gjalla logogjalla
Talk to us

AI data policies

Google (Gemini)

What Google (Gemini) keeps, for how long, whether it trains on it, and what rights you grant, for Gemini Apps (consumer, signed in), Gemini API and Google AI Studio, Unpaid Services (free tier), Gemini API and Google AI Studio, Paid Services (Cloud billing), Gemini Enterprise Agent Platform (formerly Vertex AI) on Google Cloud. Each answer quotes Google (Gemini)'s own policy.

Type Model maker Policies captured 2026-11-08 4 documents read How this is made

Gemini Apps (consumer, signed in) Consumer app

Default retention How long prompts and chats are kept

Stated Saved activity auto-deletes after 18 months by default (changeable to 3 or 36 months, or never). Temporary chats and chats with Keep Activity off are kept 72 hours.

What the policies say (3 quotes)

"You can [change your auto-delete setting](/gemini?p=pn_auto_delete) in Gemini Apps Activity from the default of 18 months to 3 months, 36 months, or indefinite."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Your activity is auto-deleted after 18 months. You can change this to 3 or 36 months, or choose not to auto-delete."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Temporary chats and chats you have when [Keep Activity](https://myactivity.google.com/product/gemini?utm_source=help) is off are retained with your account for 72 hours"

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08
After you delete How long until it is gone

Stated You can delete chats anytime, but human-reviewed chats aren't deleted, and some usage data stays until account deletion. No deletion timeframe is given; backup copies may lag.

What the policies say (5 quotes)

"You can also [manually delete](/gemini?p=pn_delete_activity) your Gemini Apps chats anytime."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Chats reviewed by human reviewers (and related data like your language, device type, location info, or feedback) are not deleted when you delete your activity."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"We keep some data until you delete your Google Account, such as information about how often you use Gemini Apps."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"When you delete data, we follow a deletion process to make sure that your data is safely and completely removed from our servers or retained only in anonymized form."

Privacy Policy \u2013 Privacy & Terms \u2013 Googlepolicies.google.comcaptured 2026-11-08

"Because of this, there may be delays between when you delete something and when copies are deleted from our active and backup systems."

Privacy Policy \u2013 Privacy & Terms \u2013 Googlepolicies.google.comcaptured 2026-11-08
Kept longer when Safety flags, legal holds, backups

Stated Human-reviewed chats and reviewed feedback are kept up to 3 years, unlinked from you. Some data is kept longer for security, abuse or legal reasons (no duration given).

What the policies say (4 quotes)

"Chats reviewed by human reviewers (and related data like your language, device type, location info, or feedback) are not deleted when you delete your activity. Instead, they are retained for up to three years."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Reviewed feedback, associated conversations, and related data are retained for up to 3 years, disconnected from your Google Account."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"We retain some data for longer when necessary for legitimate business or legal purposes, such as security, fraud and abuse prevention, or financial record-keeping."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Deleting your Gemini Apps activity does not delete data saved in those other services."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08
Zero data retention Whether it exists and who can get it

Inferred Inferred: no zero-retention option exists. Even temporary chats and chats with Keep Activity off are kept 72 hours with your account and may be human-reviewed for safety.

What the policies say (2 quotes)

"Temporary chats and chats you have when [Keep Activity](https://myactivity.google.com/product/gemini?utm_source=help) is off are retained with your account for 72 hours and used to:"

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Even if your Keep Activity setting is off or you use temporary chats, Google still uses your chats to respond to you and help protect Google, our users, and the public, including with help from human reviewers."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08
Trains on your data By default

Inferred Inferred: with Keep Activity on, chats train Google's generative AI models; the hub never says outright that it's on by default. Audio and Live video/screenshares are excluded by default.

What the policies say (3 quotes)

"Google uses your activity to provide, develop, and improve its services (including training generative AI models), as well as to protect Google, its users, and the public with the help of human reviewers."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Your audio and Gemini Live videos and screenshares aren’t used to improve Google services by default."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"These uses extend to the generative AI models and other machine-learning technologies powering our services."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08
Opting out How, and what it doesn't cover

Stated Turn off Keep Activity or use temporary chats. Not covered: feedback you send, chats already reviewed, and anonymized data Google makes from chats. Audio/Live training is a separate opt-in.

