Security

Your dealership's customer list is one of its most valuable assets, so we treat it that way. This page explains, in plain terms, how we keep your data safe and what we expect from each other. If you are running a formal security review, email us and we will walk your team through the specifics.

Encryption

Data is encrypted in transit between your devices and our servers using industry-standard TLS, so the information moving between the app and Bucket cannot be read along the way. Data is also encrypted at rest in the managed databases where it is stored.

Infrastructure and availability

Bucket runs on reputable, managed cloud infrastructure rather than servers in a closet somewhere. That gives us hardened data centers, network-level protections, and automated, managed backups so your data can be recovered if something goes wrong. We monitor the platform for errors and unusual activity and work to resolve issues quickly.

Access controls

Access inside your account is role based, so each person on your team sees only what their job requires. On our side, access to production systems and customer data is limited to the people who need it to operate and support the product, and that access is granted on a least-privilege basis.

Authentication

Sign-in is handled by a dedicated authentication provider, which means we do not store your password in plain text. We encourage every user to choose a strong, unique password and to keep their account credentials private.

Payment security

Payments and billing are processed by Stripe, a PCI-compliant payment provider. Bucket does not store full card numbers on our own systems. When you or your customers pay through Bucket, the sensitive payment details are handled by Stripe's secure infrastructure.

Your data stays yours

The customer and equipment data you keep in Bucket belongs to you. You can export all of it at any time, at no charge, and you can ask us to delete it. We built the product that way on purpose, with no lock-in.

Our shared responsibility

We protect the platform; you protect your account. Please use strong passwords, remove team members who leave, and review who has access from time to time. No method of electronic transmission or storage is ever completely secure, so while we work hard to protect your information, we cannot guarantee absolute security, and good account habits on your end go a long way.

Reporting a concern

If you believe you have found a security issue, please email sales@mybucketcrm.com with the details so we can look into it right away. We appreciate responsible disclosure and will work with you to confirm and address any legitimate issue.