Google Quietly Opens the Door to Ads Built From Your Emails and Photos

Google Quietly Opens the Door to Ads Built From Your Emails and Photos

One new clause ends the hands-off era for inbox and library

Google has revised its privacy policy to add an exception with big implications: if you choose to make data from Drive, Gmail, or Google Photos available to other Google services that support personalized ads, the company may use that data for ad targeting. The previous wording was a flat promise that it would not do that. The new language, added on October 16, was spotted by Android Authority and amplified by The Verge days later.

Google's defense: summaries and inferences, not raw emails

In its Search help documentation, Google draws a fine line: ads will not be based "directly" on your Gmail inbox or Photos library, but Search may reference summaries, excerpts, and inferences drawn from them. Google's own example is telling: AI Mode scans emails and photos for a hotel booking, a flight itinerary, and restaurants visited on past trips, then summarizes them to recommend spots near the hotel. That same distilled profile can now shape the ads shown alongside. Google is not handing raw messages to advertisers, but it is monetizing the patterns pulled from them.

From a March no-ads pledge to October ad tests

Back in March 2026, Google told users there were no ads for people who linked their apps to AI Mode. On October 17, Google confirmed to Search Engine Land that it is testing ads in AI Mode for users who connect apps through Personal Intelligence. The reversal took about half a year. The vehicle is Personal Intelligence, the personalization layer behind AI Mode and other Search tools: connect Gmail and Photos, get sharper answers, and now, sharper ad targeting built on the same permission.

Only connected users are exposed, but consent was blurry

The carve-out applies solely to people who linked Workspace apps or Google Photos into Search's AI features. Everyone else is untouched. The catch is that linking is often a one-tap step taken while chasing a new feature, and few users likely grasped that "help AI understand me" and "help ads understand me" run on the same authorization. Google says advertisers never see the underlying files or identifiers such as name and email address, and sensitive categories including race, religion, and health remain off-limits for targeting. Still, the inference layer is where the commercial value lives.

You can disconnect, yet what Google kept stays kept

Users can opt out through their Google Account: Data and privacy, then Personalization settings, then Manage Personalized Recommendations in Search Services, where Connected Content apps under Additional Personal Intelligence can be disconnected for Workspace and Photos. Personalized ads can also be switched off separately in My Ad Center. But as SammyGuru notes, Google retains data it already saved even after an app is disconnected, so opting out stops the flow without erasing the past. What to watch next: whether the summaries-for-ads logic spreads from Search to the Gemini app, and whether regulators ask the awkward question of what users thought "connect" actually meant.