What the policies say (5 quotes)

"Your future chats won’t appear in your Activity, and won’t be used to train our AI models, unless you choose to send Google feedback."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Temporary chats are not used to train Google’s AI models."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Your Gemini settings don’t control processing of your chats to create anonymized data to improve Google services."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"If you delete your activity, past chats already reviewed by service providers aren’t deleted because they aren’t connected to your Google Account."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"You can choose to let Google use your audio and Gemini Live videos and screenshares to improve its services for everyone in [Gemini Apps Activity](https://myactivity.google.com/product/gemini?utm_source=help)."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08
Human review Whether people read conversations

Stated Yes. Reviewers, including service providers, read a subset of chats unlinked from your account, kept up to 3 years. Safety review continues with Keep Activity off or temporary chats.

What the policies say (5 quotes)

"A subset of chats are reviewed by human reviewers (including Google’s trained service providers) to help improve Google services."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Chats are disconnected from your account before being sent to service providers."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Reviewed chats are retained for up to three years."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Even if your Keep Activity setting is off or you use temporary chats, Google still uses your chats to respond to you and help protect Google, our users, and the public, including with help from human reviewers."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Human review is necessary to help identify, address, and report potential problems raised in feedback."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08
Memory Remembered facts and profiles

Stated Gemini remembers facts and past chats; you can view, edit, delete or turn off Memory summary. Saved instructions persist until deleted. Imported memory and chats are used for training.

What the policies say (6 quotes)

"Depending on eligibility and your settings, you can use memory summary to view, edit, and delete what Gemini Apps understands about you."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"You can also turn memory Summary on or off at any time."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Gemini Apps use your instructions ("Saved info" in some regions) to customize your experience and help you get things done, like completing scheduled actions and tasks. This data remains saved until you choose to delete it."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Gemini may use sensitive info you provided in your chats to personalize your experience."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"To stop Gemini from personalizing your experience using info from a past chat, [delete that chat](/gemini/answer/13278892)."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Data (memory and chats) that you import from other AI platforms is saved in your Activity. This data is used consistently with your Gemini Apps activity, including to improve our services (including training generative AI models), and to protect Google, our users and the public."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08
Connected apps Email, calendar, drive

Stated Gemini saves and uses Connected App content (emails, files, photos), including to improve Gemini. Disconnecting doesn't delete it from Gemini Apps Activity. Google doesn't monitor or secure custom MCP apps.

What the policies say (6 quotes)

"Gemini saves and uses info from Connected Apps according to this notice, including to provide and improve Gemini Apps."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Info and content from your Connected Apps (like emails, files, events, photos, and videos)"

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Disconnecting an app or deleting data in a connected app doesn’t delete any data from [Gemini Apps Activity](https://myactivity.google.com/product/gemini?utm_source=help)."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Apps retain data that Gemini shares with them subject to their own policies. Deleting data in Gemini Apps Activity doesn’t delete data that other apps have received from Gemini."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Google does not monitor or secure data from custom third-party Connected Apps."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"You may choose to allow certain Google services, including services like Search or Gemini Apps, to access data from other Google services you use, such as Google Photos and Workspace apps like Gmail and Drive, in order to provide you with a more personalized experience, subject to the policies and settings of the accessing service."

Privacy Policy \u2013 Privacy & Terms \u2013 Googlepolicies.google.comcaptured 2026-11-08
Agent actions Actions taken, browsing, credentials

Stated Remote browser keeps login cookies; remote computer keeps files and code. Delete them in Task settings or by turning off task mode; Keep Activity doesn't. Screen-automation screenshots may be human-reviewed.

