Updated October 31, 2026

Privacy at Treehaus

Treehaus is being developed by Spencer Healey. For questions about your information, contact spencer@treehaus.tech.

Earlier waitlist signups

We collect your first name, email, any product or website details and comments you choose to provide, and a record of your contact preference and signup time. We use these to manage the waitlist, contact you personally about your needs, and share relevant early-access updates. Joining does not create a product account. You can reply to ask us to stop contacting you at any time. We keep conversation notes, interview findings, beta feedback and confirmed customer-stage changes with your record.

Your connected workspace

Public beta signup is open to verified email accounts. We send a secure email link to create an account or sign in. We store your account email, the name and business details you enter, subscription records, selected provider resources, the latest returned details, and timestamps and errors from connection checks. Workspace records are separated by account and project. Each project can have its own name, email, domain, software and connections. Signing up does not subscribe you to marketing or grant access to Treehaus’s internal outreach.

The current release reads public A, MX and NS domain records through Cloudflare on a scheduled basis, even when your browser is closed. We retain check timestamps, changes and failed-read results for seven days. No registrar permission is required. Public DNS records do not establish website uptime, successful email delivery or renewal dates.

Supabase stores workspace records. Vercel hosts the application and scheduled checks. Provider credentials stay encrypted on the server. GitHub, Supabase, Vercel, Resend, Notion and Windsor offer direct account connections in early access. Google account connections remain unavailable while provider approval is pending. No credentials are included in workspace exports or marketing analytics. As customer connections become available, each connection explains the access requested and the specific resource details checked. Checks are scheduled after you choose a resource; timing can vary with demand and provider availability, and each result shows its timestamp. dated results are retained for seven days. Google and Notion customer connections use separate Treehaus registrations and encrypted server-side credentials, with automatic renewal after your consent. Treehaus does not import Notion page bodies or Google Workspace inboxes. Google Ads reports include your selected account’s reported spend and results; Treehaus does not change campaigns.

Disconnecting, archiving and removing workspace data

Disconnecting removes the saved Treehaus credential and current resource snapshot. Your software, recorded costs and notes remain in Services and Costs. A provider-side authorization can remain active after disconnection; revoke Treehaus in that provider’s account settings to end the grant there as well.

Archiving a subscription or dismissing unfinished setup stops it appearing in the active workspace but retains its saved records and any connection credentials so it can be restored. Archive is not deletion or provider revocation. Domain checks run in the background; pausing a domain or service stops further checks. Earlier results remain for the seven-day retention period.

You can export your saved records and the latest 50 domain checks and 50 service checks from Saved records. During early access, contact spencer@treehaus.tech to request older retained check history, correction, account closure or deletion. Records are kept until removed through that process or no longer needed to provide the service, subject to necessary recordkeeping. Treehaus’s own outreach workflows are restricted to the founder; connecting a customer workspace does not enroll that business in those workflows.

Understanding visits and ads

Google Ads measures ad impressions and clicks. Our public marketing pages load Google’s measurement tag with advertising and analytics storage denied by default. Without permission, Google may receive limited cookieless signals, including basic technical request information. We do not enable personalized advertising or automatically send your name, email or form comments to Google.

If you allow measurement, we store a random browser session identifier, landing-page and form-start events, and campaign parameters or ad click identifiers. This helps connect a visit with a signup. With measurement permission, completing a new account’s first project sends Google an opaque conversion receipt, once per account. The receipt does not include your email, project name, domain or workspace contents. Existing accounts and additional projects do not count as new account signups. Your choice is stored in your browser. Attribution in your browser expires after 30 days and sessions restart after 30 minutes of inactivity. You can change your choice using “Privacy choices.” Declining does not prevent joining.

We also use Vercel’s page analytics on public pages. Private workspace activity and sign-in links are excluded from marketing measurement. The generic signup-completion page can send the conversion described above, without private workspace details. No system captures every visit: consent choices, browser restrictions and ad blockers can limit measurement.

Where information is kept

Vercel hosts the website and processes requests. Supabase stores signup and measurement records with restricted access. We use Notion to organize personal outreach and Google Workspace for personal email. These providers process information to support those services. We do not sell your contact details.

Keeping and removing information

We retain waitlist and conversation records while they are useful for early-access outreach and product research. You can email us to request access, correction, removal, or an end to contact. We review those requests and retain only information needed for legitimate recordkeeping or legal obligations. Browser attribution expiry does not automatically remove a previously saved signup.

Security and contact

Signup records are restricted to the founder and authorized service processes. We validate submissions and apply abuse controls. No online service can guarantee absolute security. Please avoid including sensitive information in optional comments.