What Headroom reads, what it keeps, and how to make it forget you.
Headroom connects to your bank through Plaid with read-only access to the accounts you choose: balances and transactions. It cannot move money, and it never sees your bank password.
Your email, so you can sign in. Your plan (a small text file of paychecks and bills). A copy of the last thirteen months of transactions and balances from the linked accounts, refreshed about once an hour. The Plaid tokens that allow those refreshes.
Nothing else: no categories, no analytics, no advertising identifiers.
On one server in Dallas, on an encrypted disk with daily backups that age out after two weeks. Server logs hold counts and errors, never transactions.
You. The person running Headroom can reach the database for backups and bugs, and does not sell, share or look through your data.
Connections → Delete my account revokes every bank link at Plaid and removes your plan, history and sign-in sessions right away. Backups age out on their own within two weeks.
Questions: get in touch.