What the policies say (9 quotes)

"**Remote browser:** Gemini processes information from your browser session, like cookies that contain your website authentication info, and page content."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"**Remote computer:** Gemini saves and executes .md files, code, and other information related to your tasks."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"You can delete this data at any time in [your Task settings in Gemini](https://gemini.google.com/gemini-spark)."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Turning off Keep Activity or deleting Gemini Apps activity doesn’t impact [your remote browser and remote computer data and settings](https://gemini.google.com/gemini-spark)."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Your [remote browser data and remote computer data](https://gemini.google.com/gemini-spark) is deleted."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Screenshots are reviewed by trained reviewers and used to improve Google services if [Keep Activity](https://myactivity.google.com/product/gemini?utm_source=help) is on."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"We don’t use these audio recordings or transcripts to train Google's AI models."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Transcripts are sent to and securely stored on Google servers. Google does not store your audio recordings on its servers."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Page content will be logged to your Google Account temporarily and will not appear in your Gemini Apps Activity."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08
Your inputs Who owns them

Not stated The hub says the Google Terms of Service apply to Gemini Apps, but those terms weren't captured, so this isn't stated.

Outputs Who owns them

Not stated The hub says the Google Terms of Service apply to Gemini Apps, but those terms weren't captured, so this isn't stated.

License you grant Scope, and whether it is perpetual

Not stated The hub says the Google Terms of Service apply to Gemini Apps, but those terms weren't captured, so this isn't stated.

Sharing Model providers, subprocessors, ads

Stated Chats aren't used for ads; personal info isn't sold. Reviewed chats go to service providers unlinked from you. Tasks share needed data with third parties. Shopping-cart data may feed ads.

What the policies say (8 quotes)

"Your Gemini Apps chats are not being used to show you ads. If this changes, we will clearly communicate it to you."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"We take your privacy seriously, and we do not sell your personal information to anyone."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"Chats are disconnected from your account before being sent to service providers."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"When you ask Gemini to do things for you, Gemini shares necessary data with others on your behalf to help complete your tasks. Third-party apps use data from Gemini consistent with their own privacy policies and terms."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"This data is used in accordance with the Google Terms and Privacy Policy, and your Wallet settings, including for personalization and ads (depending on your settings)."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08

"We do not share your personal information with companies, organizations, or individuals outside of Google except in the following cases:"

Privacy Policy \u2013 Privacy & Terms \u2013 Googlepolicies.google.comcaptured 2026-11-08

"We provide personal information to our [affiliates](/privacy?hl=en-US#footnote-affiliates) and other trusted businesses or persons to process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures."

Privacy Policy \u2013 Privacy & Terms \u2013 Googlepolicies.google.comcaptured 2026-11-08

"We don’t share information that personally identifies you with advertisers, such as your name or email, unless you ask us to."

Privacy Policy \u2013 Privacy & Terms \u2013 Googlepolicies.google.comcaptured 2026-11-08
Where data lives Regions and residency

Stated Data may be processed on Google servers worldwide, outside your country. No residency option is described. Google Ireland provides the app in the EEA and Switzerland.

What the policies say (2 quotes)

"We maintain [servers around the world](/privacy?hl=en-US#footnote-servers) and your information may be processed on servers located outside of the country where you live."

Privacy Policy \u2013 Privacy & Terms \u2013 Googlepolicies.google.comcaptured 2026-11-08

"Gemini Apps are provided by Google Ireland Limited in the European Economic Area and Switzerland and by Google LLC everywhere else."

Gemini Apps Privacy Hubsupport.google.comcaptured 2026-11-08
Enterprise controls Retention settings, DPA, SSO

Not stated Not applicable to the consumer app. The hub says work or school accounts may have different data terms, described in the Workspace privacy hub (not captured).

Gemini API and Google AI Studio, Unpaid Services (free tier) API

Default retention How long prompts and chats are kept

Stated No general retention period is stated for free-tier prompts. Grounding with Search or Maps keeps prompts and output 30 days. Tuning data is kept with the tuned model.

