Updated September 2026
At BUCS Analytics, we are committed to protecting the privacy and security of our clients’ data. This privacy policy outlines how we collect, use, retain, and secure any data shared by our clients. By using our services, you agree to the practices described in this policy.
Who we are
BUCS is a purpose-built FP&A platform for PE firms and their portfolio companies, growth-oriented businesses, and advisors. We help clients overcome common challenges and generate prescriptive analyses that inspire thoughtful, strategic organizational investment decisions. We process millions of data points every day via connections to 100’s of accounting/finance, payroll, operations, CRM, and custom internal client applications. Fueled by our proprietary software, we integrate and organize disparate data sources into comprehensive, and easy-to-access dashboards or land the consolidated data sets in your reporting environment if that’s your preference.
Our website address is: https://bucsanalytics.com/
1. Information Collected
Financial Data: We collect financial data from various sources, including third-party platforms including but not limited to QuickBooks, NetSuite, Sage Intacct, Service Titan and client internal sources Google Drive, SharePoint, One Drive and other accounting and financial systems. The data is collected only at the explicit request and authorization of the client. The information we collect may include, but is not limited to:
- Financial transactions and records
- Income and expense details
- Budgets and forecasts
- Tax-related information
- Any other financial data necessary for FP&A reporting and insights
Credentials: Depending on the services you use, you may provide us with credentials to access financial data in your CRM, ERP or other financial accounting system. This information is provided so BUCS can establish an ongoing data connection with these data sources.
User Profile: We ask for basic information when setting up your account and user/customer accounts for those within your organization. For example, we ask for email address and passwords and keep track of user connections to individual companies in order to provide our services. Users can request or delete their personal information they have provided at any time. Deleting this personal information also deletes the user’s profile account.
Payment and contact information: There are various ways in which you may provide payment information and associated contact information. You may provide credit card, name and contact information or ACH information for electronic bank transfers.
Usage information: Like most online service providers, we collect information about the actions site administrators and users perform on our BUCSconnect and reporting sites. We collect information such as page views, change logs (change initiated, user who initiated change, date and time), device information (e.g., browser, IP address, mobile device manufacturer, screen size). We use this information to provide certain services and gather insights around how users use our system so we better enhance our product and services.
Location: We determine user’s location via their browser settings and use this information to display certain information, such as data refresh date and times, in the user’s local time zone.
Comments: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
2. Use of Data
We use information about you for the purpose listed below.
To provide our Services: For example, to set up and maintain your account, to verify user information, provide customer service, and process payments. Also, to provide access to consolidated datasets and platform features through our Customer Portal, Data Feed, and Data Feed Excel and Power BI plugins.
To provide FP&A insights: The financial data collected from clients is used solely for the purpose of generating comprehensive FP&A reports and insights. These reports provide valuable information to help clients make informed financial decisions, identify trends, forecast future performance, and optimize their business strategies.
To improve our Services: For example, by monitoring and analyzing how users interact with our platform we can create new features that benefit our clients our make our Services easier to use.
To fix problems with our Services: Through monitoring, logging, debugging, fixing, and preventing issues.
To customize the user experience: For example, providing users with specific functionality based on role permissions (e.g., site administrator or connection manager) and presenting the correct reports to users based on their role and company associations.
To communicate with you: For example, communicating by phone or email for day-to-day account management, emailing users for feedback on the platform, to keep you up to date and share latest platform enhancements and new releases.
3. AI Assistants and Connectors
BUCS Analytics offers a connector, built on the Model Context Protocol (MCP), that lets an AI assistant you choose, such as Claude or Microsoft Copilot, retrieve financial data from your BUCS account so it can answer your questions. This section explains what the connector accesses, who receives that data, and the choices you have. It supplements the rest of this Privacy Policy. Where this section and your BUCS service agreement differ, your service agreement governs.
What the connector can access
The connector only accesses data you authorize when you connect it. During sign-in you choose:
- Which companies the assistant may read: a single company, the companies assigned to you, or, for firm administrators only, all companies in your firm.
- Which datasets the assistant may read, such as trial balance, general ledger, or AR/AP aging.
