Privacy Policy

This Privacy Policy explains how Houston ("Houston", "we", "us", or "our") collects, uses, stores, shares, and protects information when you use the Houston desktop app, the Houston Cloud service, the gethouston.ai website, and any related products or services (together, the "Services").

By using the Services you agree to this Policy. If you do not agree, please do not use the Services.

1. Who we are

Houston builds a desktop application and a hosted service ("Houston Cloud") that let people run AI agents on top of their own data and tools. The Services are operated by Houston. You can reach us at hello@gethouston.ai.

2. Information we collect

2.1 Information you provide

• Account information. If you create a Houston Cloud account we collect your email address, display name, and authentication credentials. Authentication is handled through Supabase.
• Communications. If you contact us by email, social channels, or support forms we keep a copy of the message and your contact details.
• Payment information. If you purchase a paid plan, payment is processed by our payment provider. We do not store full card numbers ourselves.

2.2 Information you generate while using Houston

• Local agent data (desktop app). When you use the Houston desktop app, your workspaces, agent files, prompts, settings, and transcripts are stored on your own computer in ~/.houston/. We do not receive a copy of this data unless you explicitly enable a feature that uploads it (for example Houston Cloud sync).
• Cloud agent data (Houston Cloud). If you use Houston Cloud, the data your agents read, write, and produce while running on our infrastructure is stored on our servers so that the service can function.
• Connector credentials. When you connect Houston to third-party tools (for example Gmail, Google Sheets, HubSpot, Stripe, Slack), the credentials and tokens needed to authorize those connections are stored either on your local machine (desktop app) or, if you use Houston Cloud, encrypted on our servers.

2.3 Information we collect automatically

• Product analytics. We use PostHog to collect usage events such as which screens you visit, which features you trigger, app version, operating system, and approximate region. Analytics events do not include the contents of your messages, files, or agent outputs.
• Crash and error reports. We use Sentry to capture crash reports and unhandled errors so we can fix bugs. These reports may include stack traces, the operating system, app version, and a redacted snapshot of relevant state.
• Website logs. Our hosting provider (Cloudflare) logs standard request data such as IP address, user agent, and the page requested.

3. How we use information

We use the information we collect to:

• Provide, operate, and maintain the Services.
• Authenticate you and protect your account.
• Run the AI agents you create, including sending prompts to the AI provider you have configured.
• Diagnose problems, fix bugs, and improve performance and reliability.
• Understand how the product is used in aggregate so we can prioritize what to build.
• Communicate with you about updates, security alerts, and support requests.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We do not use the contents of your agent files, prompts, or messages to train our own models.

4. When we share information

We share information only in the following situations:

• Service providers. We share data with vendors that help us run the Services, including hosting (Cloudflare, Google Cloud), authentication and database (Supabase), analytics (PostHog), error monitoring (Sentry), and payment processing. These providers are bound by contract to use the data only for the purpose of providing services to us.
• AI providers. When you run an agent, the prompts, files, and tool outputs you send to that agent are transmitted to the AI provider you have configured (for example OpenAI or Anthropic) using the API key or subscription you have chosen. Their use of that data is governed by their own terms and privacy policies.
• Connected applications. When you connect a third-party application to Houston, data flows between Houston and that application as needed for the connector to work. The third party's use of your data is governed by its own terms.
• Legal requirements. We may disclose information when we believe in good faith that disclosure is necessary to comply with a law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Houston, our users, or others.
• Business transfers. If Houston is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your information.

5. Third-party services and AI providers

Houston is designed to work with services you bring yourself. When you connect Houston to OpenAI, Anthropic, Google, Microsoft, Slack, Stripe, HubSpot, or any other third-party service, you are creating a direct relationship between yourself and that provider.

You are responsible for the choices you make with those providers, including the API keys you supply, the data you allow Houston to send on your behalf, and the costs you incur. Houston does not control and is not responsible for the practices of those providers. We strongly recommend you review their terms and privacy policies before connecting them.

6. Where information is stored

Local data created by the desktop app is stored on your own device. Houston Cloud data and account information are stored on infrastructure provided by Google Cloud, Supabase, and Cloudflare in regions chosen for reliability and performance. By using Houston Cloud you understand and agree that your information may be processed in countries other than your own.

7. Data retention

We keep personal information only for as long as we need it to provide the Services and to comply with our legal obligations. When you delete your Houston Cloud account we delete or anonymize your account data and any agent data we host within a reasonable period, except where we are required to keep it for legal, accounting, or fraud-prevention purposes.

Local files created by the desktop app are kept on your own device until you delete them.

8. Security

We use commercially reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS/TLS), encryption at rest where supported by our providers, access controls, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights and choices

Depending on where you live you may have the following rights with respect to your personal information:

• Access a copy of the personal information we hold about you.
• Correct information that is inaccurate or out of date.
• Delete your personal information, subject to legal exceptions.
• Port your information to another service in a structured, machine-readable format.
• Object to or restrict certain processing.
• Withdraw consent where we rely on consent as the basis for processing.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact us at hello@gethouston.ai. We may need to verify your identity before responding.

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, the right to delete, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.

10. International transfers

Houston operates globally. If you access the Services from outside the country where our servers are located, your information may be transferred to, stored, and processed in another country. Where required by law, we put appropriate safeguards in place for international transfers, such as standard contractual clauses.

11. Cookies and similar technologies

The gethouston.ai website uses a small number of cookies and local-storage entries for essential functionality (for example, remembering whether you have dismissed a banner) and for analytics through PostHog. The desktop app does not use cookies in the traditional web sense, but stores local preferences in your operating system's standard application-data location.

You can clear cookies and local storage through your browser settings. Blocking analytics may not affect your ability to use the Services.

12. Children's privacy

The Services are not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date above and, where appropriate, give additional notice (for example, by email or through the Services). Your continued use of the Services after the changes take effect means you accept the updated policy.

14. Contact us

Questions, requests, or concerns about this Privacy Policy or our handling of your information? Email hello@gethouston.ai.