What data does Keeping Up store, and where?
Three data categories: account, financial, derived. Stored encrypted at rest in Neon Postgres (US-East-1). Bank credentials never stored; full vendor list in Privacy Policy.
Three categories of data:
1. Account data — your email, name, password (hashed, never stored in plaintext), and your cohort identifiers (city, industry, age range). Stored in our database (Neon Postgres, US-East-1) and your authentication provider (Clerk, US data residency).
2. Financial data — your account balances, transactions, holdings, and liabilities — sourced from your linked bank accounts via Plaid. Stored encrypted at rest in our database. Your bank credentials are never stored; Plaid handles all credential management.
3. Derived data — your percentile rankings, peer comparisons, AI Advisor history, and product recommendations. Computed from your account + financial data; stored alongside.
Storage location: all data in Neon Postgres hosted on AWS US-East-1. All data in transit uses TLS 1.3. All data at rest is encrypted with AES-256 (database-level) plus application-level encryption for Plaid access tokens (a recent security upgrade documented in our compliance program).
Third-party processors: Plaid (financial data sourcing), Anthropic (AI Advisor queries — opted out of training data), Stripe (billing), Resend (transactional email), Sentry (error tracking — financial values masked), PostHog (product analytics — consent-gated, opt-in only). Full list with purposes in Privacy Policy.
Retention: active data is retained while you're a customer. Deleted account data is purged within 30 days of account deletion (some financial data is retained 7 years per regulatory requirement, then purged). Full details in Privacy Policy.