Privacy Policy

The policy below is maintained with Termageddon and updates automatically as privacy laws change. The Google API Services Disclosure that follows it is maintained by us and describes exactly how Willow handles your Google data.

Google API Services Disclosure

This section supplements the Privacy Policy above and describes how Willow handles data received from Google APIs. It is maintained directly by Willow Intelligence, Inc.

What Google data Willow accesses

When you connect your Gmail account, Willow requests these OAuth scopes from Google:

• openid and userinfo.email — your Google account identifier and email address, used to sign you in and bind your Willow account to your mailbox.
• gmail.readonly — read-only access to the messages, threads, labels, and metadata in your Gmail mailbox. Willow uses this to read incoming messages and produce the tasks and notices in your Willow inbox. We do not request scopes that would allow Willow to send, modify, or delete your mail, or change your Gmail settings.

How your Google data is used

Willow uses your Gmail data only to provide the user-facing features of the service: reading messages to surface what needs your attention, and answering your questions about your mail. We do not use your Google data for advertising, we do not sell it, and we do not use it to train AI models.

Storage

Willow keeps an encrypted copy of your mail. So it can research, draft, and remember across your mailbox, Willow stores the text of the messages in your Inbox and archive — encrypted at rest under an encryption key that is unique to you — together with limited message metadata (such as sender, subject, dates, and the short snippets Gmail provides), a search index Willow builds from your mail, the structured items in your Willow inbox, the record of Willow’s decisions, and — for each message Willow’s AI analyzes — an audit record of exactly what the AI was shown and what it returned. That AI-audit record is also encrypted under your unique key. Willow does not store the text of messages in your Spam or Trash. Your copy is used only to power your own assistant: it is never used to train AI models, never sold, and never read by any person except with your explicit consent, for security purposes, or to comply with law. When you close your account, Willow destroys your personal encryption key, which instantly and permanently makes these encrypted copies unreadable everywhere they exist, including in our backups. If you disconnect a mailbox, Willow keeps its data for 30 days so reconnecting restores it, then permanently deletes it.

Sharing

Google user data is disclosed only to service providers that process it on our behalf, solely to provide the service: Anthropic (the AI provider that analyzes email content to provide Willow’s features; Anthropic’s API terms commit it not to train its models on this data), Google Cloud Platform (hosting and encrypted storage), and Clerk (sign-in and session management). These providers may not use your data for their own purposes. No human at Willow reads your mail except with your explicit consent, for security purposes, or to comply with law.

Limited Use

Willow’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your controls

• Revoke Willow’s access to your Gmail at any time at myaccount.google.com/permissions. Willow stops reading further mail immediately; that mailbox’s stored data is kept for 30 days so reconnecting restores it, then permanently deleted.
• Access, export, or delete the data Willow holds about you — email support@willowintelligence.ai.