This policy covers the Work That Matterswebsite. It explains what we collect when you use it, why, who helps us process it, and how to have it removed. The short version: we collect only what you type into a form or choose to click, we use it to answer you, and we don’t sell it or use it for advertising.
1What we collect
When you request a working session
Your name, your work email, and the note you add, if any. We store these so we can reply.
When you use the “what could your people build” generator
Your three answers — what your company does, the part of the business, and the work that is slow or stuck — along with the ideas that come back. We keep a record of each run so we can understand what kinds of problems people bring and improve the tool. The generator doesn’t ask who you are, and we ask that you not include personal or confidential details in your answers.
When you ask for the one-page brief
Your email address, plus the answers and ideas the brief is written from. We use the address to send you the brief and may follow up about it.
When you react to a pattern card
Which cards you voted on and how. To remember your votes, we set a cookie holding a random identifier (wtm_pattern_voter, kept for one year). It isn’t tied to your name, email, or IP address.
Automatically, on every visit
Like any website, our servers receive your IP address and basic request details (browser, page requested, time). We hold IP addresses in memory for up to an hour to prevent abuse of the forms, and our hosting provider keeps standard server logs. We don’t run analytics, advertising, or tracking scripts, and our fonts are served from our own domain.
If you’re on our team
Staff sign in with a Google account on our own domain. We receive the email address and account identifier Google provides, and a sign-in cookie keeps the session active. This applies only to team members; public visitors are never asked to sign in.
2How we use it
- To respond to working-session requests and send the briefs you ask for.
- To follow up about the program with people who contacted us or requested a brief.
- To understand which problems people bring and improve the site and the program.
- To keep the site secure and prevent abuse.
We don’t sell or rent personal information, share it for advertising, or add you to a mailing list you didn’t ask for.
3Who processes it for us
We use a small number of service providers, each only for the job listed:
- Supabase — stores form submissions, generator runs, votes, and team sign-in accounts.
- Anthropic — receives your generator answers to write the ideas. Anthropic does not train its models on this API data by default.
- Resend — delivers the brief to your inbox.
- Vercel — hosts the site and keeps server logs.
- Google — handles sign-in for team members only.
These providers may process data in the United States. We may also disclose information if the law requires it, or to a successor if the program changes hands.
4How long we keep it
We keep contact requests, brief requests, and generator runs for as long as they are useful for following up and improving the program, and delete them sooner if you ask. Vote records are anonymous and kept to show running totals. Rate-limit data is discarded within an hour.
5Your choices and rights
You can ask us what we hold about you, to correct it, or to delete it by writing to ryan@willowed.org. Depending on where you live, you may have further rights under laws such as the GDPR or CCPA; we honour those requests too. You can clear the voting cookie at any time in your browser settings — your past votes then simply stop being linked to you.
6Security
Data is sent over HTTPS. Our database allows no direct access from browsers; only our server can read or write it. No system is perfectly secure, but we limit what we collect so there is less to protect.
7Children
This site is for businesses and isn’t directed at children under 16. We don’t knowingly collect their information.
8Changes and contact
If this policy changes, we’ll update it here and change the date at the top. Questions go to ryan@willowed.org. Use of the site is also governed by our terms of service.