content/manuals/ai/gordon/concepts/data-privacy.md
{{< summary-bar feature_name="Gordon" >}}
This page explains what data Gordon accesses, how it's used, and what privacy protections are in place.
When you use Gordon, the data it accesses depends on your query and configuration.
When you use the docker ai command, Gordon can access files and directories
on your system. The working directory sets the default context for file
operations.
In Docker Desktop, if you ask about a specific file or directory in the Gordon view, you'll be prompted to select the relevant context.
Gordon integrates with Docker Desktop and can view all images in your local image store. This includes images you've built or pulled from a registry.
Gordon has access to your Docker daemon's state, including:
Gordon's data retention differs based on your subscription tier:
Docker and its AI providers do not retain any inputs or outputs from your Gordon sessions. Your queries, Gordon's responses, and any code or files processed are not stored.
Conversation threads are stored for 30 days to improve the service. Individual queries and responses are retained as part of your conversation history.
Data is never used for training AI models or shared with third parties. All data transferred to Gordon's backend is encrypted in transit.
Your data is protected through encryption in transit. For paid subscriptions, no persistent storage occurs—Gordon processes your requests and discards the data immediately.
For questions about privacy terms and conditions, review Gordon's Supplemental Terms.
For Business subscriptions, administrators can control Gordon access for their organization using Settings Management.
Available controls:
Administrators should review their organization's data handling requirements before enabling Gordon.
See Settings Management for configuration details.
You can disable Gordon at any time:
Individual users:
Business organizations:
Administrators can disable Gordon for the entire organization using Settings Management. See Settings Management for details.
For questions about Docker's privacy practices: