The relationship between Google, Gmail data, and advertising is changing as of October 16, 2026, but Google does not automatically scan all Gmail inboxes to target ads. The new policy autorizes the advertising use of Gmail, Drive, or Google Photos data when a user chooses to share it with another compatible Google service, notably through connected personalization.
Does Google use Gmail to personalize advertising now?
Google does not automatically use the content of Gmail, Google Drive, or Google Photos to personalize ads. Since October 16, 2026, an exception applies when a user autorizes another Google service compatible with personalized advertising to access this data, in accordance with Google’s privacy policy.
The distinction is essential. The change does not mean that Google automatically analyzes every invoice, photograph, or business exchange to infer an advertising profile. It creates a conditional gateway: data initially stored in Gmail, Drive, or Photos may be used to personalize content, including ads, after user autorization and according to the user’s settings.
Personal Intelligence is a personalization feature that links several Google services to tailor Gemini’s responses and recommendations. In 2026, eligible users with a personal account can connect Google Photos, Google Workspace applications such as Gmail and Drive, YouTube, and Google Search.
Google also indicates that Google Search may process information that the user has given it access to in order to personalize content and, depending on account settings, advertising. The issue therefore lies less with Gmail alone than with the autorized circulation of data between services. This evolution extends a gradual transformation of the Google ecosystem, where search, AI, and personalization are becoming increasingly interconnected.
Is Personal Intelligence available in France and Europe?
Personal Intelligence is not available in the European Economic Area in 2026, according to Google Gemini’s official help documentation. The exclusion therefore covers France and the European Union, as well as Iceland, Liechtenstein, and Norway. The United Kingdom, Switzerland, and Nigeria are also excluded from the rollout.
Saying that it is unavailable “in Europe” lacks precision. The European Economic Area, or EEA, comprises the countries of the European Union plus three additional countries: Iceland, Liechtenstein, and Norway. Switzerland and the United Kingdom are subject to separate exclusions in Google’s 2026 documentation.
For a French small or medium-sized business, the policy change therefore does not immediately activate Personal Intelligence on accounts located in the EEA. It is nevertheless useful to prepare an internal policy. Regional availability may change, while a collaborator working from another region or using an eligible personal account may encounter different settings.
The trap is confusing regional unavailability with a general prohibition. A privacy policy may allow a use before the associated feature is available in your country. Frankly, blocking all experimentation without examining the account type provides less protection than a clear rule distinguishing public, internal, and confidential data.
What data can Gemini retain or use for AI?
With the “Keep Activity” option enabled in 2026, Gemini may retain summaries, excerpts, and inferences from connected emails, files, or photos. Google indicates that these elements may improve its services and train its generative artificial intelligence models, without directly training on the entirety of Gmail, Drive, or Google Photos libraries.
Autorization remains optional: an eligible user can connect all the applications offered, select only some of them, or decline. However, disconnecting an application does not necessarily delete information already stored in Gemini Apps Activity. This is a detail that nontechnical users often ignorre: cutting off future access and deleting existing historry are two different operations.
Google states in 2026 that Gemini conversations are not currently used to display ads. This commitment is narrower than the general provision allowing other Google services to personalize advertising content using autorized data. “Chats are not used for ads” therefore does not mean “no information from a connected service can contribute to personalization.”
Google also states that it does not provide advertisers with directly identifying information, such as a name or email address, unless a user requests an interaction that requires it. This does not make targeting anonymous in the ordinary sense: an advertiser can target an audience defined by interests without receiving the legal identities of the people who make up that audience.
Personal Gmail account or Google Workspace: what protections apply?
A personal Google account and a Google Workspace account under contract are not subject to the same guarantees in 2026. Google states that Workspace customer data is not used to build advertising profiles or to improve Google Ads products. Administrators can also control Gemini's access to Gmail, Drive, and other Workspace sources.
