analysis — see every event per pattern, not just the preview. When 7 platforms expand AI training rights in 60 days, you see the complete picture.

Intelligence

Provision registry + clause stability

Browse 4,400+ classified provisions across 320+ platforms. Stability scores show which clauses change most — your volatility signal for vendor risk.

Professional Only

Vendor Risk Surface

Input your vendor stack, see your entire policy risk surface. Cross-vendor patterns, obligation exposure, action items, and exportable quarterly reports — built for board presentations and compliance reviews.

Professional

For individual compliance professionals, privacy counsel, and analysts who need the full picture — not a summary.

$149/mo
or $1,290/year — save 28%
  • Full compliance memo per change
  • Ask ConductAtlas — unlimited queries
  • Unlimited platform monitoring
  • Citation-grade evidence
  • CSV export
  • API — 1,000 requests/day
  • Everything in Watcher included
Get Professional for $149/mo → Try free for 14 days → Need team accounts or custom coverage? See Enterprise →