How we handle your data
Last updated Oct 28, 2026
Gorila sees less than most tools your team already uses, by design. Your AI reads your docs, email and chats with its own connections. Gorila only gets the short summary it writes, with a link to the source.
At a glance
- What we keep
- Your team's tasks and your company's rules: short text your AI writes, with links back to the source. Your account (email and name). Counts of what was used, without content.
- What we never get
- Your files, documents, emails and chat logs. Your AI reads them where they are and keeps them there.
- Where it lives
- In the EU: the database in Ireland, the app in Dublin. Every provider that handles it is listed in our privacy policy.
- Who sees it
- Your team, each person only what they're allowed to see. Personal rules and private tasks stay with their owner, and the database itself enforces it.
- How you leave
- Anyone can export what they see, as JSON and Markdown. An owner can delete the whole workspace; backups drop it within 7 days.
No new AI reading your data
Gorila runs no AI of its own. Your AI does the reading and the thinking, inside the subscription you already pay for. So that search understands what you ask, the summarized text goes through an Amazon (AWS) model in the EU that doesn’t store it, doesn’t log it and doesn’t train on it.
Nothing changes without a yes
Your AI proposes a new rule; a person on your team approves it. Every version is kept, so any change can be undone, and you can see who approved what.
Personal stays personal
What Gorila learns about how you work is private to you until you choose to share it. Your AI creates sensitive tasks (hiring, salaries, health, legal) as private without being asked: only the person who created one and the person it’s for can see it.
Not sold, not trained on
We don’t sell your data, show ads or use your content to train any AI. Our analytics counts clicks and page views and never receives the text of your tasks or rules.
What we don’t have yet
We don’t have a SOC 2 or ISO 27001 certification. If your team needs something we don’t cover here, write to hola@malavar.com.
The details
The full answers are in our privacy policy and our Data Processing Agreement, with every provider that handles your data.