Privacy Policy for Ultimate Envelopes

Effective Date: January 1, 2026
Last Updated: March 5th, 2026

Ultimate Envelopes (“the App”) is a comprehensive envelope budgeting system built on Google Sheets that leverages Tiller for data aggregation. Your privacy is important, and this Privacy Policy explains what information is (and is not) collected, how it is used, and how it is protected.

1. Information We Collect

Ultimate Envelopes collects minimal information necessary to provide its functionality.

Information Collected:

Email address
Your Google account email address is used solely to identify you as a user of the app and to enable the app to function properly within your Google account.

Information NOT Collected:

No bank account numbers or credentials (Tiller handles bank connections separately)
No personal contact information beyond email
No spreadsheet contents stored externally
No personal files or documents
No usage analytics beyond what Google provides by default

The app does not collect, store, or transmit the contents of your Google Sheets to external servers.

2. How Information Is Used

The email address collected is used only for:

Identifying the user within the app
Ensuring proper app functionality and permissions

The information is not used for:

Advertising
Marketing
Tracking
Analytics outside of Google’s standard platform tools

3. Data Protection and Security Measures

Ultimate Envelopes accesses sensitive financial data (transaction amounts, merchant names, account balances) to provide envelope budgeting functionality. We protect this data through the following mechanisms:

Technical Safeguards

Client-Side Processing Only

All financial data processing occurs entirely within your browser and Google Sheets
No financial data is transmitted to external servers or third-party services
Calculations and budget operations happen in real-time within your spreadsheet

No External Data Storage

We do not store, cache, or retain your financial data on any external servers
Transaction data, account balances, and budget information remain exclusively in your Google Sheets
We do not maintain databases or data warehouses containing user financial information

Google’s Infrastructure Security

All data remains within Google’s secure cloud infrastructure
Data is protected by Google’s enterprise-grade security measures
Access is controlled through Google’s OAuth 2.0 authentication system

Access Controls

OAuth 2.0 Authorization

Users must explicitly grant permission for the add-on to access their spreadsheet
Authorization can be revoked at any time through Google Account settings
Permissions are scoped to only what is necessary for functionality

User-Controlled Access

Users maintain full control over their spreadsheet data
Users can remove the add-on at any time
Removing the add-on immediately terminates all data access

No Third-Party Sharing

Financial data is never shared with advertisers, data brokers, or other third parties
We do not sell, rent, or license user financial information
No financial data is used for marketing or analytics purposes

Data Minimization

Limited Data Access

We access only the specific data columns necessary for budgeting: dates, merchants, amounts, and categories
We do not access bank account numbers, passwords, or login credentials
We do not read data from unrelated tabs or sheets within your spreadsheet

No Data Retention

Since we do not store data externally, there is no data retention period
All financial information exists only in your Google Sheets
Deleting your spreadsheet permanently removes all associated data

Encryption

Data in Transit

All communication between your browser and Google’s servers uses HTTPS/TLS encryption
API calls to Google Sheets are encrypted end-to-end

Data at Rest

Your spreadsheet data is encrypted at rest by Google’s infrastructure
Google employs industry-standard encryption for stored data

Compliance

Google API Services User Data Policy

Our use of Google API data adheres to the Google API Services User Data Policy, including Limited Use requirements
Financial data accessed from Google Sheets is used solely to provide budgeting functionality
We comply with all restrictions on using, storing, or sharing Google user data

No Secondary Use

Financial data is not used for any purpose other than providing the core add-on functionality
Data is not used to train machine learning models
Data is not used for research or analytics

Incident Response

In the unlikely event of a security concern:

Users can immediately revoke access through Google Account settings at myaccount.google.com/permissions
Users can contact us at security@ultimateenvelopes.com
We will respond to security inquiries within 48 hours

User Rights

You have the right to:

Access your data - It’s in your Google Sheet; you always have access
Delete your data - Delete your spreadsheet or uninstall the add-on
Revoke authorization - Through Google Account permissions at any time
Export your data - Use Google Sheets’ built-in export features (File → Download)

Audit and Monitoring

We regularly review our security practices
We monitor for unauthorized access attempts
We maintain compliance with Google’s security requirements

4. Data Access and Storage

Ultimate Envelopes does not store user data on external servers
All budgeting data remains entirely within the user’s own Google Sheets
The developer does not have access to user spreadsheet data
All processing occurs within your browser and Google’s secure infrastructure

User data is never sold, rented, or shared with third parties
No data is shared with advertisers or analytics providers
No data is transferred outside of Google’s ecosystem
Your financial information remains completely private

6. Google API Services Compliance

Ultimate Envelopes’ use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

User data is accessed only to provide the app’s core functionality and for no other purpose.

7. Tiller Money Integration

Important: Ultimate Envelopes integrates with Tiller Money to access transaction data that Tiller aggregates from your financial institutions.

Tiller Money is a separate service with its own privacy policy
Ultimate Envelopes reads transaction data that Tiller has already placed in your Google Sheets
We do not have direct access to your bank accounts
All bank connections are managed by Tiller, not Ultimate Envelopes
Please review Tiller’s Privacy Policy for information about how Tiller handles your financial data

You may revoke the app’s access at any time through your Google Account permissions page
Removing access immediately stops all interaction between the app and your account
You can uninstall the add-on at any time from the Extensions menu in Google Sheets
Your spreadsheet data remains yours after uninstalling

9. Children’s Privacy

Ultimate Envelopes is not directed to children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

This Privacy Policy may be updated from time to time. Any changes will be reflected on this page with an updated “Last Updated” date.

We will notify users of material changes through:

An update notification in the add-on
A notice on our website

Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact Information

If you have any questions or concerns about this Privacy Policy, you may contact:

Developer: Ultimate Envelopes
Email: privacy@ultimateenvelopes.com
Security Issues: security@ultimateenvelopes.com
Website: https://www.ultimateenvelopes.com

For security-related inquiries, we will respond within 48 hours.

Your privacy is our priority. We are committed to protecting your financial data and maintaining transparency about our practices.

Last Updated: March 5th, 2026