Proven intentional data retention after deletion in Google AI Studio – official GDPR complaint submitted to the DPO

[Bitu79]

During the past weeks I have performed multiple fully documented tests inside my own Google account, and the results are now absolutely undeniable:

Google AI Studio does NOT delete user prompts, even after:

• deleting the prompt inside AI Studio,

• emptying the Google Drive Trash,

• and the system claiming that “no data remains.”

Despite this, the official Google Drive Recovery Tool can fully restore the supposedly deleted prompt, and the restored file immediately continues the previous AI session.

This is technically impossible unless Google never deletes the server‑side session data.

This is not a bug.
This is not a misunderstanding.
This is intentional, systemic data retention.

What this proves:

• The JSON file stored in Drive is NOT the actual chat.

• The AI Studio backend keeps the entire session alive even after “permanent deletion.”

• Restoring the JSON only re‑links the frontend to the already existing server‑side data.

• Therefore, the deletion process shown to the user is misleading and not real.

Evidence provided:

• uncut videos of the delete → trash empty → restore → session continuation process

• Google Drive Activity logs showing permanent deletion followed by successful restoration

• official Google recovery confirmation emails

• archived forum discussions documenting the issue

Official GDPR complaint submitted

Because this behavior violates GDPR Articles 5, 12, 17, and 25, I have submitted a formal GDPR complaint and a mandatory data access request (Article 15) to the Google Data Protection Officer.

I included the full evidence package and demanded:

• disclosure of all server‑side session data retained after deletion

• explanation of the retention mechanism

• legal basis for keeping deleted data

• identification of all systems, indexes, caches, and logs storing the data

• official acknowledgment that the “deleted” session was never deleted

Developers: you are required to respond

This issue is not theoretical.
It is not speculative.
It is proven, reproducible, and documented.

I expect a developer‑level response, not user‑level speculation, and not deflection to Drive documentation.
This is an AI Studio backend issue, not a Drive UI misunderstanding.

Below I attach the exact letter I sent to the Google DPO.

Evidence uploaded to the Internet Archive:

https://archive.org/details/kepernyokep-2026-06-12-054539/Képernyőkép%202026-06-12%20034525.png

[Bitu79]

https://web.archive.org/web/20260612035758/https://discuss.ai.google.dev/t/proven-intentional-data-retention-after-deletion-in-google-ai-studio-official-gdpr-complaint-submitted-to-the-dpo/170944

[Bitu79]

Google copied my deletion logic text, but they did it wrong, and the way their system works completely contradicts what the interface claims. The “Delete” button promises that the prompt will be permanently deleted after 30 days, but this is false. If I don’t empty the trash, the chat continues to work with the link for the full 30 days, which means the prompt is not deleted at all. If I do empty the trash, the UI lies and says “no such prompt”, but that is also false, because the JSON can still be restored for another 25 days using Google’s own recovery tool. The reality is that the prompt remains on the server for a total of 55 days: 30 days in the trash while the chat still works, and another 25 days after the trash is emptied during which it can still be restored. This means Google keeps claiming the deletion is permanent while the server continues to retain the data. Renaming the button doesn’t fix anything, because the underlying logic is still wrong and unlawful. Deletion is not deletion, the interface is misleading, and the actual behavior is provably the opposite of what they claim.

[Bitu79]

https://web.archive.org/web/20260612092728/https://discuss.ai.google.dev/t/proven-intentional-data-retention-after-deletion-in-google-ai-studio-official-gdpr-complaint-submitted-to-the-dpo/170944