Effective date: August 22, 2026
This is a general summary of our practices and is not legal advice.
1. Who we are
Willow Boards ("Willow Boards," "we," "us," or "our") provides a project-management overlay for managed service providers (MSPs) that connects to ConnectWise Manage. This Privacy Policy explains what information we collect through our marketing website and our application (together, the "Service"), how we use it, and the choices you have. It applies to visitors of this website and to the organizations ("workspaces") and individual users who use the Willow Boards application.
2. What data we collect
We collect the following categories of information:
- Account and identity information: name, work email, and organization details, collected when your workspace is created or you're invited to one, plus the sign-in details provided by Microsoft Entra when you authenticate with a Microsoft work account or an email account.
- Workspace content: configuration, project overlays (for example kanban columns, sign-off flags, templates, onboarding tracking), and audit logs that your workspace creates inside Willow Boards.
- ConnectWise data you connect: once your workspace connects its ConnectWise Manage instance, Willow Boards reads project, ticket, and time data from ConnectWise to display it, and writes back only the changes made inside Willow Boards. ConnectWise remains your system of record; we act as a processor of this data on your behalf.
- ConnectWise credentials: the API credentials your workspace connects, and (optionally) each person's own ConnectWise keys so their work is posted under their own name rather than a shared service account. These are held in a dedicated secrets vault, separately from your other data, and are never returned to any browser.
- Access requests: while Willow Boards is in closed beta, the request form on this website collects your name, work email, company, optional website, and anything you write in the notes field. We use it only to decide whether to open a workspace for you and to reply to you about it.
- Billing information: if your workspace subscribes to a paid plan, our payment processor, Stripe, collects billing details such as name, billing address, and card information. Willow Boards does not store full payment card numbers.
- Server logs: standard technical logs (timestamps, IP address, request path, and error details) generated by our hosting infrastructure and kept for troubleshooting, reliability, and security purposes.
3. How we use it
We use the information above to: operate and provide the Service; authenticate users and keep workspaces isolated from one another; provide customer support; process billing and manage subscriptions; monitor, secure, and improve the reliability of the Service; power AI features where a workspace has turned them on; and comply with applicable law.
We do not sell personal data, we do not share it for advertising, and we do not use your workspace content or your ConnectWise data to train any AI model.
4. Cookies and tracking
The Willow Boards application uses a single first-party session cookie to keep you signed in. It's set by Microsoft Entra as part of authentication, is strictly necessary for the app to function, and isn't used for advertising or cross-site tracking.
This marketing website sets no cookies of its own and carries no advertising trackers. It uses Cloudflare Web Analytics to count page views, which works without cookies, without any client-side identifier, and without following you between sites; we see aggregate counts, not individuals. It also loads Google Fonts (from fonts.googleapis.com and fonts.gstatic.com): your browser requests font files directly from Google's servers, which receive your IP address as a normal part of that request. We don't use either of these for tracking, and we don't combine them with any other data we hold.
5. Subprocessors
We share data with a small number of subprocessors, each engaged for a specific purpose:
| Subprocessor | Purpose | Data involved |
|---|---|---|
| Microsoft Azure | Hosting, database, secrets management, and identity/authentication | Application data, workspace content, and ConnectWise data in transit |
| Stripe | Payment processing and subscription billing | Billing contact information and payment details (Willow Boards does not receive full card numbers) |
| Cloudflare | DNS, edge delivery and cookie-free page-view analytics for this marketing website | Requests to willowboards.com, including IP address, as a normal part of serving the site |
| Anthropic | Generates AI summaries and reports, only where a workspace uses Willow-provided AI | The content a workspace chooses to summarize (for example project or ticket text). Anthropic does not train its models on data submitted through its API |
A current list of subprocessors is available on request.
AI is off unless you turn it on. A new workspace has AI disabled, and no project data reaches any model provider until an admin enables it. When they do, they choose how: Willow-provided AI, which runs on our Anthropic account and is covered by the row above, or your own credentials, where you connect your own Anthropic, OpenAI, Google Gemini, or Microsoft Copilot Studio account. On your own credentials that provider is your subprocessor rather than ours, governed by your agreement with them, and the spend and the retention terms are yours.
6. Where data is stored, and security
Willow Boards is hosted on Microsoft Azure and data is processed in the United States. Data is encrypted in transit and at rest. For a detailed look at how we isolate workspaces, store credentials, and audit changes, see our Security & Trust page.
7. Data retention and deletion
We retain workspace data for as long as the workspace remains active. When an account is closed, we delete workspace data and destroy the vaulted secret holding that workspace's ConnectWise credentials within a reasonable period. Audit and error logs may be retained somewhat longer where needed for security and troubleshooting purposes.
Access requests are kept while the closed beta is open, so we can come back to you when capacity allows. Ask us at any time and we will delete yours.
8. Your rights
Depending on where you're located, you may have rights to access, correct, or delete your personal data, or to object to or restrict certain processing. This can include rights under the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). To exercise any of these rights, contact us using the details below and we'll respond as required by applicable law.
9. Data Processing Agreement
Willow Boards acts as a data processor for the ConnectWise project, ticket, and time data that workspaces connect. A Data Processing Agreement (DPA) is available on request for workspaces that need one to satisfy their own compliance obligations.
10. Children
Willow Boards is a business tool and is not directed at children. We do not knowingly collect personal information from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we'll update the effective date above and, where appropriate, let workspace admins know.
12. Contact
Questions about this Privacy Policy or your data can be sent to [email protected].