TL;DR
- The policy is dated 16 October 2026 and replaced a version that took effect on 1 October 2026, fifteen days earlier.
- The no-ads line for Drive, Gmail and Photos first appeared in the 1 July 2021 version and ran unchanged for about five years.
- Ad personalization can now draw on 'personalized content from Google services', a third basis next to interests and activity.
- The policy adds no advertiser targeting, segments or reports, keeps the sensitive-categories rule, and names no countries.
Google's privacy policy, in the version effective 16 October 2026, now says that data from Gmail, Drive and Google Photos can help personalize ads when a user chooses to make that data available to other Google services, such as Search through Personal Intelligence. The sentence Google added in July 2021, "We don't show you personalized ads based on your content from Drive, Gmail, or Photos", is still there, with "Photos" now written "Google Photos", but it now ends with an exception: "unless you choose to make data from these services available to other Google services that support personalized ads." Advertisers are not given anyone's emails or photos, and the policy names no countries or launch dates.
What changed in Google's privacy policy on 16 October 2026
The current text of the Google Privacy Policy carries the line "Effective October 16, 2026". Google's archive page lists the previous version as 1 October 2026, so the new wording replaced a version that had been live for fifteen days. The changes sit in the section titled "Provide personalized services, including content and ads".
The first change is a new permission sentence. The policy now reads: "You may choose to allow certain Google services, including services like Search or Gemini Apps, to access data from other Google services you use, such as Google Photos and Workspace apps like Gmail and Drive, in order to provide you with a more personalized experience, subject to the policies and settings of the accessing service." The next sentence ties that access to advertising: "For example, Search may process some of the data that you allow Search to access to personalize content, including ads."
The second change widens the general description of ad personalization. In the 1 October 2026 version, Google wrote that "we may also show you personalized ads based on your interests and activity across Google services." The 16 October version says "based on your interests, activity, or personalized content from Google services." Personalized content is now listed as its own basis for ads, next to interests and activity.
The third change is the one that drew coverage. The bullet that read "We don't show you personalized ads based on your content from Drive, Gmail, or Photos" now reads "We don't show you personalized ads based on your content from Drive, Gmail, or Google Photos, unless you choose to make data from these services available to other Google services that support personalized ads."
Google also added a short explanatory note, linked from the words "personalize content". It says: "If you choose to allow certain services to process data from other services, including for features such as Personal Intelligence, the same data may be used to personalize your experience." Its example is a hotel booking: if a user asks Search about a recent booking, Search may use details from an email to suggest things to do near the hotel. The note itself does not mention ads. The sentence it hangs from does.
Old wording against new wording
The table below sets the 1 October 2026 text next to the 16 October 2026 text, quoted from Google's current policy and its archived previous version.
| Policy passage | 1 October 2026 version | 16 October 2026 version |
|---|---|---|
| Basis for personalized ads | "your interests and activity across Google services" | "your interests, activity, or personalized content from Google services" |
| Drive, Gmail and Photos bullet | "We don't show you personalized ads based on your content from Drive, Gmail, or Photos." | Same sentence, with "Photos" now "Google Photos", plus "unless you choose to make data from these services available to other Google services that support personalized ads." |
| Cross-service access | No sentence about Search or Gemini Apps accessing other services | Search or Gemini Apps may access Google Photos, Gmail and Drive data if the user chooses |
| Sensitive categories | No personalized ads based on race, religion, sexual orientation or health | Unchanged |
How long the old promise lasted
The Drive, Gmail and Photos bullet first appears in the version of the policy effective 1 July 2021. It is absent from the 4 February 2021 version, and the 1 October 2026 version still carried it word for word. That gives the unconditional form of the promise a run of a little over five years.
PPC Land, in an analysis by Luis Rijo published on 23 October 2026, compared the 16 October text with the earlier versions in Google's archive, which goes back to 1999, and found no earlier carve-out of this kind. The same piece says The Verge reported the change that day and linked it to Personal Intelligence, the opt-in feature that lets Google tools draw on a user's own emails, photos and files.
What is new compared with the AI Mode ads test
Relevant Audience covered the commercial side of this thread on 20 October 2026, in a post headed "Google tests ads in AI Mode for users who connect Gmail and Photos through Personal Intelligence". That story rested on Google's statement that it was starting to test ads in AI Mode for those users, and on a Search help page saying that summaries, excerpts and inferences drawn from connected apps "may be used to show you ads".
The new element is the privacy policy itself. A help page explains how one feature works. The privacy policy is the document Google points to for what it does with data across all of its services. Until 16 October, the policy still said in plain terms that Drive, Gmail and Photos content was not used for personalized ads. It now carries the exception in the same place, which means the ads test and the policy no longer pull in different directions.
