Security

Transport

The hosted service is served over HTTPS. Everything your machines send it — device tokens, transcripts, control commands — travels over that TLS connection.

Self-hosting is your call, and Longhouse will not add TLS for you. If you point a machine at a plain http:// address that isn't loopback, its device token and its transcripts cross your network in the clear. Put the instance behind TLS, or keep it on a private overlay network you trust.

Authentication

Self-hosted instances use password authentication by default. The hosted service supports OAuth providers. Longhouse never stores third-party passwords.

Integration Credentials

When you connect integrations (Slack, Discord, GitHub, etc.), your credentials are stored encrypted and only used to connect to those services on your behalf.

What Sessions Contain

Longhouse stores agent transcripts as they were produced. It does not scrub secrets out of them, so anything your agent printed — keys, tokens, passwords — is in the archive. Anyone who can read your Longhouse account can read those values.

Retention and Deletion

We keep your transcripts until you delete them. Nothing expires on a timer, and we don't thin old history to save space.

There is no delete button in the app yet, so you email us and we run it within 7 days. The deletion itself is immediate: it removes the session from the live service — the catalog rows, the search index and its embeddings, and the stored transcript bytes. A real delete, not a flag that hides the session from view. The server reports what it removed, and it names anything it could not reach instead of claiming a clean sweep: today that always includes an older archive copy of the transcript on the server, and any media file another session still points at.

Backups are the honest exception. We back the hosted database up off-site, encrypted, and a snapshot taken before you deleted something still holds it until that snapshot ages out — recent copies for two days, daily copies for two weeks, eight weekly copies, and three monthly copies. We never restore deleted data back into the service.

So deleting a session is not the same as un-leaking a secret. If a transcript ever held a live key, token, or password, rotate it. Rotation is the only thing that actually revokes it.

Your Controls

You have control over your data:

• View - See your sessions and timeline data
• Revoke - Revoke a device token, or disconnect an integration and delete its credentials
• Delete - Delete a session or your whole history. There is no delete button in the app yet, so email support@longhouse.ai from your account address and we run it

Responsible Disclosure

If you discover a security vulnerability, please report it to us:

• Email: support@longhouse.ai
• Include details and steps to reproduce
• Allow reasonable time for us to address it