Effective date: July 5, 2026
This is a general summary of our practices and is not legal advice.
1. Who we are
Willow Boards ("Willow Boards," "we," "us," or "our") provides a project-management overlay for managed service providers (MSPs) that connects to ConnectWise Manage. This Privacy Policy explains what information we collect through our marketing website and our application (together, the "Service"), how we use it, and the choices you have. It applies to visitors of this website and to the organizations ("workspaces") and individual users who use the Willow Boards application.
2. What data we collect
We collect the following categories of information:
- Account and identity information: name, work email, and organization details, collected when your workspace is created or you're invited to one, plus the sign-in details provided by Microsoft Entra when you authenticate with a Microsoft work account or an email account.
- Workspace content: configuration, project overlays (for example kanban columns, sign-off flags, templates, onboarding tracking), and audit logs that your workspace creates inside Willow Boards.
- ConnectWise data you connect: once your workspace connects its ConnectWise Manage instance, Willow Boards reads project, ticket, and time data from ConnectWise to display it, and writes back only the changes made inside Willow Boards. ConnectWise remains your system of record; we act as a processor of this data on your behalf.
- Billing information: if your workspace subscribes to a paid plan, our payment processor, Stripe, collects billing details such as name, billing address, and card information. Willow Boards does not store full payment card numbers.
- Server logs: standard technical logs (timestamps, IP address, request path, and error details) generated by our hosting infrastructure and kept for troubleshooting, reliability, and security purposes.
3. How we use it
We use the information above to: operate and provide the Service; authenticate users and keep workspaces isolated from one another; provide customer support; process billing and manage subscriptions; monitor, secure, and improve the reliability of the Service; power optional AI features when a workspace enables them; and comply with applicable law.
4. Cookies and tracking
The Willow Boards application uses a single first-party session cookie to keep you signed in. It's set by Microsoft Entra as part of authentication, is strictly necessary for the app to function, and isn't used for advertising or cross-site tracking.
This marketing website sets no cookies of its own and runs no analytics or advertising trackers. The one third-party resource it loads is Google Fonts (from fonts.googleapis.com and fonts.gstatic.com): your browser requests font files directly from Google's servers, which receive your IP address as a normal part of that request. We don't use Google Fonts for tracking and don't combine it with any other data we hold.
5. Subprocessors
We share data with a small number of subprocessors, each engaged for a specific purpose:
| Subprocessor | Purpose | Data involved |
|---|---|---|
| Microsoft Azure | Hosting, database, secrets management, and identity/authentication | Application data, workspace content, and ConnectWise data in transit |
| Stripe | Payment processing and subscription billing | Billing contact information and payment details (Willow Boards does not receive full card numbers) |
| Anthropic | Generates AI summaries and reports, only when a workspace uses Willow-provided AI | The content a workspace chooses to summarize (for example project or ticket text); Anthropic does not train its models on data submitted through its API |
A current list of subprocessors is available on request.
6. Where data is stored, and security
Willow Boards is hosted on Microsoft Azure and data is processed in the United States. Data is encrypted in transit and at rest. For a detailed look at how we isolate workspaces, store credentials, and audit changes, see our Security & Trust page.
7. Data retention and deletion
We retain workspace data for as long as the workspace remains active. When an account is closed, we delete workspace data and the Key Vault secret holding that workspace's ConnectWise credentials within a reasonable period. Audit and error logs may be retained somewhat longer where needed for security and troubleshooting purposes.
8. Your rights
Depending on where you're located, you may have rights to access, correct, or delete your personal data, or to object to or restrict certain processing. This can include rights under the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). To exercise any of these rights, contact us using the details below and we'll respond as required by applicable law.
9. Data Processing Agreement
Willow Boards acts as a data processor for the ConnectWise project, ticket, and time data that workspaces connect. A Data Processing Agreement (DPA) is available on request for workspaces that need one to satisfy their own compliance obligations.
10. Children
Willow Boards is a business tool and is not directed at children. We do not knowingly collect personal information from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we'll update the effective date above and, where appropriate, let workspace admins know.
12. Contact
Questions about this Privacy Policy or your data can be sent to [email protected].