It depends entirely on which Google account you are signed in with, and on whether anyone on your team ever presses the thumbs-up or thumbs-down button. On a Google Workspace or Workspace for Education account, Google states that your uploads, queries and model responses are not reviewed by human reviewers and are not used to train AI models. On a personal Google account, that protection holds only until someone submits feedback — at which point the associated content becomes reviewable by trained human teams and is retained for up to three years.
That single distinction is the whole answer, and most internal AI policies written in 2025 do not contain it.
The product changed its name in 2026, and your policy probably still says NotebookLM
Google has renamed NotebookLM to Gemini Notebook. The old help-centre URLs now redirect to support.google.com/gemininotebook, and the terms and privacy article lives at Privacy and Terms of Use in Gemini Notebook.
This matters more than a rebrand normally would. If your acceptable-use policy, vendor register or DPIA names "NotebookLM," you are pointing at a product name Google no longer uses, and any control built on a screenshot of the old interface is unverifiable on audit. The same applies to blocklists and DLP rules keyed to the old branding.
Update the name, re-read the current terms rather than the version you reviewed last year, and note that Google now describes the notebook as part of the Gemini surface — including notebooks appearing inside Gemini Apps and AI Mode in Search. The blast radius of a notebook is wider than it was.
The account tier is the control, and it is not a setting anyone can toggle
There is no privacy switch inside Gemini Notebook that turns confidential mode on. Protection is a property of the account.
Google's documentation is explicit: for Workspace and Workspace for Education users, uploads, queries and responses "will not be reviewed by human reviewers even when you provide thumbs up or down feedback, and will not be used to train AI models." For everyone else, the baseline is that content is not used to directly train Google's foundational models unless you choose to provide feedback.
The terms differ by tier too. Work accounts fall under the Google Workspace Terms of Service; school accounts under the Education terms; Google Cloud access under the Cloud Platform terms; everyone else under the consumer Google Terms of Service. Four different contracts, one identical interface.
Practically, this means a lawyer who signs in with a personal Gmail out of habit — because their work account has not been enabled by an admin — is operating under a materially different agreement while looking at the same screen.
The feedback button is the disclosure event
This is the part that gets missed. The risk in Gemini Notebook is not a background training pipeline quietly ingesting your contracts. It is a one-click UI element.
When a user submits thumbs-up or thumbs-down feedback on a personal account, Google collects "the associated content — like your prompts, customizations, sources, uploads, and the outputs received," and states that this includes any Gemini chats in the notebook context even if Gemini Apps Activity is switched off. That content is reviewed by trained teams, retained for up to three years, and disconnected from the Google Account before review.
Disconnection from an account is a privacy control, not a confidentiality control. A dissociated copy of a client's unfiled complaint is still a copy outside your firm. Google's own guidance asks users not to include confidential or sensitive information in feedback — which is a reasonable request and an impossible one to police, because the feedback payload is the document the user was already working on.
What Gemini Notebook accepts, and what it will not hand back
For anyone considering it as a translation route, the input and output shapes matter as much as the privacy terms.
Gemini Notebook accepts PDFs, websites, YouTube videos, audio files, Google Docs and Google Slides, and supports 80+ languages. Native Word, Excel and PowerPoint files are not on that list — a DOCX contract has to be converted first, and conversion is where numbered clauses, tracked changes and cross-references start to drift.
The outputs are study guides, briefings, mind maps, audio and video overviews, infographics, slide decks and chat responses with inline citations. There is no "download the translated file" among them. You can ask it to render a Japanese share purchase agreement in English and read the result in a chat pane, but you cannot get back a DOCX that a counterparty could redline. That is a research assistant working as designed — it is simply a different job from producing a filed, signed or countersigned document, which is the point we made in more detail on whether NotebookLM keeps document formatting.
Safety filters intercept exactly the material litigators work with
Google documents a specific failure mode worth knowing before a deadline: Gemini Notebook may decline to answer when source content "contains language that triggers a safety flag," including sensitive topics such as violence, sexuality or obscenity — and it notes this "can occur with sensitive topics like violence, sexuality, or obscenity, even in historical contexts."
