Privacy policy

This explains how Gorillo, operated by Gorillo AI Ltd (“Gorillo”, “we”) handles personal information. Gorillo is software that service businesses use to answer enquiries, follow up quotes and stay in touch with their customers.

Two kinds of information

• Our customers' accounts: the names, work emails and phone numbers of the businesses that use Gorillo and their teams. We decide how this is used.
• Their customers: the details a business brings into Gorillo or receives through it, such as names, phone numbers, emails, addresses, quotes, jobs and messages. We handle this on that business's behalf and only to provide the service to them. If you're one of their customers, that business is responsible for your information, and you can contact them directly.

What we use it for

• Running the service: storing records, sending and receiving messages, and booking appointments into connected calendars.
• Writing messages with AI on the business's behalf, which the business can review before they're sent.
• Keeping it safe and reliable: security, preventing misuse, fixing problems.
• Meeting legal duties, including honouring requests to stop messages.

We don't sell personal information, and we don't use it to advertise.

Text messages

Mobile phone numbers and text message consent are never shared with third parties or affiliates for their marketing. They're shared only with the companies that help us deliver the service, listed below. Reply STOP to any text to stop receiving them, or HELP for help. Message and data rates may apply.

Who helps us provide the service

We use these providers, each only for its part of the service:

• Supabase: database and sign-in
• Vercel: hosting
• Anthropic: the AI that writes and reads messages
• Twilio: sending and receiving texts and calls
• Postmark: sending emails
• Inngest: running scheduled background tasks
• Sentry: error reports, with personal details removed
• Zapier: only when a business connects it, to bring in leads from its ads
• Google and Microsoft: only when a business connects its own calendar

Some of these providers are in the United States, so information may be stored or processed there.

Calendars

When a business connects a Google or Microsoft calendar, we read when it's busy and add the bookings it asks us to. We don't read event contents for any other purpose, and we don't use calendar data for advertising or to train AI models. Access can be removed at any time from Gorillo's settings or the calendar account.

How long we keep it

We keep information while a business uses Gorillo, and then as long as the law requires. A business can delete one of its customers' information at any time, and we keep only a record that the deletion happened.

Your rights

Depending on where you live, you may have the right to see, correct or delete your information, or to object to how it's used. If you're a customer of a business that uses Gorillo, ask that business first. Otherwise, email team@gorillo.ai.

Security

Each business's information is kept separate from every other's. Connection details such as calendar access are encrypted. No system is perfectly secure, and we'll tell affected businesses if something goes wrong.

Changes

We'll update the date above when this changes, and tell businesses about important changes.