The Gemini API on the unpaid tier

The document exists. The ledger fetched it at its publisher and quotes it.

Record ID

AVD-2026-0010

Kind

API and platform

Jurisdiction

United States

Last verified

15 September 2026

Added

15 September 2026

• On unpaid services Google uses submitted content and generated responses to provide, improve and develop Google products and services.
• Human reviewers may read, annotate and process API input and output on the unpaid tier.
• The terms tell developers not to submit sensitive, confidential or personal information to the unpaid services.
• Only paid services may be used when making API clients available to users in the European Economic Area, Switzerland or the United Kingdom.

Used for training by default, Retention period, Deletion on request, Storage region and residency, Subprocessor list published, Human review of content, Opt out available, DPA available, Persistent memory across sessions, Last change to the terms. Stated means the document you can open below says it; silent means the ledger read the document and it does not.

Used for training by defaultStated

Yes. Google uses the content you submit and any generated responses to provide, improve and develop Google products and services on the unpaid tier.Google, Gemini API additional terms of service, primary source, 23 March 2026.

Retention periodStated

No period is printed for the improvement use. Grounding with Google Search stores prompts, context and output for thirty days on both tiers.Google, Gemini API additional terms of service, primary source, 23 March 2026.

Deletion on requestStated

When you delete a tuned model the related tuning content is also deleted. No broader deletion commitment is printed for unpaid tier logs.Google, Gemini API additional terms of service, primary source, 23 March 2026.

Storage region and residencyStated

No residency commitment. The terms instead bar the unpaid tier for clients serving the European Economic Area, Switzerland or the United Kingdom.Google, Gemini API additional terms of service, primary source, 23 March 2026.

Subprocessor list publishedSilent

No list appears in these terms. The Google Cloud subprocessors register applies through the Cloud terms, not through this document.Google, Gemini API additional terms of service, primary source, 23 March 2026.

Human review of contentStated

Yes. Human reviewers may read, annotate and process your API input and output, after it is disconnected from the account.Google, Gemini API additional terms of service, primary source, 23 March 2026.

Opt out availableStated

None on this tier. The stated remedy is to move to paid quota, and the terms warn against submitting sensitive, confidential or personal information.Google, Gemini API additional terms of service, primary source, 23 March 2026.

DPA availableSilent

Not on this tier. The data processing addendum for products where Google is a data processor is named for the paid services.Google, Gemini API additional terms of service, primary source, 23 March 2026.

Persistent memory across sessionsSilent

No memory feature is named. Caching is referenced only as content covered by the licence grant.Google, Gemini API additional terms of service, primary source, 23 March 2026.

Last change to the termsStated

The Gemini API additional terms print Effective 23 March 2026, with a footer line of Last updated 28 April 2026.Google, Gemini API additional terms of service, primary source, 23 March 2026.

1. 30 days

   Storage of prompts and output under grounding with Google Search

   Google, Gemini API additional terms of service, primary source, as of 23 March 2026.

Free quota is the single most common route by which confidential text leaves an organisation without anyone signing anything. The distinction is contractual, not technical: the same endpoint behaves differently depending on whether the project is billed. If your developers prototype on free keys, your policy should say that prototypes carry no confidential data, because on this tier a human reviewer may read the prompt and there is no way to switch that off.

1. Google, Gemini API additional terms of servicePrimary · 23 March 2026

• VerifiedAPI and platformAVD-2026-0011

  The paid Gemini API and Vertex AI

  United States · verified 15 September 2026

  On paid services Google states it does not use prompts, system instructions, cached content or files, or responses to improve its products.

• VerifiedConsumer tierAVD-2026-0008

  The Gemini app on a personal Google account

  United States · verified 15 September 2026

  Google states that a subset of chats is reviewed by human reviewers, including trained reviewers from its service providers.

• Open questionOpen questionAVD-2026-0028

  Does a promise not to train on your data cover the safety classifiers?

  Global · verified 15 September 2026

  OpenAI's enterprise page says business data may be run through automated content classifiers and safety tools, with the classification kept as metadata rather than content.

• VerifiedAPI and platformAVD-2026-0026

  Amazon Bedrock

  United States · verified 15 September 2026

  Amazon Bedrock uses a zero data retention security model, so by default it does not store model inputs or outputs.

• VerifiedBusiness tierAVD-2026-0025

  GitHub Copilot Business and Enterprise

  United States · verified 15 September 2026

  GitHub states it does not use Copilot Business or Copilot Enterprise customer data to train AI models.

• VerifiedBusiness tierAVD-2026-0024

  Cursor and its privacy mode

  United States · verified 15 September 2026

  The terms of service state that Cursor will not use content to train any AI models unless you have explicitly agreed.