- Whether the assistant may access portal dashboards. This is a separate, optional permission.
The connector returns accounting and analytics data computed from your connected financial systems. It does not access your email, files, calendar, or other data held by your AI assistant’s provider.
The connector is read-only, with one exception: creating draft dashboards and updating dashboards. That requires an explicit permission granted by a firm administrator, and firm-wide dashboards are saved as drafts until an administrator approves them.
Who receives the data
- The AI assistant you connected. When the assistant calls the connector, the data returned is sent to that assistant so it can answer your request. Once received, the data is handled under that assistant provider’s own terms and privacy policy. BUCS does not control how a third-party AI provider stores or uses data. Please review your provider’s terms, including whether your plan permits the provider to use conversations to improve its models.
- Our service providers. BUCS operates the service on Microsoft Azure and uses service providers who process data only to provide the service, under confidentiality obligations.
- We do not sell your data, and we do not disclose it to anyone else except as required by law or at your direction.
AI model training
BUCS does not use your financial data, or records of your connector usage, to train artificial intelligence or machine learning models.
Connector usage records
To secure the service and meet our audit obligations, BUCS records each connector request: the user or API key that made it, the firm and company in scope, the tool used, the IP address, the time and duration, and whether it succeeded. We also record each time a user grants an assistant access. We use these records for access control, detecting unusual activity, and audit and compliance purposes.
Usage records are retained for up to seven years to meet SOC 1 audit requirements and then deleted. Your underlying financial data is retained as described elsewhere in this Privacy Policy and in your service agreement.
How the connector protects your data
- All connections use encrypted HTTPS, and data is encrypted at rest.
- Sign-in uses OAuth 2.1 with PKCE. Access tokens expire after one hour, and refresh tokens rotate on every use.
- Every request is checked against the companies and datasets you authorized. Requests outside that scope are rejected.
- Client secrets are stored only in hashed form.
Your choices
- Choose what to share each time you connect an assistant: which companies and which datasets.
- Revoke access at any time. Revoking an API key takes effect immediately. Revoking an assistant connection stops it from obtaining new access, and any access already issued expires within one hour.
- Request access, correction, or deletion of personal data we hold about you in connection with the connector, subject to our legal and audit obligations, by contacting support@bucsanalytics.com.
The connector is a business tool that returns a company’s own accounting records. It does not profile individuals or make automated decisions about them. Personal data that appears incidentally in financial records, such as a customer or vendor contact name, is processed only to return the data you requested.
4. Sharing Data
Third-party platforms: We share information, such as usernames, passwords, API Keys with third-party platforms when BUCS initiates a data connection upon your request (e.g., you use the BUCS QuickBooks data connection wizard to establish a connection between BUCS and your QuickBooks data). We do not share client financial data with any third parties for marketing purposes. However, we may share this data with trusted third-party service providers who assist us in generating the FP&A reports and insights (e.g. Spotfire or Power BI). These service providers are contractually obligated to maintain the confidentiality and security of the data.
With your consent: We may share and disclose information with your consent or at your direction. For example, we may share your information for marketing purposes, such as case studies or social media campaigns, when you authorize us to do so.
Website comments: Visitor comments may be checked through an automated spam detection service.
Password reset: If you request a password reset, your IP address will be included in the reset email.
5. Data Security
We employ robust security measures to safeguard the financial data and user information shared by our clients. Access to this data is restricted to authorized personnel only and is stored securely on our servers with appropriate encryption and access controls. Our staff is trained to handle financial data with utmost confidentiality and in compliance with applicable laws and regulations.
6. Data Retention
Financial information used to support FP&A reporting and insights is retained throughout your contracted agreement with BUCS Analytics. Customers can request data be discarded upon contract termination.
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
7. Client Rights
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
8. Changes to Privacy Policy
We may update this privacy policy as needed to reflect changes in our practices or for legal reasons. The most current version will be posted on our website, and we encourage clients to review it regularly.
9. Contact Us
If you have any questions about this privacy policy or the way your data is handled, please contact us at support@bucsanalytics.com.
By providing access to your data and using our services, you acknowledge that you have read and understood this policy and agree to its terms.