What the policies say (3 quotes)

"when using Grounding with Google Search, Google will store prompts, contextual information that you may provide, and output for thirty (30) days for the purposes of creating Grounded Results and Search Suggestions"

Gemini api termsaistudio.google.comcaptured 2026-11-08

"You acknowledge that it is reasonably necessary for Google to store prompts, contextual information that you may provide, and generated content for thirty (30) days for the purposes of creating Google Maps Grounded Results"

Gemini api termsaistudio.google.comcaptured 2026-11-08

"Tuning content may be retained in connection with your tuned models for purposes of re-tuning when supported models change."

Gemini api termsaistudio.google.comcaptured 2026-11-08
After you delete How long until it is gone

Stated Deleting a tuned model also deletes its tuning content. No deletion timeframe is stated for prompts or responses.

What the policy says

"When you delete a tuned model, the related tuning content is also deleted."

Gemini api termsaistudio.google.comcaptured 2026-11-08
Kept longer when Safety flags, legal holds, backups

Stated Grounding data (30 days) may be used for debugging and testing. Human reviewers may read prompts and outputs; how long reviewed data is kept is not stated.

What the policies say (2 quotes)

"the stored information can be used for debugging and testing of systems that support Grounding with Google Search"

Gemini api termsaistudio.google.comcaptured 2026-11-08

"To help with quality and improve our products, human reviewers may read, annotate, and process your API input and output."

Gemini api termsaistudio.google.comcaptured 2026-11-08
Zero data retention Whether it exists and who can get it

Not stated The Gemini API terms describe no zero-data-retention option for the free tier.

Trains on your data By default

Stated Yes. Free AI Studio and free-quota API prompts and responses are used to improve Google products and machine learning. EEA, Swiss and UK users get paid-tier terms instead.

What the policies say (2 quotes)

"When you use Unpaid Services, including, for example, Google AI Studio and the unpaid quota on Gemini API, Google uses the content you submit to the Services and any generated responses to provide, improve, and develop Google products and services and machine learning technologies, including Google's enterprise features, products, and services, consistent with our [Privacy Policy](https://policies.google.com/privacy)."

Gemini api termsaistudio.google.comcaptured 2026-11-08

"If you're in the European Economic Area, Switzerland, or the United Kingdom, the terms under "[How Google uses Your Data](https://aistudio.google.com/docs/terms#data-use-paid)" in "[Paid Services](https://aistudio.google.com/docs/terms#paid-services)" apply to all Services, including Google AI Studio and unpaid quota in the Gemini API, even though they are offered free of charge."

Gemini api termsaistudio.google.comcaptured 2026-11-08
Opting out How, and what it doesn't cover

Inferred Inferred: no free-tier opt-out is offered. Switching to a paid service stops it: active Cloud billing (API), or billing or a Workspace enterprise account (AI Studio).

What the policies say (3 quotes)

"Your access to Gemini API is a "Paid Service" only when accessing the API through a Cloud Project associated with an active billing account."

Gemini api termsaistudio.google.comcaptured 2026-11-08

"Your access to Google AI Studio is a "Paid Service" even when it is offered free of charge, as long as the account you are using to access Google AI Studio has access to a Cloud Project with an associated and active [Cloud Billing account](https://cloud.google.com/billing/docs/concepts) or is a Workspace enterprise account."

Gemini api termsaistudio.google.comcaptured 2026-11-08

"Google only uses content that you import or upload to our model tuning feature for that express purpose."

Gemini api termsaistudio.google.comcaptured 2026-11-08
Human review Whether people read conversations

Stated Yes. Reviewers may read free-tier input and output after it's disconnected from your account, key and project. Don't submit sensitive data. Review retention length not stated.

What the policies say (3 quotes)

"To help with quality and improve our products, human reviewers may read, annotate, and process your API input and output."

Gemini api termsaistudio.google.comcaptured 2026-11-08

"This includes disconnecting this data from your Google Account, API key, and Cloud project before reviewers see or annotate it."

Gemini api termsaistudio.google.comcaptured 2026-11-08

"**Do not submit sensitive, confidential, or personal information to the Unpaid Services.**"

Gemini api termsaistudio.google.comcaptured 2026-11-08
Memory Remembered facts and profiles

Not stated The captured policies are silent on this.

