Privacy Policy

Willoe Privacy Policy

Last updated: October 9, 2026

1. Who this covers

Willoe is a sole proprietorship based in Los Angeles, California. We provide managed customer-follow-up email services to businesses in the United States. In this policy, "we", "us" and "Willoe" mean that business.

This policy covers two different groups of people, and it matters which one you are:

Visitors and clients — you visited willoe.com or gowilloe.com, filled in a form, or opened an account. Sections 2 through 10 are about your information.

Customers of a business that uses Willoe — you bought something from a shop or a local business, and they use Willoe to stay in touch with you. Your information belongs to that business, not to us. Section 11 is the one you want.

2. Information we collect from you

When you fill in a form on our site: your name, email address, phone number if you give it, your website, and anything else you type into the form. We also record which advert, link or campaign brought you to us.

When you open an account: your business name, contact details, and the billing information needed to take payment. Card numbers go directly to Stripe — we never see or store the full number.

Automatically, when you browse: IP address, browser and device type, pages viewed, time on page, and the site or advert you arrived from. See section 6.

When you contact us: whatever is in your email, and our reply.

We ask for information when we need it to do something for you, and we tell you what it is for. You can decline — we may then not be able to provide part of the service.

3. Customer data you give us

This is the section that matters most if you are a Willoe client.

What we receive. To run your email sequences we process the customer records you provide — typically a name, an email address, and what that person bought and when. You choose what to send us; some clients include order values, locations, product categories or notes.

Whose data it is. It stays yours. You decide what happens to it. We act on your instructions and process it only to deliver the service you are paying for — in data-protection language, you are the controller and we are the processor.

What we do with it. Load it into your account, build and run sequences, use AI to draft an individual message for each customer, send those messages in your business's name, and report back on what happened.

What we do not do with it. We do not sell it. We do not rent, trade or share it with other Willoe clients. We do not market to your customers on our own behalf or anyone else's. We do not merge your list with anyone else's. We do not use your customer records to train AI models for any purpose outside your own account.

What you are confirming when you upload. That you collected those records lawfully, that you have the right to email those people, and that the list was not bought, rented, scraped or harvested.

Getting it back or deleting it. Ask us and we will export your data to you. Ask us to delete it and we will, within 30 days of your request or of your account closing, except where tax or legal rules require us to keep a record of the transaction.

4. Who else handles the data

Running the service means your information and your customers' information passes through a small number of named providers. Each one is used for the purpose listed and nothing else.

HighLevel / LeadConnector — the platform Willoe runs on. Your account, your contacts and your sequences live here.

Email sending infrastructure — delivers the messages to inboxes.

AI language model providers — draft the wording of each individual message. See section 5.

Twilio, through HighLevel — only if you switch on the texting or calling add-ons. It is not used for email.

Stripe — takes your subscription payment. Stripe receives your billing details. Stripe never receives your customer list.

Google (Analytics and Ads) and Meta — website analytics and advertising measurement on willoe.com. These see visitors to our own website. They do not receive your uploaded customer records.

We may also disclose information where the law requires it, to enforce our Terms, or to protect someone's safety or rights. If the business is ever sold or reorganised, information may transfer as part of it, and this policy travels with it.

5. How AI is used

The messages we send are drafted by AI language models. To write a message for one customer, the model is given that customer's details — typically their name, what they bought and when — along with your business's information and the direction you have set.

This is processing on your instruction, for your account only.

Output goes to your customers, in your name. You can ask us to route messages to you for approval before they send.

Providers are chosen on the basis that customer data submitted through the service is not used to train their general models. If that ever changes, we will tell you before it takes effect.

We may use aggregated, de-identified performance data — open and reply patterns with no personal details attached — to improve how the service works.

6. Cookies, pixels and advertising

Our website uses cookies and similar technologies. Session cookies disappear when you close your browser; persistent cookies stay until they expire or you clear them.

Necessary — keep you signed in and keep the site working. These cannot be switched off.

Functional — remember your preferences and settings.

Analytics — Google Analytics, so we can see which pages are used and where people get stuck.

Advertising — the Meta Pixel and Google Ads tags, which measure whether our adverts work and allow us to show adverts to people who have visited the site.

You can delete existing cookies and block new ones in your browser settings. Parts of the site, including signing in, may stop working if you block all of them.

We honour the Global Privacy Control signal. If your browser or extension sends it, we treat it as an opt-out of advertising cookies for that browser.

7. Your California privacy rights

Under the California Consumer Privacy Act, as amended by the CPRA, California residents have the rights below. We extend them to everyone who contacts us, wherever they live.

Know what personal information we hold about you, where it came from, and who we have disclosed it to.

Access a copy of it.

Delete it, subject to records we are legally required to keep.

Correct anything inaccurate.

Opt out of sale or sharing — see immediately below.

Limit our use of sensitive personal information. We do not collect any, so there is nothing to limit.

Not be discriminated against for exercising any of these. We will not charge you more or give you a worse service.

Do we sell or share personal information? We do not sell personal information for money, and we never sell or share our clients' customer lists — full stop.

We do use the Meta Pixel and Google Ads tags on our own website. Under California law, using advertising cookies in this way counts as "sharing" personal information for cross-context behavioural advertising, even though no money changes hands. To opt out: turn on Global Privacy Control in your browser, block advertising cookies in your browser settings, or email [email protected] and ask us to opt you out.

How to exercise any of these rights: email [email protected] and say what you want. We will confirm within 10 days and respond within 45 days. If we need longer we will tell you why. We may need to verify who you are before we act on a request about a specific person's data. An authorised agent may make a request on your behalf with written proof.

8. How long we keep information

Client account and customer data — for as long as your account is open, then deleted within 30 days of closure or of your request, whichever comes first.

Billing records — kept as long as tax and accounting rules require, typically seven years.

Website enquiries — up to two years from your last contact, unless you ask us to delete them sooner.

Analytics — held on the retention schedule of the provider concerned.

9. How we protect it

Access to client data is limited to the people who need it to run the service. Data is held on the platforms named in section 4, which operate their own encryption and access controls. Connections to our site and to the platform are encrypted in transit. We never ask you for your password, and we do not store your full card number.

No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.

10. Children

Willoe is sold to businesses and is not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, email [email protected] and we will delete it.

11. If you received an email from a business that uses Willoe

You are probably here because an email you received mentioned Willoe. Here is the short version.

Your details belong to the business that emailed you, not to us. They gave us your information so we could send their messages on their behalf. We did not buy your details and we did not get them from anyone else.

To stop receiving emails, use the unsubscribe link at the bottom of any message. It works immediately and applies to everything from that business.

To see, correct or delete what is held about you, contact the business that emailed you — their name and address are in the email footer. They decide; we act on their instruction. You can also email [email protected] and we will pass your request to them and confirm once it is done.

We do not use your information for our own marketing, we do not sell it, and we do not share it with other businesses using Willoe.

12. Links to other sites

Our site and our clients' emails may link to websites we do not operate. We have no control over how those sites handle your information and are not responsible for their privacy practices. Read their policies before giving them anything.

13. Changes to this policy

We may update this policy. The "last updated" date at the top always reflects the current version. If a change materially affects how we handle your information, we will email account holders at least 30 days before it takes effect. Continuing to use the service after that date means you accept the updated policy.

14. Contact

Questions about this policy, or to exercise any of the rights in section 7:

[email protected]
Willoe.com
6100 Wilshire Blvd #1700
Los Angeles, CA 90048