What the policy does not say
The new wording is short, and it leaves a lot open. Reading the current policy closely, these points are not stated anywhere in it:
- Which countries or languages the exception applies to. The policy is a single global document and names no markets for Personal Intelligence or for ads.
- Whether ads are, or will be, shown inside Gemini Apps. The policy names Gemini Apps as a service that may access other services' data, but its advertising example only describes Search processing data "to personalize content, including ads".
- What form the data takes when it reaches ad selection: raw content, summaries or inferences. The 20 October help page talked about summaries, excerpts and inferences; the policy does not.
- Whether My Ad Center gains any new control. The policy still says "You can control what information we use to show you ads by visiting your ad settings in My Ad Center", the same line as before.
- Anything about advertiser tools, audience segments, bidding or reporting.
What advertisers actually get from this
Advertisers get no new data from this. The policy keeps its statement that Google does not share information that personally identifies a user with advertisers, "such as your name or email, unless you ask us to." Nothing in the 16 October text describes a new targeting option, a new audience list, or a new report for campaigns.
Analysis: if this has any effect on campaigns, it will sit inside Google's own ad selection rather than in anything an advertiser can buy or switch on. For a user who has opted in, the context Search builds from a booking email or a photo library could be one more input when Google picks which ad to show. An advertiser would not be able to see that it happened, and the policy offers no way to measure it. Reading the change as a new targeting lever overstates it. It is better read as Google widening the signals its own systems are allowed to use, for a subset of signed-in users who chose to connect their apps.
The scale is also unknown. Personal Intelligence is opt-in, and Google has not published how many people have connected Gmail or Photos to Search. Without that number, nobody outside Google can estimate how much ad traffic is affected.
What to check in your own account
None of this requires an action today. A few checks are still worth doing:
- Look at whether AI Mode traffic is visible in your reporting at all, and keep watching Google's own announcements for any AI Mode ad formats or controls in your market.
- Review the privacy notice on your own site if it describes how Google advertising works. Sentences copied from Google's older wording, such as a flat claim that email content is never used for ads, may now be out of date.
- Keep landing pages and product data clear and specific. If Google's systems match ads to richer personal context, pages that state plainly what is offered are easier to match.
For broader help with campaign structure, Relevant Audience's Google Ads management team can review an account against these changes.
Why the AI search angle matters
Analysis: this change appears tied to AI search rather than classic keyword ads. The policy's example is Search processing data a user allowed it to access, and the explanatory note names Personal Intelligence. Both point at AI Mode and similar answer features, where Google composes a response from many sources, including, for opted-in users, their own content. Brands that want to be present in those answers, organically or through ads, need content that answer engines can read and cite. That is the focus of generative engine optimization, which is a separate job from bidding.
What this means for Thai marketers
For Thai advertisers, the honest position is that the policy does not say whether this applies in Thailand. The privacy policy is published as one global text, and it names no markets. Relevant Audience's 20 October post noted that Google's help page, as read that day, listed Thailand and the Thai language among supported settings for connecting content apps, but Google has not said which markets its AI Mode ads test covers. Until it does, plan budgets on what is confirmed, and treat any claim that Thai campaigns can now "target Gmail users" as wrong.
Privacy expectations are also worth watching. Thai consumers who connect Gmail or Photos to Search have opted in under Google's settings, but brands still carry their own reputation. Ad copy that sounds as if it knows what is in someone's inbox is a risk, whatever the mechanics underneath.
Google's Search Help article on connecting Google content apps, the page cited in RA's 20 October post on the AI Mode ads test, says ads "will not be based directly on your Gmail inbox or your Google Photos library".
FAQ
Does Google now read my Gmail to show me ads?
Only if you choose to make Gmail data available to another Google service that supports personalized ads, such as Search through Personal Intelligence. Without that choice, the policy still says Google does not show personalized ads based on your content from Drive, Gmail or Google Photos.
When did the privacy policy change take effect?
The new version is effective 16 October 2026, according to the date printed on Google's policy page. It replaced the version dated 1 October 2026.
Can advertisers see users' emails or photos?
No, the policy does not give advertisers access to user content. It keeps the statement that Google does not share information that personally identifies you, such as your name or email, with advertisers unless you ask it to.
Is this live in Thailand?
The policy does not say. It is one global document and names no countries, and Google has not stated which markets its AI Mode ads test for Personal Intelligence users covers.
Do advertisers need to change anything?
No action is required, because the policy adds no new targeting setting or report. It is worth reviewing any privacy text on your own site that repeats Google's older wording about email content and ads.
The bottom line
A five-year-old line in Google's privacy policy now has a condition attached. For users who connect Gmail, Drive or Google Photos to services like Search, the content those services draw on can shape the ads they see. For advertisers, nothing new is on offer, and the scale is unknown. If you want a second view on how AI Mode and these policy changes fit your search plans, the Relevant Audience team is happy to talk it through.
