Effective 2026-09-23 · Ironwood Cloudworks LLC
The short version. Slipstream keeps the data you put in it and, if you connect a bank, the transactions Plaid sends us. We use it to run your budget and for nothing else. We do not sell it, share it with advertisers, or run trackers. You can download everything and delete your account yourself, at any time, from Settings.
Slipstream is operated by Ironwood Cloudworks LLC ("Ironwood", "we"). Questions about this policy or your data: privacy@slipstream.money. Security concerns: security@slipstream.money.
| Data | Where it comes from | Why we have it |
|---|---|---|
| Email address and name; a password hash if you use one | You, at sign-up; or Google if you sign in with Google (we receive your email, name and a Google account id) | To sign you in and reach you about your account |
| Your household: accounts, entries, categories, payees, budgets, goals | You, as you use the app; or created from bank data you chose to connect | It is the product |
| Bank accounts, balances and transactions from a connected bank | Plaid, only for banks you connect. Your bank login goes to Plaid and never to us; Plaid gives us an access token, which we store encrypted | To pull transactions into your ledger |
Session cookie (slp_session) and any API tokens you create | Set when you sign in or mint a token | To keep you signed in; the cookie holds a random id, nothing about you |
| Feedback you send from the app | You | To read it |
| An audit log of changes to your household (who did what, when) | Generated as you use the app | So you can see what changed, including what an API token did on your behalf |
| Server logs: request ids, your user and household ids, actions, errors | Generated by our servers | To keep the service running and investigate problems |
We do not collect your location, contacts, or device identifiers, and there are no analytics or advertising trackers on the site or in the app.
us-east-1) hosts everything: the database, backups, and the servers. Data is encrypted at rest and in transit.No one else. We do not sell personal data, and we do not use Plaid data for anything but the household that connected the bank.
| Data | Kept until |
|---|---|
| Everything in your household | You delete the account. Deletion removes every row we hold, immediately. |
| Connected-bank data | You disconnect the bank or delete the account. Transactions already in your ledger stay as ledger history until you delete them or the account. |
| Sessions | 30 days, or when you sign out |
| Database backups | 14 days, then gone. A deleted account can still exist in a backup for up to 14 days; backups are encrypted and are only ever restored whole, to recover from a failure. |
| Server logs | 30 days |
If you would rather we do any of this for you, or you have a question we have not answered, email privacy@slipstream.money. We answer within 30 days. Residents of California, the EU and the UK have these rights in law; we extend them to everyone.
Bank access tokens are encrypted before they are stored. Passwords are hashed. Connections to our database require TLS. Operator access to production requires a passkey. We keep an audit trail of account-level actions in AWS for a year. If a breach affects your data we will tell you, by email, without undue delay. Report a vulnerability to security@slipstream.money.
Slipstream is for adults managing money. It is not directed to anyone under 18, and we do not knowingly hold data about them; if we learn we do, we delete it.
If this policy changes in a way that matters, we will email account holders before it takes effect and note the date at the top of this page. The current version is always at slipstream.money/privacy.html.