Privacy Policy

Last updated: August 4, 2026

Budget Marketplace ("the app") is a personal finance tool that connects a user's bank accounts (via Plaid) and Google account so that bank transaction data can be synced into a Google Sheets spreadsheet the user owns. This Privacy Policy explains what data the app accesses, how it is used, where it is stored, and who it is shared with.

In short: your financial data lives in your own Google account. Budget Marketplace's server stores only the minimum metadata needed to run the daily sync (which spreadsheet, which linked bank accounts, and encrypted access tokens) — never your bank credentials, and never a copy of your transaction history outside of your Google Sheet.

Information we access

Google account data. When you connect your Google account, the app requests: your basic profile (name, email, via the openid, email, and profile scopes); access to Google Sheets (spreadsheets scope) to write synced transaction data and dashboard content into a spreadsheet you choose; and access to Google Drive limited to files the app itself creates or that you explicitly select (drive.file scope) — the app cannot see, list, or access any other files in your Drive.
Bank/financial data. When you connect a bank account through Plaid, the app receives transaction data (date, amount, merchant/description, category, account name, and bank name) for the accounts you choose to link. The app never receives or stores your bank login credentials — those are handled entirely by Plaid.

How your information is used

Transaction data synced from Plaid is written into the Data sheet of the Google Sheets spreadsheet you selected or created, so you can view and analyze it there.
Budget dashboard templates you choose to import are copied as new sheets/tabs into that same spreadsheet, referencing the synced data.
Your Google profile info (name/email) is used only to identify your account within the app.
A daily background job re-syncs new, updated, and deleted transactions from Plaid into your spreadsheet, deduplicated by transaction ID.

What we store on our servers

Budget Marketplace's server (self-hosted by the developer) stores only:

Sync configuration metadata — which Google spreadsheet and which linked bank accounts belong to a given sync.
Plaid and Google access/refresh tokens, encrypted at rest with AES-256, used solely to perform the daily sync on your behalf.

Your actual transaction history and spreadsheet contents are not copied into a separate database — they live only in the Google Sheet you control.

Data sharing

We do not sell, rent, or share your Google user data or financial data with third parties. Data is only transmitted between Plaid, Google's APIs, and the app's own server as necessary to perform the syncing functionality described above. We do not use your data for advertising, and we do not use it to train AI/ML models. No one manually reads your transaction or spreadsheet data except as necessary to investigate a bug or a security issue, or as required by law.

Google user data & Limited Use

Budget Marketplace's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data retention & deletion

Sync metadata and encrypted tokens are retained for as long as you keep a sync configuration active. You can disconnect a bank account, revoke Google access at any time from your Google Account permissions page, or contact us to request deletion of stored sync metadata.

Security

Access tokens for Plaid and Google are encrypted at rest (AES-256). All communication with Google and Plaid APIs occurs over HTTPS.

Changes to this policy

If this policy changes, the "Last updated" date above will be revised. Material changes affecting how Google user data is used will be reflected here before taking effect.

Contact

Questions about this policy or your data can be sent to claude@joevmartin.com.