Willow procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| Data retention | All applicable tiers | unknown | “ Dictation transcript history and dictation recordings shown in the Willow application are stored locally on your device for you to view. Willow does not synchronize this local history unless a separate feature clearly tells you otherwise and you choose to enable it.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Willow's Calendar and People APIs operate as pass-through APIs. Calendar events, Google Contacts, Other Contacts, and Workspace Directory responses are retrieved from Google when requested, returned to the authorized Willow application, and discarded after the request is completed. Willow does not persist this Google API response data or derived copies in its databases, analytics systems, model inputs, or model-training datasets. The response data may exist briefly in volatile memory while Willow processes and returns the request. It is not retained after the pass-through operation is complete. To keep your Google account connected, Willow retains only the information required to maintain the connection, including encrypted OAuth credentials and minimal connected-account metadata such as the Google account identifier, connected email address, granted permissions, connection status, and relevant timestamps. Willow retains this information only while the integration remains connected or as otherwise required for security or legal compliance.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Willow retains account and operational information only for as long as needed to provide the service, maintain security, comply with legal obligations, resolve disputes, and enforce agreements. In Help Improve Willow mode, Willow retains eligible anonymized text and usage information only for as long as needed for the improvement purposes described in this policy. In Private Mode, Willow does not retain dictated audio, dictated text, or screen content. Google User Data follows the separate retention and deletion rules in Section 6. Calendar and People API responses are not retained after the pass-through request. OAuth credentials and minimal Google connection metadata are retained only while the integration is connected and are deleted from active systems when the integration is disconnected or the Willow account is deleted. When a retention period expires or information is no longer needed, Willow deletes or irreversibly anonymizes it, unless continued retention is required by law or necessary for security, fraud prevention, or dispute resolution.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Because Calendar and People API responses are processed on a pass-through basis, Willow does not retain those responses after completing the request. You can disconnect Google through Willow or revoke Willow's permission through your Google Account at https://myaccount.google.com/permissions. When you disconnect Google through Willow, Willow attempts to revoke the Google authorization and deletes the stored OAuth credentials and connected-account metadata from its active systems. If you revoke access through Google, Google invalidates the authorization so Willow can no longer access your Google account. Willow deletes any remaining connection record after the revocation is detected or when you request deletion. Deleting your Willow account also deletes the Google integration record and its stored credentials from Willow's active systems. Encrypted backup copies of connection records, if any, are isolated from ordinary use and automatically expire under Willow's standard backup and disaster-recovery lifecycle. Willow does not restore deleted Google connections for ordinary product use. You may request deletion of your Google connection information or other personal information by emailing [email protected] . Willow may ask you to verify your identity before completing a request. Willow will honor verified deletion requests unless limited retention is required by law or necessary to address security, fraud, or abuse. Any such retention is limited to the information and period required for that purpose.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Willow does not sell Google User Data and does not transfer it for advertising, data brokerage, or model training. Infrastructure providers may process Google User Data only to securely transmit and operate the user-requested pass-through features. They act on Willow's instructions and are subject to contractual and technical restrictions, including Zero Data Retention and prohibitions against using Willow data to train their models. Willow may disclose information when required by applicable law or when necessary to protect Willow, its users, or the public from fraud, abuse, or security threats. Willow does not permit a service provider to use Google User Data for its own independent purposes.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Willow may use trusted service providers to operate Willow, including cloud infrastructure, transcription, security, diagnostics, customer support, and payment services. These providers may process information only to perform services for Willow and at Willow's direction. Providers that process content on Willow's behalf are subject to Zero Data Retention and may not use that content to train or improve their own AI or machine-learning models. Willow may disclose limited information when required by law, to respond to valid legal process, or to protect the security and rights of Willow, its users, or the public. Willow does not sell personal information. Willow does not share text-messaging consent or opt-in information with third parties for their own marketing. The stricter Google User Data sharing rules in Section 6 control whenever information was received from Google APIs.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ Taxes and Adjustments: You may be responsible for any taxes or additional charges associated with your location. We will notify you of any material changes in pricing.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ Subscription and Fees: Some features may require a paid subscription or usage-based fees. You agree to provide accurate billing information and promptly pay all charges.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ Referral discounts: We may offer free months based on referrals rewards. If you continue after the free month of Willow's Individual Plan, regular fees apply.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ Renewals: Subscriptions renew automatically unless canceled prior to the renewal date.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.