Explicit training on user data (business content, website data, prompts) with no opt-out. Google Customer Match use uploads customer data to Google Ads for advertising targeting. Agentic risk: manages live business websites with SEO, blog, and brand features. Vague security documentation for a company holding live website data. Some user reviews raised concerns about website ownership clauses.
Output IP fully assigned to user. Canadian legal jurisdiction (more privacy-protective than many US states). Defined 7-day deletion window post-account-deletion request. Google Workspace API data explicitly excluded from training. No major security incidents publicized.