Privacy Policy

Effective date: May 22, 2026

This is the privacy policy for Willow, a product of Willow Intelligence, Inc. (“Willow”, “we”, “us”). It explains what data Willow processes, why, and what you can do about it. It is written in plain language. If anything is unclear, email us at [email protected].

Summary

Willow is an AI email assistant. With your permission, it reads the messages in your Gmail inbox (read-only) and turns them into a short list of items that actually need your attention — tasks, time-sensitive notices, and security flags. We never send mail on your behalf. No human at Willow reads your mail. We do not train AI models on your data, and we do not sell or share your data with advertisers.

What data we process

When you connect your Gmail account, Willow requests three OAuth scopes from Google:

• openid and userinfo.email — your Google account identifier and email address, used to sign you in and to bind your Willow account to your mailbox.
• gmail.readonly — read-only access to the messages, threads, labels, and metadata in your Gmail mailbox.

Willow uses these to read incoming messages, evaluate them in context, and produce structured items in your Willow inbox. We do not request scopes that would allow Willow to send mail, modify mail, delete mail, or change your Gmail settings.

We also collect basic operational telemetry — request counts, latencies, model costs, error rates — to keep the service running. This telemetry is scrubbed of message content and personal identifiers.

How we use your data

For each new message in your mailbox, Willow sends the message, relevant thread context, and prior decisions to Anthropic’s Claude API for analysis. Claude returns a structured set of operations — for example, “create a task,” “create a time-sensitive notice,” or “no change.” Willow applies those operations to your Willow inbox.

We do not use your data for any other purpose. Specifically, we do not use it to train AI models, to serve advertising, or for any analysis unrelated to your Willow inbox.

Third-party processors

Willow uses two third-party processors:

• Anthropic — provides the AI model that analyzes your messages. Anthropic’s standard API terms commit Anthropic not to use Willow’s API data to train models. We are also in the process of finalizing a Zero Data Retention agreement with Anthropic, which will mean Anthropic does not retain the inputs or outputs of Willow’s API requests beyond what is required for abuse and safety classification.
• Google — provides authentication (Sign in with Google) and Gmail access (via OAuth). Your relationship with Google is governed by Google’s own privacy policy.

Willow does not share your data with any other third party.

Where your data lives and how it’s protected

Your Willow data — the items in your Willow inbox, your settings, and the decisions Willow has made about your mail — is stored in a per-user isolated database. Data is encrypted in transit and at rest.

No employee, contractor, or operator of Willow reads your mail. Engineering access to production systems is restricted, logged, and used only for operational purposes such as fixing bugs or investigating abuse, and only on aggregated or non-identifying data unless we have your specific consent.

We do not sell your data, ever, to anyone.

How long we keep your data

We retain your data while your Willow account is active. If you close your account or revoke Willow’s access to your Gmail, we delete your data from our systems within 30 days. Operational logs that do not contain message content may be retained for up to 90 days for security and reliability purposes, then deleted.

Your rights

You can, at any time:

• Access or export the data Willow has about you — email [email protected].
• Delete your account and the associated data — email [email protected].
• Revoke Willow’s access to your Gmail directly with Google, at https://myaccount.google.com/permissions. Revoking access stops Willow from reading any further mail; your existing Willow data will be deleted within 30 days unless you ask us to keep it.

If you are a resident of California, the European Union, the United Kingdom, or another jurisdiction with specific privacy rights, those rights apply to your Willow data in addition to the rights above. Contact [email protected] to exercise them.

Google API Services User Data Policy — Limited Use

Willow’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, Willow does not:

1. Allow humans to read your data, unless (a) we have obtained your explicit consent for the specific messages in question, (b) doing so is necessary for security purposes such as investigating abuse, (c) doing so is necessary to comply with applicable law, or (d) the data has been aggregated and anonymized for internal operations.
2. Use or transfer your data for serving advertisements, including retargeting, personalized advertising, or interest-based advertising.
3. Use or transfer your data to determine credit-worthiness or for lending purposes.
4. Sell your data.

Children’s data

Willow is not directed to children under 13, and we do not knowingly collect data from children under 13. If we learn we have collected such data, we will delete it.

Changes to this policy

If we make material changes to this policy, we will notify you by email and update the effective date above. Continued use of Willow after a change constitutes acceptance of the updated policy.

Contact

Questions, requests, or concerns:

Willow Intelligence, Inc.
Email: [email protected]