Read that against a real caseload. Witness statements in an assault matter. Harassment investigation transcripts. Product-liability records describing injuries. Criminal discovery in any language. For many disputes teams, that is not an edge case — it is the corpus.
A refusal is not a data breach, but it carries a confidentiality tail: the predictable response is that someone re-uploads the material somewhere less governed to get the job done. Blocked in the sanctioned tool, processed in the unsanctioned one, is a familiar shadow-IT pattern and the reason law firms handling multilingual discovery build a defined secure route rather than leaving tool choice to the individual.
The duty stays with you regardless of what the vendor promises
Under ABA Formal Opinion 512, issued 29 July 2024, a lawyer using a generative AI tool must remain "cognizant of the duty to keep confidential all information relating to the representation of a client, regardless of its source, unless the client gives informed consent." Model Rule 1.1 adds an obligation to understand the benefits and risks of the technology being used.
The opinion does not prohibit anything. It relocates the burden. "The vendor says it does not train on our data" is not a defence if you never established which of four contracts your users were actually operating under, or whether feedback submission was disabled.
The equivalent logic applies outside the US. Regulated financial teams face the same question from a different rulebook, and the practical shape of the answer — know the tier, know the retention, document the decision — is the same one we set out in how to translate files securely without compromising privacy.
A workable rule for foreign-language material
Three lines, and they fit on a wallet card.
Personal Google accounts: never, for anything client-related, privileged, market-sensitive or under NDA. The feedback path alone makes it indefensible, and the sharing model is built around individuals rather than matters.
Workspace accounts: for orientation only. Getting the gist of a 400-page Korean regulatory file before deciding what actually needs translating is a legitimate and useful thing to do, and the Workspace protections are meaningful. Ask your admin to confirm the service is enabled deliberately rather than by default.
For anything that leaves the building: a purpose-built translation route. If the output will be filed, signed, produced in discovery, sent to a regulator or handed to a counterparty, it needs to be a real file with intact formatting, produced under a contract written for document processing — not a chat transcript you paste into Word.
Where a document translation platform draws the boundary differently
Bluente exists to do the third of those jobs. It is a document translation platform built for lawyers, bankers and consultants who need a file back rather than a conversation: upload a contract, a filing or a board pack in one of 22+ supported file types, get the same document in one of 120+ languages with tables, footnotes, clause numbering and layout intact.
The security posture is drawn to match. Zero data retention, automatic deletion within 24 hours, end-to-end encryption, and documents never used to train models — under SOC 2, ISO/IEC 27001 and GDPR, with a single set of terms rather than one per account tier. There is no feedback button that changes the answer.
That is not a criticism of Gemini Notebook, which is a genuinely good research assistant. It is a boundary. Research tools are built to help you understand documents. Translation infrastructure is built to hand them back.
Related Reading
Sources and Further Reading
Privacy and Terms of Use in Gemini Notebook — Google Help — Google's own statement on feedback collection, human review, the three-year retention window and the Workspace carve-out.
Learn about Gemini Notebook — Google Help — supported source types, 80+ language support, output formats, and the safety-flag behaviour.
Google Workspace Terms of Service — the agreement that applies to qualifying work accounts, as distinct from the consumer terms.
ABA issues first ethics guidance on a lawyer's use of AI tools (Formal Opinion 512) — Model Rules 1.1, 1.4, 1.5 and 1.6 as applied to generative AI.
ISO/IEC 27001 — Information security management systems — the certification standard referenced in vendor security reviews.
SOC 2 — AICPA System and Organization Controls — what a SOC 2 report does and does not cover.
r/Entrepreneurs — "How to Use AI on Confidential Documents Without Violating Client Privacy" — practitioner thread showing the same confusion in the wild: professionals asking which consumer AI tools they can safely point at client files, and getting contradictory answers.
Last reviewed 11 September 2026. Written by the Bluente document engineering team, who build and test the format-preservation pipeline described above. We update these guides when the underlying standards, regulations or file formats change.
Need the file back, not a summary? Bluente translates contracts, filings and board packs across 120+ languages with the layout intact — zero retention, deleted within 24 hours. Start a translation, or talk to our team about your security review.