Privacy Policy

Last updated: April 29, 2025

1. Introduction

Welcome to Envelo ("we," "our," or "us"). We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you use our budgeting application ("App"). Please read this policy carefully. By using our App, you consent to the practices described herein.

2. Information We Collect

2.1 Personal Information

When you create an account, we may collect your name, email address, and password.

2.2 Financial Information

To help you manage your budget, we may collect data related to your income, expenses, bank account details, and transaction history.

2.3 Non-Personal Information

We may collect information about how you access and use the App, such as device type, IP address, and browsing behavior. Additionally, we use cookies and similar technologies to enhance your experience and collect usage data.

2.4 Accuracy

We are committed to ensuring that your personal information is accurate and up-to-date. You may update your account information at any time within the App or by contacting us at teamenvelo@gmail.com.

3. How We Use Your Information

  • Provide and maintain our services.
  • Personalize your experience based on your preferences and usage patterns.
  • Communicate with you through updates, newsletters, and respond to your inquiries.
  • Analyze usage data to improve the App’s functionality and user experience.
  • Protect against unauthorized access and ensure the integrity of our services.

3.1 Consent

By using Envelo, you provide implied consent for us to collect, use, and disclose your personal information as described in this Privacy Policy. You may withdraw your consent at any time by contacting us at teamenvelo@gmail.com, though doing so may affect your ability to use certain features of the App.

4. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to outside parties except in the following circumstances:

  • Service Providers: Trusted third parties who assist us in operating the App, conducting our business, or servicing you, provided they agree to keep your information confidential.
  • Legal Requirements: If required by law or in response to valid requests by public authorities, such as a court or government agency.
  • Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • Protection of Rights: To protect the rights, property, or safety of Envelo, our users, or others.

We will only use or disclose personal information for the purposes identified at the time of collection or as required by law. Information will be retained only as long as necessary to fulfill these purposes.

5. Data Security

We implement a variety of security measures to maintain the safety of your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

6. Compliance with Canadian Privacy Laws

Envelo adheres to the Personal Information Protection and Electronic Documents Act (PIPEDA), which governs how private sector organizations collect, use, and disclose personal information in the course of commercial business in Canada. We are committed to ensuring that your personal information is handled in accordance with these regulations. Additionally, we comply with any applicable provincial privacy laws in Nova Scotia that may apply to our operations and services.

6.1 Accountability

Envelo takes responsibility for the personal information under our control. Our team ensures compliance with PIPEDA. If you have any questions, contact us at teamenvelo@gmail.com.

7. Cross-Border Data Transfers

7.1 Data Hosting and Processing

We utilize Heroku, a cloud platform operated by Salesforce.com, Inc., located in the United States, to host and process our data. This means that your personal information may be transferred to, stored, and processed in countries outside of Canada, including the United States.

7.2 Safeguards for International Transfers

To ensure the protection of your personal information during international transfers, we implement appropriate safeguards, such as:

  • Standard Contractual Clauses (SCCs): We may enter into agreements that include SCCs to provide adequate protection for your data.
  • Heroku's Compliance: Heroku complies with relevant data protection regulations, including SOC 2 and ISO 27001 certifications, ensuring a high standard of data security.

7.3 Your Consent

By using our App, you consent to the transfer of your personal information to countries outside of Canada, including the United States, as described above.

8. Use of Third-Party Services

8.1 Heroku

We use Heroku to host and manage our application infrastructure. Heroku is a trusted service provider that adheres to strict security and privacy standards to protect your data.

8.2 Other Third-Party Services

We may also use other third-party services to enhance the functionality of our App. These services are subject to their own privacy policies, and we encourage you to review them as needed.

9. Your Rights Under Canadian Privacy Laws

9.1 Access and Correction

Under PIPEDA, you have the right to access the personal information we hold about you and request corrections if you believe it is inaccurate. You can exercise these rights by contacting us through the contact information provided below.

9.2 Withdrawal of Consent

You have the right to withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. Please note that withdrawing consent may affect your ability to use certain features of the App.

9.3 Complaints

If you believe that we have not complied with PIPEDA in our handling of your personal information, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be effective immediately upon posting the revised policy within the App. We will notify you of significant changes through the App or via email. We encourage you to review this Privacy Policy periodically to stay informed about our data practices.

11. Your Rights and Choices

  • Access and Correction: You can access and update your account information at any time through the App settings.
  • Data Deletion: You may request the deletion of your personal information, subject to certain legal obligations.
  • Opt-Out: You can opt-out of receiving promotional communications from us by following the unsubscribe instructions included in such messages.

13. Children's Privacy

Our App is not intended for individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have inadvertently received personal information from a child, we will take steps to delete such information.

14. Data Retention

We retain your personal and financial data for as long as your account is active or as needed to provide you the Service. You may request the deletion of your data at any time by contacting us.

15. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at teamenvelo@gmail.com.

For matters related to PIPEDA compliance, you can also contact the Office of the Privacy Commissioner of Canada:

Challenging Compliance

If you have concerns about our compliance with PIPEDA, please contact us at teamenvelo@gmail.com. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca/en/.