Last updated: March 21, 2026
BuKeep is operated by BuKeep LLC ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use bukeep.com and related services (collectively, the "Service").
When you create an account, we collect your name, email address, and password (stored as a secure hash). Organization owners also provide company name, industry, company size, and optional contact information.
When you upload receipts, invoices, or bank statements, we store the document files and the transaction data extracted from them (dates, merchant names, amounts, categories). Documents are stored in Amazon Web Services (AWS) S3.
We collect information about how you use the Service, including pages visited, features used, documents processed, AI processing costs, and timestamps. We use Google Analytics to collect aggregated website traffic data.
Payment processing is handled by Stripe. We do not store credit card numbers, CVVs, or full payment details on our servers. Stripe's privacy policy governs their handling of payment data.
We use essential cookies to maintain your login session and preferences. We also use analytics cookies (Google Analytics) to understand website usage. You can manage cookie preferences through your browser settings or our cookie consent banner.
We use your information to:
When you upload documents, they are transmitted to Anthropic's Claude AI for text extraction and transaction classification. Documents are sent for processing only — they are not used by Anthropic to train their AI models. We do not permanently store your documents with Anthropic.
We may create anonymized and aggregated data from your use of the Service. This data cannot be used to identify you or your organization. We may use anonymized data for:
We will never sell, license, or share your personally identifiable information or raw financial documents with third parties for their marketing purposes. Only anonymized, aggregated data that cannot be traced back to you or your organization may be shared or commercialized.
We share data with the following service providers, solely to operate the Service:
Each provider is bound by their own privacy policies and data processing agreements.
We retain your data for as long as your account is active. When you request account deletion:
We implement industry-standard security measures including encrypted data transmission (TLS/SSL), hashed passwords (bcrypt), server firewalls, and access controls. However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
If you are a California resident, you have the right to:
To exercise these rights, contact us at privacy@bukeep.com.
If you are in the EU or EEA, you have the right to:
Our legal basis for processing is contract performance (providing the Service), legitimate interest (product improvement, security), and consent (analytics cookies, marketing communications). Contact privacy@bukeep.com to exercise your rights.
BuKeep is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it.
Your data is processed and stored in the United States. If you access the Service from outside the US, your information will be transferred to and processed in the US. By using the Service, you consent to this transfer.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 14 days before taking effect. Continued use of the Service after changes take effect constitutes acceptance.
For privacy-related inquiries: privacy@bukeep.com
BuKeep LLC