Privacy Policy

Effective date: August 23, 2026  ·  Last updated: August 23, 2026

Month's End ("we," "us," or "our") operates monthsend.com and provides automated executive performance and growth reporting services that connect to Google Analytics 4, Google Search Console, and business systems. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.

By using Month's End, you agree to the collection and use of information described in this policy.

1. Information We Collect & Google API Scopes

When you connect your Google Account, we request only the minimal, read-only permissions necessary to generate your monthly performance briefings:

• https://www.googleapis.com/auth/analytics.readonly — Used exclusively to retrieve monthly traffic, active users, engagement rates, and channel acquisition data from your selected GA4 property.
• https://www.googleapis.com/auth/webmasters.readonly — Used exclusively to retrieve organic search clicks, impressions, CTR, average rankings, and top keywords from your verified Google Search Console site.
• Email address — Used solely to authenticate your dashboard access and deliver your scheduled executive PDF reports.

2. Google User Data Compliance & Limited Use

Month's End's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:

• We never sell your data or share it with data brokers, advertisers, or unauthorized third parties.
• We do not use your Google data to train general artificial intelligence or machine learning models.
• We do not transfer your data to external parties except to fulfill report delivery (e.g. email delivery via Resend).

3. Cryptographic Storage & Token Security

All OAuth authentication tokens (access and refresh tokens) are encrypted at rest using industry-standard AES-256-GCM encryption with unique initialization vectors. Tokens are decrypted in-memory only during automated report compilation on your scheduled delivery day.

4. Your Rights & Sovereign Data Control (GDPR / CCPA)

Under GDPR, CCPA, and global privacy standards, you maintain sovereign control over your information:

• Data Export: Download a full JSON copy of your profile and report logs with 1-click in your dashboard (/customize).
• Right to be Forgotten: Irrevocably purge your customer profile, OAuth credentials, and report archives anytime from your dashboard.
• Revoke Access: Revoke Google permissions at any time via your Google Account Security Settings.

5. Contact & Privacy Inquiries