Privacy, in plain language.

Account information

SideRooms uses Amazon Cognito for Google sign-in and single-use email sign-in links. Headroom receives your verified account identifier and email address to establish your workspace session.

Your prompts and content

Headroom stores saved goals, canvas text, goal-attached chat exchanges, optional context cards, and references to any linked Stillroom Project or Brand in its EU workspace table. Context cards can use custom types such as Person, Place, or Idea. For an assistant request, Headroom selects up to four cards using text matches against their type, name, tags, and details. If you link a Stillroom Project or Brand, Headroom reads its selected creative direction from Stillroom and can use it when responding in that chat; the Project and Brand remain stored in Stillroom. Review or remove context that is no longer accurate. Assistant requests are gated until the account has an active billing profile, credits, reviewed usage rates, and an eligible regional endpoint. When enabled, the prompt and required context will be sent to OpenAI; the model provider processes content under its own service terms and data controls. Research requests may also use hosted web search; Headroom displays links returned as citations. Search and regional support depends on the configured endpoint and account eligibility, and web sources may be incomplete or outdated.

Temporary mode keeps its turns only in the current page's memory and does not add them to your saved Headroom workspace. The prompt and recent temporary turns still pass through Headroom's assistant service and the configured AI processing service; their retention and data controls still apply. Refreshing or closing the page clears the temporary conversation.

If you ask Headroom to help in a group, it receives only messages already shared in that group; private goals, context cards, memories, and side conversations are not loaded. Group participants see messages posted to their room. An invitation is sent to the email address entered by the group owner, is valid for seven days, and can only be accepted by signing in with that same email. Invitation links and group messages are stored in the EU workspace table. Headroom currently has no connected MCP services or external workspace integrations. If integrations are added, this notice must be updated before they receive workspace content.

Storage region

Headroom supports EU accounts only. Each member's personal goals, conversations, canvas, and context cards remain in a separate private workspace. A group conversation is shared only with its invited participants; it does not grant access to their personal workspaces. US storage and region changes are not available. A region label alone does not establish legal compliance: storage, backups, logs, processing services, and integrations must all be configured and verified for that region.

OpenAI’s regional storage and processing availability depends on account eligibility and endpoint support. If an eligible regional endpoint is not configured, Headroom blocks the request rather than silently routing it elsewhere.

Choices and contact

Do not add sensitive information unless it is needed for your work. You can stop using Headroom and sign out at any time. For account or data requests, contact SideRooms through the support address shown in your account communications.

This page describes the current product implementation and is not a legal compliance certification.