For eligible Google Workspace editions, Google states that Workspace queries and content are not used without autorization to train generative artificial intelligence models outside the customer’s domain. A domain here refers to the organization’s managed environment, associated with its accounts and policies.
| Reviewed point | Eligible personal account | Google Workspace under contract |
|---|---|---|
| Connecting Gmail, Drive, or Photos | User choice in Personal Intelligence | Access controllable by the administrator |
| Advertising profile | Possible use by an autorized service according to settings | Customer data not processed to create an advertising profile |
| Model training | Possible excerpts, summaries, and inferences with “Keep Activity” | No external training on content and queries without permission |
| Conversation retention | Depends on Gemini Apps Activity settings | Administrator choice: 3, 18, or 36 months, or indefinitely; announced default of 18 months |
The Workspace retention periods in the table come from the Google Workspace generative artificial intelligence privacy center, updated in October 2026. They are not a universal rule for all Google accounts. The contract, subscribed edition, and administrator configuration remain decisive.
In the projects we lead, we often see teams purchase professional licenses while continuing to transfer documents to personal Gmail accounts. This workaround negates part of the contractual benefit. The same risk exists with browser extensions, as shown more broadly by the analysis of artificial intelligence assistants integrated into the browser.
What should a company check before connecting Gmail to AI?
Before connecting Gmail, Google Drive, or Google Photos to artificial intelligence, a company must verify the contractual framework, advertising uses, model training, retention, deletion, administrator controls, and regional availability. Third-party integrations must be reviewed separately because Google specifies that they may be subject to different terms.
Serious validation does not stop at the activation button. It brings together management, the IT administrator, and, when personal data are involved, the person responsible for compliance with the General Data Protection Regulation, or GDPR. The documentation must match the service used and its exact edition.
The following checks should be completed before any connection:
- identify whether the account is subject to consumer terms or a Google Workspace contract;
- catalog the accessible sources: Gmail, Drive, Google Photos, YouTube, Google Search, and third-party applications;
- verify whether the data is used for advertising, service improvement, or model training;
- document the retention period and deletion procedure, including after disconnection;
- limit rights to users who have a defined business need;
- test the settings within a scope containing no sensitive data before a broader deployment.
On the agency side, the instinct is to map the data’s journey rather than stop at the provider’s name. An attachment can leave a protected contractual environment when it is copied into a third-party extension. Access security matters just as much; the compromise of technical secrets is a reminder of why it is also necessary to protect the API keys used by AI tools.
At this stage, it is better to authorize a limited use case with controlled data than to connect the entire mail system “to save time.” An internal policy may also prohibit personal accounts for client documents, require integration approval, and provide for a review of the settings of each contractual change.
What impact will this have on advertising and compliance for an SMB?
For an SMB located in the European Economic Area in 2026, the change involving Google, Gmail data, and advertising does not immediately enable Personal Intelligence, but it does change the risk analysis to anticipate. The company must separate its advertising practices, consumer accounts, and Google Workspace environment before authorizing any personalization based on connected data.
From the advertiser's perspective, the new phrasing does not provide access to prospects' emails. It can enrich the personalization carried out by Google in eligible regions without directly revealing the name or email address to the advertiser. A strategy of search visibility combining SEO, advertising, and visibility in AI search engines must therefore not assume that Gmail data becomes a new usable marketing list.
From the employer’s perspective, the main risk comes from scattered authorizations. An employee may connect services without understanding the difference between generating a response, improving the product, training a model, and personalizing advertising. These purposes must be explained separately in the IT policy and the appropriate internal register.
Framing this type of use upstream avoids most unpleasant surprises. An external perspective can help connect the contractual terms, technical settings, and business needs without obstructing useful uses of artificial intelligence.
FAQ about Gmail, Gemini, and Google advertising
Does Google read all my emails to display ads?
In 2026, Google states that it does not use the full content of Gmail by default to personalize ads. Gmail data may nevertheless contribute to personalization if the user authorizes another compatible Google service to access it.
Does disconnecting Gmail from Gemini erase data that has already been saved?
Disconnecting Gmail from Gemini does not necessarily delete information already retained in Gemini Apps Activity in 2026. The user must separately check the activity, retention, and deletion settings.
Does Gemini use conversations to display ads?
Google states in 2026 that Gemini conversations are not currently used to display ads. This commitment does not apply in the same way to all personalized content produced by other Google services.
Does Google Workspace better protect business data?
In 2026, Google Workspace provides distinct contractual guarantees: Google states that it does not use customer data to create advertising profiles or improve Google Ads. Protection nevertheless depends on the edition, administrator settings, and connected third-party applications.