In the US a service provider is allowed to violate all manners of privacy for the express limitation of ensuring maintenance and system health. Spam blocking would qualify as maintenance, but advertising would not. I suspect Google violates all manners of privacy in an automated way for all manners of reasons and qualifies such in their terms and conditions.