Bucket uses third party subprocessors, such as cloud computing providers and customer support software, to provide our services. We enter into GDPR-compliant data processing agreements with each subprocessor, extending GDPR safeguards everywhere personal data is processed.
Subprocessors are split into two groups:
Subprocessors used for data about you (our customer), which Bucket in GDPR terminology is the controller of.
Subprocessors used for data about your own customers/users, which Bucket in GDPR terminology is the processor of, and you are the controller of.
Our customers' data #
Bucket is the controller of data about you (our customer). This does not include data about your customers/users.
. Account authentication. USA.
. Server hosting. All servers are located in US East region. USA.
. Database hosting. All databases are located in US East region. USA.
. Performance monitoring. All data is wiped after 15 days. USA.
. Payment processing and management. USA.
. Customer support, onboarding and segmentation. USA.
. We send data through Segment to Intercom and Bucket. USA.
. Internal and external communication. USA.
Our customers' users' data #
We are a processor of data about your users/customers. We do not share or sell this data with any other providers. We only store it in our data center hosted with Google Cloud Platform.
. Queing (Kafka). All servers are located in US East region. USA.
. Database (ClickHouse) hosting. All servers are located in US East region. USA.