Terms of Service

BucketPilot (bucketpilot.io) is operated by Bucket Pilot, Inc., a Delaware corporation ("we", "us", "our").

Registered office: 2810 North Church Street, Wilmington, DE 19802, United States.

These terms form an agreement between us and the person or organisation using the service ("you"). By creating an account, or by using BucketPilot under an account someone created for you, you agree to them. If you are agreeing on behalf of an organisation, you confirm you are authorised to bind it.

They apply alongside our Privacy Policy, which is part of this agreement.

• •You must be at least 18 and able to enter a contract.
• •The details you give us must be accurate, and you are responsible for keeping them current.
• •You are responsible for what happens under your account, including what the people you invite do. Keep your credentials secret; tell us promptly at [email protected] if you believe they have been compromised.
• •A workspace is either your personal account or an organization. Everything — credentials, buckets, jobs, activity — belongs to exactly one workspace, and organization roles (admin, member, read-only) decide who may change what.
• •The organization owner is the billing anchor for that workspace. Because their plan is what enables the workspace for everyone in it, an owner cannot close their account without first transferring ownership.

BucketPilot connects to storage you already control — Amazon S3, Cloudflare R2, Google Cloud Storage, Azure Blob, Wasabi, and your own Linux or Windows servers over SSH/SFTP — and lets you search it, back it up, migrate it, analyse its cost and control who reaches what. It also offers BucketPilot Cloud, storage we provide directly (clause 7).

Your storage remains yours. We claim no ownership of it and act only on the operations you configure. We may change, improve or discontinue features; where a change materially reduces what a paid plan does, we will tell you before it takes effect.

To do anything useful we need access to your storage. You choose how much.

• •The recommended path on AWS is a CloudFormation role: you create a least-privilege IAM role in your own account with a unique ExternalId, and no long-lived keys are stored by us at all. You revoke our access at any time by deleting the stack, and that revocation is immediate and complete.
• •Where keys are used instead (access keys, R2 tokens, GCS interop keys, SSH private keys), we encrypt them at rest with AES-256-GCM, and no API returns them after saving.
• •We will use that access only to perform the operations you have configured, to diagnose a problem you have raised with us, and where we are legally required to.

You are responsible for making sure the access you grant is one you are entitled to grant, and for the permissions attached to it. If you hand us a key with more power than the task needs, we will say so at the point you save it — but the key is still yours.

You are responsible for your content and for having the rights to it. You agree not to use BucketPilot to:

• •store, transfer or distribute anything unlawful, or anything you have no right to;
• •infringe intellectual property, privacy or publicity rights;
• •distribute malware, or attempt to gain unauthorised access to any system — ours, a customer's, or a third party's;
• •interfere with the service, circumvent its limits, or use it to attack anyone;
• •resell the service, or expose it as your own product, without our written agreement.

We do not monitor your content, and nothing in this clause obliges us to. Where we are made aware of a serious breach of it we may act under clause 13.

• •Plans, their limits and their prices are on the pricing section of our site and on your Billing page. Paid plans are billed monthly or yearly in advance through Stripe.
• •A free trial runs for the period stated when you start it. We will tell you before it ends. No card is required to begin one.
• •Plan fees are not refundable for a period already begun, except where the law says otherwise or where we have failed to provide the service. Cancel at any time; your plan then runs to the end of the period you have paid for.
• •Prices exclude taxes unless stated. Where we are required to collect tax, it is added at checkout.
• •BucketPilot Cloud storage is metered and billed separately from the plan fee, on actual usage (clause 7).
• •If a payment fails we will retry and tell you. Persistent non-payment moves the workspace to read-only access rather than deleting anything.
• •We may change prices. An existing subscription keeps its price until the end of its current period, and we will give you notice before the new price applies.

Where you create a BucketPilot Cloud bucket, we store those files for you, in the region you chose for that bucket. Specific terms apply:

• •Storage is billed on measured usage, averaged daily over the month, at the rate shown before you create the bucket.
• •Data written to Cloud storage carries a 90-day minimum billing term. Deleting it sooner ends the storage but not the charge for the remainder of that term; deleted data is itemised on the invoice so the charge is never a surprise.
• •A deleted Cloud bucket stays restorable until its billing term ends, and is then removed permanently.
• •Versioning is off on Cloud buckets.
• •You remain responsible for your content in Cloud storage exactly as in clause 5, and for keeping a copy of anything you cannot afford to lose. We are not your only copy unless you have decided we are.

We work to keep BucketPilot available and quick, but except under a written Enterprise agreement we do not offer a service level agreement, and the service is provided as described in clause 14.