Connected apps Email, calendar, drive

Not stated The captured policies are silent on this.

Agent actions Actions taken, browsing, credentials

Stated For agentic services such as the Computer Use API, the developer is solely responsible for the agent's actions and data access. Action logging and credential storage are not described.

What the policy says

"When using agentic services, including the Computer Use API, you are solely responsible for the actions and tasks performed by the service, such as determining whether the service is appropriate for your use case, authorizing the service's access and connection to data, applications, and systems, and exercising judgment and supervision when and if the service is used in production environments."

Gemini api termsaistudio.google.comcaptured 2026-11-08
Your inputs Who owns them

Not stated The terms don't address ownership of your inputs. They only describe the license you grant (see license_to_provider).

Outputs Who owns them

Stated Google won't claim ownership of generated content, but it may generate the same or similar content for others. You're responsible for how it's used.

What the policies say (2 quotes)

"Some of our Services allow you to generate original content. Google won't claim ownership over that content. You acknowledge that Google may generate the same or similar content for others and that we reserve all rights to do so."

Gemini api termsaistudio.google.comcaptured 2026-11-08

"You're responsible for your use of generated content, and for the use of that content by anyone you share it with."

Gemini api termsaistudio.google.comcaptured 2026-11-08
License you grant Scope, and whether it is perpetual

Stated For free services, the Google APIs Terms license extends to your prompts, files and responses 'to the extent required under applicable law'. Duration and perpetuity aren't in the captured policy.

What the policy says

"The license you grant to Google under the "[Submission of Content](https://developers.google.com/terms#b_submission_of_content)" section in the API Terms also extends, to the extent required under applicable law for our use, to any content (e.g., prompts, including associated system instructions, cached content, and files such as images, videos, or documents) you submit to the Services and to any generated responses."

Gemini api termsaistudio.google.comcaptured 2026-11-08
Sharing Model providers, subprocessors, ads

Inferred Inferred: free-tier data use follows the Google Privacy Policy, which lets affiliates and trusted processors handle data for Google. No API-specific subprocessor list is given.

What the policies say (2 quotes)

"consistent with our [Privacy Policy](https://policies.google.com/privacy)"

Gemini api termsaistudio.google.comcaptured 2026-11-08

"We provide personal information to our [affiliates](/privacy?hl=en-US#footnote-affiliates) and other trusted businesses or persons to process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures."

Privacy Policy \u2013 Privacy & Terms \u2013 Googlepolicies.google.comcaptured 2026-11-08
Where data lives Regions and residency

Inferred Inferred via the Privacy Policy: data may be processed on servers worldwide. Apps serving EEA, Swiss or UK users must use paid services only.

What the policies say (2 quotes)

"We maintain [servers around the world](/privacy?hl=en-US#footnote-servers) and your information may be processed on servers located outside of the country where you live."

Privacy Policy \u2013 Privacy & Terms \u2013 Googlepolicies.google.comcaptured 2026-11-08

"**You may use only Paid Services when making API Clients available to users in the European Economic Area, Switzerland, or the United Kingdom.**"

Gemini api termsaistudio.google.comcaptured 2026-11-08
Enterprise controls Retention settings, DPA, SSO

Not stated The captured policies describe no DPA, custom retention or admin controls for the free tier.

Gemini API and Google AI Studio, Paid Services (Cloud billing) API

Default retention How long prompts and chats are kept

Stated Prompts and responses are logged for a 'limited period' (length not stated) only for abuse detection and legal disclosures. Grounding with Search or Maps keeps data 30 days.

What the policies say (2 quotes)

"For Paid Services, Google logs prompts and responses for a limited period of time, solely for detecting and preventing violations of the [Prohibited Use Policy](https://policies.google.com/terms/generative-ai/use-policy) to maintain the safety and security of the Services, and any required legal or regulatory disclosures."

