Is Gemini Safe? Gemini Privacy for Accountants

It depends: Gemini has stronger privacy protections on a qualifying Google Workspace account than on a personal account. The account determines how Google handles client material.

For your practice’s wider rules on sharing client information, use the AI privacy guide. Start by separating approved work accounts from staff members’ personal accounts.

Is Gemini Safe for Client Material?

Gemini can suit approved client work through a qualifying Workspace account. A personal Gemini account with Keep Activity on allows human review and use of chats to improve Google’s services.

Google’s Workspace service terms prohibit using customer data to train or fine-tune its Workspace generative AI models without the customer’s prior permission or instruction.

The Workspace privacy hub also says content is not human reviewed or used for model training outside your domain without permission. These commitments apply to qualifying Workspace editions.

Have your administrator confirm the signed-in account and its service coverage before approving client use. Paying for a personal Google AI subscription does not establish that your practice’s Workspace agreement covers that account.

For example, a staff member can have a work browser profile and a personal profile open together. Approving Gemini in the work profile leaves the personal profile subject to its own terms.

Approve a defined task and the information it needs. A request to shorten a generic reminder needs no client attachment. A client-file summary requires approval for the actual file and account involved.

Gemini Apps Activity and Human Review

Personal Gemini privacy settings include Keep Activity, within Gemini Apps Activity. Google’s Gemini Apps privacy hub says some chats receive human review to improve services or address safety issues.

Activity auto-deletes after 18 months by default. You can choose three months, 36 months or indefinite retention. Reviewed chats can remain for up to three years, separately from your account, even after activity deletion.

Turning Keep Activity off stops future chats being used to train Google’s AI models unless you submit feedback. Chats still remain with your account for up to 72 hours for service delivery and protection purposes.

Turning the setting off is therefore insufficient grounds to approve identifiable client files in a personal account.

Follow Google’s activity-setting instructions for a personal account:

1. Open Gemini and confirm the account shown in your profile.
2. Open Settings & help, then Activity.
3. Select On, then Turn off. Use Turn off and delete activity if you also intend to remove existing activity.
4. Return to Activity and confirm Keep Activity is off.

Workspace administrators manage work-account history settings. The Gemini app’s history is separate from conversations inside Workspace apps, so deleting one history does not establish that every conversation has been removed.

Gemini in Gmail and Drive

Gemini retrieves relevant Workspace content that the signed-in user has permission to access. It can use email or document content to answer a prompt, including material the user can already open in shared folders.

Correct broad sharing before approving Gemini for client work. A folder accessible to the whole practice gives Gemini a wider set of possible sources than a folder restricted to the relevant staff.

Administrators can manage access to the Gemini app separately from Gemini features inside supported Workspace apps. They also choose conversation-retention settings. Decide both availability and retention for the staff doing the work.

Google’s Workspace Intelligence settings let administrators disable individual services as sources for active background searches. However, disabling Drive as a source still allows users to ask about an explicitly linked file or an open document.

Use source settings alongside file permissions. Where your edition supports them, restrictions on copying or downloading also stop Gemini retrieving restricted Drive content. Turning off background searches alone does not block every route to a file.

Record the approved account, permitted task and retention choice in your staff procedure. For practices using Microsoft 365 instead, the Copilot privacy guide explains the corresponding account distinction.