The data privacy content page focuses on the user's account data. But there needs to be clarity on how Bullet manages the security/privacy of the content. What cloud service does Bullet use? Is there a SOC2 or equivalent that people can review? What access do the admin users of the bullet team have to the users' content? Bullet's privacy policy does say that "no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure". However, it would be important to know if the design makes an attempt to encrypt the data end-to-end.