Gemini api termsaistudio.google.comcaptured 2026-11-08

"when using Grounding with Google Search, Google will store prompts, contextual information that you may provide, and output for thirty (30) days for the purposes of creating Grounded Results and Search Suggestions"

Gemini api termsaistudio.google.comcaptured 2026-11-08
After you delete How long until it is gone

Not stated The paid-service terms give no deletion timeframe.

Kept longer when Safety flags, legal holds, backups

Stated Abuse-monitoring logs (period unstated) and legal or regulatory disclosures. 30-day grounding data may be used for debugging and testing, under the processor DPA.

What the policies say (2 quotes)

"For Paid Services, Google logs prompts and responses for a limited period of time, solely for detecting and preventing violations of the [Prohibited Use Policy](https://policies.google.com/terms/generative-ai/use-policy) to maintain the safety and security of the Services, and any required legal or regulatory disclosures."

Gemini api termsaistudio.google.comcaptured 2026-11-08

"When using Grounding with Google Maps via paid quota of Gemini API, this processing for debugging and testing of systems is in accordance with the [Data Processing Addendum for Products Where Google is a Data Processor](https://business.safety.google/processorterms/)."

Gemini api termsaistudio.google.comcaptured 2026-11-08
Zero data retention Whether it exists and who can get it

Not stated The Gemini API terms describe no zero-data-retention option. (The Agent Platform page covers ZDR for Cloud customers; see vertex-enterprise.)

Trains on your data By default

Stated No. On paid services Google doesn't use your prompts, files or responses to improve its products, and processes them as a data processor under the DPA.

What the policy says

"When you use Paid Services, including, for example, the paid quota of the Gemini API, Google doesn't use your prompts (including associated system instructions, cached content, and files such as images, videos, or documents) or responses to improve our products, and will process your prompts and responses in accordance with the [Data Processing Addendum for Products Where Google is a Data Processor](https://business.safety.google/processorterms/)."

Gemini api termsaistudio.google.comcaptured 2026-11-08
Opting out How, and what it doesn't cover

Stated No opt-out is needed for prompts and responses. Account, billing, feedback and usage data are not covered by this and stay under Google's controller terms and Privacy Policy.

What the policies say (3 quotes)

"Google doesn't use your prompts (including associated system instructions, cached content, and files such as images, videos, or documents) or responses to improve our products"

Gemini api termsaistudio.google.comcaptured 2026-11-08

"Other data we collect while providing the Paid Services to you, such as account information and settings, billing history, direct communications and feedback, and usage details"

Gemini api termsaistudio.google.comcaptured 2026-11-08

"remains subject to the [Google Controller-Controller Data Protection Terms](https://business.safety.google/controllerterms/) and [Google Privacy Policy](https://policies.google.com/privacy) referenced in the API Terms."

Gemini api termsaistudio.google.comcaptured 2026-11-08
Human review Whether people read conversations

Not stated The paid section doesn't mention human reviewers. Abuse-monitoring logs exist, but whether people read them isn't stated.

Memory Remembered facts and profiles

Not stated The captured policies are silent on this.

Connected apps Email, calendar, drive

Not stated The captured policies are silent on this.

Agent actions Actions taken, browsing, credentials

Stated For agentic services such as the Computer Use API, the developer is solely responsible for the agent's actions and data access. Action logging and credential storage are not described.

What the policy says

"When using agentic services, including the Computer Use API, you are solely responsible for the actions and tasks performed by the service, such as determining whether the service is appropriate for your use case, authorizing the service's access and connection to data, applications, and systems, and exercising judgment and supervision when and if the service is used in production environments."

Gemini api termsaistudio.google.comcaptured 2026-11-08
Your inputs Who owns them

Not stated The terms don't address ownership of your inputs.

Outputs Who owns them

Stated Google won't claim ownership of generated content, but it may generate the same or similar content for others.

What the policy says

"Some of our Services allow you to generate original content. Google won't claim ownership over that content. You acknowledge that Google may generate the same or similar content for others and that we reserve all rights to do so."

Gemini api termsaistudio.google.comcaptured 2026-11-08
License you grant Scope, and whether it is perpetual

Not stated The extended content license appears only in the Unpaid Services section. The paid-tier license is in the Google APIs Terms, which weren't captured.

