Oct 26

Clear statement on data security of content as well as the user account

The data privacy content page focuses on the user's account data. But there needs to be clarity on how Bullet manages the security/privacy of the content. What cloud service does Bullet use? Is there a SOC2 or equivalent that people can review? What access do the admin users of the bullet team have to the users' content? Bullet's privacy policy does say that "no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure". However, it would be important to know if the design makes an attempt to encrypt the data end-to-end.

Pending

Jan 4, 2026

Hi Hamish - while I understand it may take time to create a statement on privacy for public consumption - is it possible for you to indicate here if the Bullet team has access to the information each account holder stores in the system or is it encrypted on your end such that only the account owner has access to the data?

Oct 29, 2025

True, Clarifying Bullet’s internal access policies and encryption standards would be a key step toward building user confidence. Beyond legal disclaimers, users need to understand the system’s actual safeguards and architectural choices. A transparent overview would reinforce Bullet’s commitment to privacy and responsible data stewardship.