← Back to BucketDesk
PRIVACY NOTICE

Your files remain yours.

Last updated October 5, 2026

This notice explains how BucketDesk handles information when you visit our website, create an account, connect cloud storage, use previews, workflows and document AI, connect an AI assistant such as Claude or ChatGPT, or receive a secure file share.

Information we collect

We collect account and workspace information such as your name, email address, organization, role, plan, support messages, and billing status. When you connect Amazon Web Services, we process connection settings, bucket and object metadata, activity records, and the minimum information required to perform actions you request.

For secure shares, we process the recipient email address, verification and delivery status, expiration, access events, and abuse-prevention signals. We do not put verification codes, credentials, signed storage URLs, or file contents into ordinary application logs.

Customer files and temporary copies

Your Amazon S3 bucket remains the source of truth. BucketDesk uses short-lived access to retrieve or operate on objects you select. Word, Excel and PowerPoint files are previewed and edited by a document server BucketDesk runs itself; it fetches the file with a short-lived link and keeps it only while the document is open. BucketDesk does not use customer files for advertising.

Document AI

When you ask a question about a document, BucketDesk sends the question and that document to an AI model in Amazon Bedrock, running in your own AWS account through the AI role you created. We store a chat’s questions, answers and citations, encrypted, so you can follow up. Answers and citations can quote short passages of the document, but BucketDesk does not store the document itself. A chat is removed about an hour after it ends, or after 30 days if you chose to keep it.

AI assistants (Claude, ChatGPT and other MCP clients)

A Ultra workspace admin can connect an AI assistant, such as Claude or ChatGPT, to BucketDesk. You sign in to BucketDesk, choose one workspace, and choose read-only or read and write access. The assistant can then act in that workspace on your behalf, with your permissions, until you disconnect it.

What we store for a connection. The assistant’s name and sign-in addresses, which workspace and access level you chose, who approved it and when, and when it was last used. Sign-in codes and tokens are stored only as one-way hashes. The connection appears in Settings → API tokens.

What the assistant receives. Only the results of the actions it asks for:

BucketDesk does not receive your conversation with the assistant, only the actions it asks us to perform. The assistant’s provider, such as Anthropic for Claude or OpenAI for ChatGPT, handles what it receives under its own terms and privacy policy, which you agreed to with that provider. BucketDesk does not sell this information, does not use it for advertising, and does not use it to train AI models.

Searches. When an assistant searches your files, BucketDesk lists file names live from your bucket and matches them. We do not store or log the search words, or keep an index of your file names.

Activity records. Actions an assistant takes are recorded in your workspace’s activity log, like your own actions in BucketDesk. A record can include the file path that was viewed, previewed, shared or archived.

Retention.

Disconnecting. Revoking the connection in Settings → API tokens stops access straight away. Removing BucketDesk in the assistant stops the assistant from using it; the last token then expires within an hour, and the connection is deleted once its refresh token expires. A connection also stops working if the admin who approved it leaves the workspace, stops being an admin, or the workspace leaves the Ultra plan.

How we use information

We use information to provide and secure the service, deliver transactional messages, diagnose failures, prevent abuse, support customers, process subscriptions, and improve reliability. Optional product marketing is separate from service messages and requires its own consent.

Service providers

We use service providers including Amazon Web Services for infrastructure and transactional email, Stripe for payment processing, and Google Analytics and Google Ads for measurement. Until you choose “Accept all”, Google receives cookieless measurement signals only; with your consent it also uses analytics and advertising cookies, including to show BucketDesk ads on other sites. These providers process information for the services they supply to BucketDesk. AI assistants you connect yourself, such as Claude or ChatGPT, are not our service providers; see the AI assistants section above.

Retention and security

We retain information only while needed to provide the service, meet security and legal obligations, resolve disputes, and maintain required records. Retention varies by record type, plan, and customer configuration. We use role-based access, encryption, scoped cloud permissions, rate limits, and audit records to reduce risk, but no online service can guarantee absolute security.

Your choices

You may decline optional analytics and marketing. Workspace owners control connected cloud resources and member access. You may request access, correction, or deletion of personal information, subject to legal and operational retention requirements.

Contact

Email hello@bucketdesk.com with “Privacy request” in the subject line.

We use cookies and similar technology for a few things, like:If you choose “Accept all”, we’ll also use Google Analytics and Google Ads cookies for things like:

We never send file contents, credentials, email addresses, or secure link tokens.

Read the privacy notice