Sharing Model providers, subprocessors, ads

Inferred Inferred: prompts and responses are handled under Google's processor DPA and may be cached wherever Google 'or its agents' have facilities. No subprocessor list is in the captured policy.

What the policy says

"This data may be stored transiently or cached in any country in which Google or its agents maintain facilities."

Gemini api termsaistudio.google.comcaptured 2026-11-08
Where data lives Regions and residency

Stated No residency guarantee: paid-tier logged data may be stored transiently or cached in any country where Google or its agents have facilities.

What the policy says

"This data may be stored transiently or cached in any country in which Google or its agents maintain facilities."

Gemini api termsaistudio.google.comcaptured 2026-11-08
Enterprise controls Retention settings, DPA, SSO

Stated Prompts and responses are processed under Google's Data Processing Addendum (Google as processor). Billing runs through Google Cloud. No SSO, audit-log or custom-retention controls are described.

What the policies say (2 quotes)

"will process your prompts and responses in accordance with the [Data Processing Addendum for Products Where Google is a Data Processor](https://business.safety.google/processorterms/)"

Gemini api termsaistudio.google.comcaptured 2026-11-08

"Billing and payments for Paid Services are handled by [Cloud Billing](https://cloud.google.com/billing/docs/concepts) in the Google Cloud Platform."

Gemini api termsaistudio.google.comcaptured 2026-11-08

Gemini Enterprise Agent Platform (formerly Vertex AI) on Google Cloud Enterprise

Default retention How long prompts and chats are kept

Stated No single default. Data is kept for limited periods in listed cases. Gemini models cache data by default (deleted within 24h). Interactions API stores prompts and conversation state by default.

What the policies say (4 quotes)

"Customer data is retained in Gemini Enterprise Agent Platform for Models as a Service (MaaS) for limited periods of time in the following scenarios and conditions."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"By default, Google's published Gemini models cache Customer Data to reduce latency and accelerate responses."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"It's deleted no later than 24 hours after it's written."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"If you do not specify a value for `store`, it defaults to `true` for all models."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08
After you delete How long until it is gone

Stated Cache data is deleted within 24 hours. Agent sessions (CodeMender, Deep Research) auto-delete at a 7-day TTL and can be deleted sooner. No account-closure timeline is given.

What the policies say (3 quotes)

"It's deleted no later than 24 hours after it's written, and is often evicted sooner."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"When a session reaches a terminal state, source code and related content are cleared within seconds; the remaining session record is deleted automatically at the seven-day TTL."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"Customers can delete a session (removing all associated data) before the TTL expires."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08
Kept longer when Safety flags, legal holds, backups

Stated Abuse-monitoring prompt logging (duration not stated here). Search grounding queries up to 3 days, Maps grounding 30 days, neither can be disabled. OpenAI models: logs up to 30 days.

What the policies say (4 quotes)

"Google may log prompts to detect potential abuse and violations of its [Acceptable Use Policy](https://cloud.google.com/terms/aup) and [Prohibited Use Policy](https://policies.google.com/terms/generative-ai/use-policy) as part of providing generative AI services to customers."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"queries derived from End User prompts and contextual information that Customer may provide along with the prompts that are not associated with any Customer or its End Users for up to three (3) days"

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"Google stores prompts and contextual information that customers may provide, and generated output for thirty (30) days for the purposes of creating grounded results"

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"By default, Google Cloud logs prompts, file inputs, and responses for up to 30 days in Google-owned storage in the `us` multi-region for safety and abuse monitoring."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08
Zero data retention Whether it exists and who can get it

Stated Requires your action: no request-response logging, store=false, no grounding, Deep Research or Sandbox captured policies, caching off. May be impossible with some Advanced AI features; OpenAI models need approval.

