This Privacy Policy describes how Willow AI LLC, an LLC organized in Oregon, collects, uses, discloses, stores, and otherwise processes personal information in connection with Willow AI and related websites, applications, tools, and services, including the website located at hellowillow.co (collectively, the “Services”). This Privacy Policy is intended to provide general notice regarding data practices and may be supplemented by additional product disclosures, consent flows, or service-specific notices where appropriate.
1Company Information and Background
The Services are made available by Willow AI LLC with a business address at 3368 SE Brookwood Ave, Hillsboro, OR 97123, US. The Services are designed for business and technology-related use cases associated with the company’s AI tool offerings. By accessing or using the Services, users may provide information directly to the company or permit information to be collected automatically through their interactions with the Services.
2Scope of This Privacy Policy
This Privacy Policy applies to personal information collected from users, customers, prospective customers, business contacts, and other individuals who interact with the Services. It does not necessarily apply to information collected in an employment context, information processed solely on behalf of a business customer under a separate written agreement, or information that has been de-identified or aggregated so that it can no longer reasonably be linked to an identifiable individual.
3Categories of Information Collected
Depending on how the Services are used, the company may collect several categories of information. These categories may include identifiers such as name, email address, company name, account credentials, and online identifiers; commercial information such as subscription details, transaction records, and billing contact information; internet or network activity information such as log data, device information, browser type, IP address, usage patterns, and interactions with pages or features; and communications content such as support requests, feedback, uploaded prompts, file submissions, or other information a user voluntarily submits through the Services.
If the Services include AI-enabled functionality, the company may also process prompts, inputs, outputs, model interaction records, feature usage data, and related technical metadata for purposes described in this Privacy Policy. Users should avoid submitting confidential, proprietary, or sensitive personal information unless the Services are expressly intended to receive such information and the user has authority to provide it.
4Sources of Information
The company may collect information directly from users, automatically through devices and browsers, from service providers acting on the company’s behalf, from business partners involved in integrations or distribution, and from publicly available or lawfully obtained third-party sources. Information may also be generated internally through account administration, fraud monitoring, analytics, and service improvement activities.
5Purposes of Processing
The company may use personal information for legitimate business and operational purposes, including to provide, maintain, secure, and improve the Services; create and administer accounts; authenticate users; process transactions; communicate about accounts, updates, and support matters; personalize user experience; monitor performance and usage trends; develop new features; detect, prevent, and investigate security incidents, fraud, abuse, or misuse; comply with applicable law; enforce contractual terms; and establish, exercise, or defend legal claims.
Where AI functionality is offered, information may also be used to generate outputs requested by users, troubleshoot system performance, evaluate service quality, maintain safety controls, and train or refine internal systems to the extent permitted by applicable law, contractual restrictions, and product settings. If the company offers user controls limiting certain model-training or product-improvement uses, those controls may be described in supplemental documentation or product settings.
6Disclosure of Information
The company may disclose personal information to vendors and service providers that perform functions on its behalf, such as cloud hosting, analytics, customer support, communications delivery, payment processing, infrastructure management, and security services. The company may also disclose information to professional advisors, auditors, insurers, corporate affiliates, and counterparties involved in an actual or proposed merger, financing, asset sale, reorganization, or similar business transaction, subject to customary confidentiality protections where appropriate.
Information may also be disclosed when the company believes disclosure is reasonably necessary to comply with applicable law, regulation, court order, subpoena, or lawful governmental request; to protect the rights, property, or safety of the company, its users, or others; to investigate suspected violations of agreements or policies; or to respond to emergencies. The company does not state in this document that it sells personal information for money, and any targeted advertising or data-sharing practices should be evaluated separately based on the actual configuration of the Services.
8Data Retention
The company may retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain business records, comply with legal obligations, resolve disputes, enforce agreements, and protect against fraud or misuse. Retention periods may vary based on the type of information, the nature of the relationship, technical requirements, and applicable legal or regulatory considerations. When information is no longer reasonably required, the company may delete, aggregate, or de-identify it in accordance with its retention practices.
9Data Security
The company may use administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, or disclosure. No method of transmission over the internet or electronic storage is completely secure, and the company cannot guarantee absolute security. Users are responsible for maintaining the confidentiality of their account credentials and for notifying the company promptly of any suspected unauthorized use of their accounts.
10User Rights and Choices
Depending on the user’s location and applicable law, individuals may have rights to request access to, correction of, deletion of, or portability of certain personal information, or to object to or limit certain processing activities. Users may also be able to update certain account information directly through the Services. The company may take reasonable steps to verify requestors before responding and may decline or limit requests where permitted by law.
Users may opt out of certain non-essential communications by following the unsubscribe instructions in those messages or by contacting the company. If the Services are directed to businesses, some privacy rights may apply differently to information processed in a commercial or employment-related context. Oregon and other state privacy laws may provide additional rights in certain circumstances, and the company may address those rights through a supplemental notice if required by its actual data practices and legal thresholds.
11Children’s Privacy
The Services are not intended for children under 13 unless expressly stated otherwise in a service-specific notice. The company does not intend to knowingly collect personal information directly from children under 13 through the Services without legally required notice and consent mechanisms. If the company becomes aware that it has collected personal information from a child in a manner inconsistent with applicable law, it may take steps to delete that information.
12Cross-Border Processing
The company is based in the United States and may process or store information in the United States or other jurisdictions where the company or its service providers operate. Those jurisdictions may have data protection laws that differ from the laws of the user’s place of residence. By using the Services, users acknowledge that their information may be transferred to and processed in jurisdictions outside their home state or country, subject to applicable legal requirements.
13Third-Party Services
The Services may contain links to third-party websites, integrations, plug-ins, or tools that are not controlled by the company. This Privacy Policy does not necessarily apply to the privacy practices of those third parties. Users should review the privacy notices of any third-party services they choose to access or connect to the Services.
14Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes in the Services, legal requirements, or business operations. If material changes are made, the company may provide notice by posting the revised policy on the Services, updating the effective date, or using other communication methods where appropriate. Continued use of the Services after an updated policy becomes effective may constitute acknowledgment of the revised Privacy Policy to the extent permitted by law.
15Contact Information
Questions, requests, or concerns regarding this Privacy Policy may be directed to Willow AI LLC at 3368 SE Brookwood Ave, Hillsboro, OR 97123, US or by email at friend@hellowillow.co.
Willow AI LLC3368 SE Brookwood AveHillsboro, OR 97123, US
friend@hellowillow.co
16Governing Law and Severability
This Privacy Policy shall be interpreted in a manner consistent with applicable United States law and, to the extent not preempted, the laws of the State of Oregon, without regard to conflict of laws principles. If any provision of this Privacy Policy is held invalid or unenforceable, the remaining provisions shall remain in full force to the extent permitted by law.