The short answer is no one. Windmill will never allow someone to override the permissions in the source system.

Your boss can only see the same stuff they'd be able to see if they logged in to the source system. They can see aggregate analytics, such as the total number of Google Docs edits, but will not be able to see any details about the private documents or meetings.