What the policies say (5 quotes)

"To achieve zero data retention, customers must take specific actions within each of these areas:"

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"To achieve zero data retention, explicitly set `store = false` in your API requests."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"Zero data retention may not be possible when using some Advanced AI features. Please contact your account team for clarification."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"Zero Data Retention (ZDR) is available for OpenAI flagship models on an approved project basis, but is disabled by default."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"Your account team submits the ZDR request for OpenAI review and approval."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08
Trains on your data By default

Stated No. Google won't use your data to train or fine-tune any model without your permission or instruction. This covers all managed models, GA and pre-GA.

What the policy says

"Google won't use your data to train or fine-tune any AI/ML models without your prior permission or instruction. This applies to all managed models on Gemini Enterprise Agent Platform, including GA and pre-GA models."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08
Opting out How, and what it doesn't cover

Stated No opt-out needed: training requires your prior permission. Cached data and OpenAI-model logs are also never used for training.

What the policies say (2 quotes)

"It's used only to serve your requests faster, and is never used to train or fine-tune models."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"Customer data is never used to train or fine-tune models."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08
Human review Whether people read conversations

Not stated The page doesn't say whether people review abuse-monitoring logs.

Memory Remembered facts and profiles

Not stated No persistent memory or profile feature is described. (The Interactions API's stored conversation state is under default_retention.)

Connected apps Email, calendar, drive

Not stated The captured policies are silent on this.

Agent actions Actions taken, browsing, credentials

Stated CodeMender stores session data (code, diffs) encrypted up to 7 days. Deep Research stores prompts and session data 7 days, unavoidably. Sandbox captured policies last the Sandbox TTL.

What the policies say (4 quotes)

"While a scan is in progress, session data — including target source code snippets, diffs, configuration, and analysis checkpoints — is stored encrypted for up to seven (7) days from session creation."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"Google stores prompts and session data - including search results and generated images - via the Interactions API for a period of seven (7) days."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"This feature cannot be disabled when using the Deep Research agent."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"If you use the Snapshot API to persist Sandbox state, these snapshots are stored only for the duration of the Sandbox TTL."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08
Your inputs Who owns them

Not stated The captured policies are silent on this.

Outputs Who owns them

Not stated The captured policies are silent on this.

License you grant Scope, and whether it is perpetual

Not stated The captured policies are silent on this.

Sharing Model providers, subprocessors, ads

Not stated Not stated. The page notes OpenAI reviews ZDR requests for its models, but doesn't say whether customer prompts reach OpenAI or other partners.

Where data lives Regions and residency

Stated Regional or multi-regional endpoints keep durable cache data in the chosen location. The global endpoint can serve from any region. OpenAI-model abuse logs are kept in the US multi-region.

What the policies say (3 quotes)

"It stays within the selected location and adheres to its Data Residency requirements when you use a regional or multi-regional endpoint. When you use the global endpoint, requests and their cached data can be served from any region."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"It's processed in the region that serves the request."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"By default, Google Cloud logs prompts, file inputs, and responses for up to 30 days in Google-owned storage in the `us` multi-region for safety and abuse monitoring."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08
Enterprise controls Retention settings, DPA, SSO

Stated Cloud Data Processing Addendum. Admins can disable caching per project (org-wide via account team). Request-response logging is opt-in. CMEK isn't supported for durable caching.

What the policies say (5 quotes)

"More details about how Google processes data can also be found in Google's [Cloud Data Processing Addendum](https://cloud.google.com/terms/data-processing-addendum) (CDPA)."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"If your organization's policy does not permit Customer Data to be stored at rest, you can [disable durable caching on a per-project basis](#enabling-disabling-caching) and maintain in-memory caching. Alternatively, you can disable caching entirely."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"To disable durable caching across your organization rather than on a project level, contact your account team."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"To run this command, a user must be granted the Agent Platform Administrator role, `roles/aiplatform.admin`."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

"Customer-managed encryption keys (CMEK) aren't supported for durable caching."

Gemini Enterprise Agent Platform and zero data retention \u00a0docs.cloud.google.comcaptured 2026-11-08

Notes

Open questions

Questions the captured policies leave unanswered, and where the answer probably lives.

Documents read