Google AI Studio incorrectly deletes user data

A security researcher discovered a critical vulnerability in Google AI Studio related to the data deletion process, it was found that when the delete button is pressed the system does not erase the information from the servers, but only moves the local .json file to the Google Drive trash, such an approach allows you to restore deleted data and reload them into the working environment, an attempt to report this error through the Vulnerability Reward Program (VRP) led to the automatic blocking of the researcher's account within 60 seconds, the incident caused a wide resonance in the Hacker News community, where users discuss the risks of privacy when working with cloud AI tools, the technical implementation of deletion turned out to be formal: files retain their integrity and availability to the account owner even after executing the "delete" command, this raises questions about the platform's compliance with data processing standards, especially in the context of training models on user content, the situation highlights the problems of automated moderation systems and vulnerability reporting in large technology companies, the lack of transparency in data deletion processes creates risks for users who trust cloud services with confidential information.