Support is included with every paid plan, through the in-app assistant and at [email protected]. Enterprise agreements may set response times; nothing else does.

We may take the service down for maintenance. Where that is planned and disruptive, we will give notice.

How we protect your data — encryption, tenant isolation, the audit trail, what our infrastructure does and does not touch — is described in the Privacy Policy and in our security documentation. Those descriptions are commitments under this agreement, not marketing.

On certifications: we hold no third-party security attestation today, and we do not claim one. When we complete one, it will be named on the Privacy Policy with its type, its period and its auditor. See Compliance and certifications for what is in place in the meantime, and ask us if your procurement process needs more than that page contains — you will get an engineer, not a form.

For personal data we process on your behalf, you are the controller and we are the processor. What we process, why, for how long and who else touches it is set out in the Privacy Policy, which is part of this agreement.

If you need a data processing agreement for your own compliance, write to [email protected] and we will put one in place.

We own BucketPilot — the software, the interface, the documentation and the brand. These terms grant you a non-exclusive, non-transferable right to use the service for the duration of your subscription, and nothing more.

You own your content and your data. You grant us only the licence needed to operate the service for you: to store, copy, transmit and display your content as the operations you configure require.

If you send us feedback or a feature idea, we may use it without obligation or payment. You are not required to send us any.

Each of us may learn things about the other that are not public. Neither will disclose the other's confidential information to anyone except employees, contractors and subprocessors who need it and are bound to keep it confidential, or where the law compels it — and where the law compels it, we will tell you unless we are forbidden to.

Your data and your credentials are your confidential information. This obligation survives the end of this agreement.

You may close your account at any time, from Settings. Closing it cancels the subscription, ends the sessions and hides the workspace immediately — and deletes nothing for 30 days, so a misclick is recoverable. After 30 days the account and the data belonging to it are deleted for real, and that deletion cannot be undone. (An organization owner must transfer ownership first — clause 2.)

We may suspend or end your access where you materially breach these terms, where your use puts the service or another customer at risk, or where the law requires it. Except where the risk is immediate, we will tell you first and give you a reasonable chance to put it right.

On termination: your right to use the service stops; unpaid fees remain due; BucketPilot Cloud data follows clause 7; and clauses 11, 12, 14, 15 and 16 survive.

Non-payment is not termination. A lapsed subscription becomes read-only access — browse and download — kept for as long as you want it, not deleted.

To the fullest extent the law allows, the service is provided "as is" and "as available", and we disclaim all implied warranties, including merchantability, fitness for a particular purpose and non-infringement.

We do not warrant that the service will be uninterrupted or error-free, or that it will detect every problem in your storage.

Specifically, and importantly: a backup is a copy, not a guarantee. You are responsible for verifying that your backups meet your own recovery requirements, and for keeping a copy of anything you cannot afford to lose. Test your restores.

To the fullest extent the law allows:

• •Neither of us is liable for indirect, incidental, special or consequential loss, or for lost profits, revenue, goodwill or data, however caused.
• •Our total liability arising out of or relating to this agreement is limited to the amount you paid us in the twelve months before the event giving rise to the claim.

Nothing here limits liability that cannot be limited by law — including death or personal injury caused by negligence, and fraud.

If you are a consumer, your statutory rights are unaffected by this clause.

You will defend and indemnify us against claims, damages and reasonable costs arising from your content, from your use of the service in breach of these terms, or from access you granted us that you were not entitled to grant.

We will tell you promptly of any such claim, let you control the defence, and give you reasonable cooperation.

We may update these terms. The effective date at the top of this page always states which version is in force, and every past change is listed at the bottom.

Where a change materially affects your rights we will give notice — by email to the account's address, or in the product — before it takes effect. Continuing to use BucketPilot after that date means you accept the new version; if you do not, close your account (clause 13).

Governing law. This agreement is governed by the laws of the State of Delaware, United States, and the courts there have exclusive jurisdiction, subject to any mandatory rights you have where you live.

Assignment. You may not assign this agreement without our consent. We may assign it as part of a merger, acquisition or sale of assets, on notice to you.

Entire agreement. These terms and the Privacy Policy are the whole agreement between us about the service, and replace anything said before — except a signed Enterprise agreement, which takes precedence over these terms where the two differ.

Severability. If a clause is unenforceable, the rest stays in force.

No waiver. Not enforcing a right on one occasion does not waive it.

Questions about these terms or a security review: [email protected].

Anything about personal data — a data processing agreement, a request to exercise your rights, a question about the Privacy Policy: [email protected].