# Data privacy and Gordon




This page explains what data Gordon accesses, how it's used, and what privacy
protections are in place.

## What data Gordon accesses

When you use Gordon, the data it accesses depends on your query and
configuration.

### Local files

When you use the `docker ai` command, Gordon can access files and directories
on your system. The working directory sets the default context for file
operations.

In Docker Desktop, if you ask about a specific file or directory in the Gordon
view, you'll be prompted to select the relevant context.

### Local images

Gordon integrates with Docker Desktop and can view all images in your local
image store. This includes images you've built or pulled from a registry.

### Docker environment

Gordon has access to your Docker daemon's state, including:

- Running and stopped containers
- Container logs and configuration
- Images and image layers
- Volumes and networks
- Build cache

## Data retention policy

Gordon's data retention differs based on your subscription tier:

### Paid subscriptions (Pro, Team, Business)

Docker and its AI providers do not retain any inputs or outputs from your
Gordon sessions. Your queries, Gordon's responses, and any code or files
processed are not stored.

### Personal (free) subscription

Conversation threads are stored for 30 days to improve the service. Individual
queries and responses are retained as part of your conversation history.

### All subscriptions

Data is never used for training AI models or shared with third parties. All
data transferred to Gordon's backend is encrypted in transit.

## Data security

Your data is protected through encryption in transit. For paid subscriptions,
no persistent storage occurs—Gordon processes your requests and discards the
data immediately.

For questions about privacy terms and conditions, review [Gordon's
Supplemental
Terms](https://www.docker.com/legal/docker-ai-supplemental-terms/).

## Organizational data policies

For Business subscriptions, administrators can enable or disable Gordon for
their organization using Settings Management. Review your organization's data
handling requirements before enabling Gordon.

See [Settings Management](/enterprise/security/hardened-desktop/settings-management/)
for configuration details.

## Disabling Gordon

You can disable Gordon at any time:

Individual users:

1. Open Docker Desktop Settings.
2. Navigate to the **Beta features** section.
3. Clear the **Enable Gordon** option.
4. Select **Apply**.

Business organizations:

Administrators can disable Gordon for the entire organization using Settings
Management. See [Settings Management](/enterprise/security/hardened-desktop/settings-management/)
for details.

## Questions about privacy

For questions about Docker's privacy practices:

- Review the [Docker Privacy Policy](https://www.docker.com/legal/privacy/)
- Read [Gordon's Supplemental Terms](https://www.docker.com/legal/docker-ai-supplemental-terms/)
- Contact Docker Support for specific concerns