Waffle respects the permissions that you set up in GitHub for your repository or organization. To change user permissions, follow the instructions in GitHub's permissions access documentation.
If a collaborator has access to the issues on a private repository, he or she is able to access the Waffle board associated with that repo. They simply need to visit waffle.io and log in or sign up with GitHub. Then, they can navigate to the repo's Waffle board.