Privacy policy
Last updated October 30, 2026
What Monthframe is
Monthframe is financial planning and reporting software for businesses and the accounting firms that serve them. This policy explains what data we hold, why, and the choices you have.
Data we collect
- Account data: names, work email addresses, roles and sign-in activity for the people who use Monthframe.
- Accounting data you connect: when an authorised person connects QuickBooks, Xero, NetSuite or another ledger, we read the chart of accounts, account balances, monthly activity, classes, departments and locations, and (for drill-through) transaction lines. We read; we do not write to your ledger.
- Payroll data you connect or upload: headcount, departments, and, where permitted, individual pay, used to plan payroll costs.
- Data you enter: budgets, forecasts, assumptions, report commentary and files you upload.
- Technical data: IP address, browser type and request logs, for security and to keep the service running.
How we use it
To provide the service you asked for: statements, forecasts, reports, dashboards and the emails you schedule. To keep it secure (detecting abuse, investigating incidents) and to support you when you ask. We do not sell personal data, and we do not use your accounting data to advertise to you.
Who can see it
Inside your workspace, only people you invite, and only what their permissions allow. Accounting firms see a client workspace only when the client’s owner grants them access. Our staff access customer data only to support you or keep the service running, and that access is logged.
Service providers
We host on Amazon Web Services in the United States and send email through Amazon SES. These providers process data only on our instructions.
Security
Data is encrypted in transit and at rest. Ledger connection tokens are encrypted separately. Access is controlled by role and by entity, with optional two-factor sign-in and single sign-on. See our security overview for detail.
Retention and deletion
We keep your data while your workspace is active. When you disconnect a ledger we revoke our access to it. When a workspace is closed we delete its data within 90 days, except backups, which expire on their own within 35 days after that.
Your choices
You can see and correct your account details, disconnect ledgers at any time, and ask us for a copy of your data or to delete it. Where privacy laws give you further rights, we honour them.
Contact
Questions about privacy: privacy@ (company domain to be confirmed).