Overview

At Bucket0, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service. We are committed to ensuring that your privacy is protected and being transparent about our data practices.

Information We Collect

We collect minimal information necessary to provide our service:

Account Information: Email address, name, and profile picture provided through our authentication provider (Clerk)
Usage Data: Storage usage statistics, file counts, and activity logs for your account and teams
File Metadata: File names, sizes, types, and upload timestamps (not file contents)
Technical Data: IP address, browser type, device information, and access logs
Payment Information: Processed securely by our payment provider (Polar); we do not store full payment details

What We Don't Collect or Access

We are committed to a privacy-first approach:

File Contents: We do not access, read, analyze, or scan the contents of your files
Your S3 Credentials (Local Mode): When using local storage mode, credentials are encrypted in your browser and never sent to our servers
AI Training: Your data is never used to train AI models or for machine learning purposes
Third-Party Advertising: We do not sell your data or share it with advertisers

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our service
Track storage usage for billing and quota enforcement
Send important service updates, security alerts, and notifications
Process payments and manage subscriptions
Respond to support requests and feedback
Detect and prevent fraud, abuse, and security threats
Generate aggregated, anonymized analytics to improve our service

Data Storage and Security

We implement robust security measures to protect your data:

Encryption at Rest: Files stored on Bucket0 are encrypted using AES encryption
Encryption in Transit: All data transfers use TLS 1.3 encryption
S3 Credentials: When stored on our servers, credentials are encrypted with AES-256-GCM
Access Controls: Strict internal access controls and authentication
Infrastructure: Hosted on secure cloud infrastructure (Cloudflare R2)

While we implement industry-standard security measures, no system is 100% secure. We recommend maintaining your own backups of critical data.

Data Retention

We retain your data as follows:

Active Accounts: Data is retained as long as your account is active
Account Deletion: Data is permanently deleted within 30 days of account termination
Plan Expiry: 30-day grace period to retrieve data after plan expiration
Inactive Free Accounts: May be deleted after 12 months of inactivity with prior notice
Activity Logs: Retained based on your plan (30-180 days depending on tier)
Legal Requirements: Some data may be retained longer if required by law

Team Data

When you participate in teams:

Team owners can see activity logs showing who uploaded, deleted, or shared files
Your name and email may be visible to other team members
Team messages and chat history are stored and visible to team members
When you leave a team, files you uploaded remain with the team

Third-Party Services

We use the following third-party services to operate Bucket0:

Clerk: Authentication and identity management
Cloudflare R2: Cloud storage infrastructure
Polar: Payment processing and subscription management
Neon: Database hosting

These services have their own privacy policies and data handling practices. We only share the minimum data necessary for these services to function.

Cookies and Local Storage

We use minimal cookies and local storage for:

Authentication: Session cookies to keep you logged in
Preferences: Theme settings and dashboard preferences
Local Credentials: Encrypted S3 credentials (when using local storage mode)

We do not use tracking cookies or third-party analytics that follow you across websites.

Your Rights

You have the following rights regarding your data:

Access: Request a copy of your personal data
Correction: Update or correct inaccurate information
Deletion: Request deletion of your account and data
Export: Download your files at any time
Restriction: Request restriction of processing in certain circumstances
Objection: Object to processing of your data

To exercise these rights, contact us at [email protected]

International Data Transfers

Your data may be processed and stored in countries outside your country of residence, including countries that may have different data protection laws. By using Bucket0, you consent to the transfer of your data to these countries. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

Children's Privacy

Bucket0 is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the service. The "Last updated" date at the top of this policy indicates when it was last revised. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]
General inquiries: [email protected]