Privacy Policy

Effective date: August 20, 2026  ·  Last updated: August 20, 2026

Month's End ("we," "us," or "our") operates monthsend.com and provides automated financial reporting services that connect to QuickBooks Online. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.

By using Month's End, you agree to the collection and use of information described in this policy.

1. Information We Collect

Account information. When you connect your QuickBooks account, we collect your email address, which we use to identify your account and deliver your reports.

QuickBooks data. Through Intuit's OAuth 2.0 authorization flow, we receive read-only access to your QuickBooks Online account. We use this access solely to retrieve your Profit & Loss report data. We store the following QuickBooks-sourced data:

• Your company name (as returned by the QuickBooks API)
• Monthly Profit & Loss report data including revenue, expenses, and net income figures
• OAuth access and refresh tokens required to maintain the connection

We do not collect bank account numbers, individual transaction details, customer data, payroll information, or any QuickBooks data beyond what is required to generate your Profit & Loss report.

2. How We Use Your Information

We use the information we collect exclusively to:

• Generate your monthly Profit & Loss report as a PDF
• Deliver that report to your email address on the first of each month
• Maintain your account and QuickBooks connection
• Respond to support inquiries

We do not use your financial data for advertising, benchmarking, resale, or any purpose other than generating and delivering your report.

3. How We Store Your Data

Your data is stored in Cloudflare's D1 database infrastructure, which is located within Cloudflare's global network. We store the minimum data necessary to operate the service:

• Your email address and account information
• Your QuickBooks OAuth tokens (encrypted in transit and at rest)
• Report data and delivery records for each month's report

We retain your data for as long as your account is active. If you disconnect your QuickBooks account or request account deletion, we will remove your data within 30 days.

4. QuickBooks OAuth Access

We access your QuickBooks account through Intuit's official OAuth 2.0 authorization flow. Our access is strictly read-only — we cannot create, modify, or delete any data in your QuickBooks account. We request only the minimum scope required to retrieve your Profit & Loss report (com.intuit.quickbooks.accounting).

You may revoke our access to your QuickBooks account at any time through your QuickBooks account settings under Apps → Connected Apps. Revoking access will stop future report generation.

5. Data Sharing

We do not sell, rent, trade, or share your personal information or financial data with third parties, except as follows:

• Resend — our transactional email provider, which receives your email address and the PDF report attachment solely to deliver your monthly report. Resend's privacy policy is available at resend.com.
• Cloudflare — our infrastructure provider, which processes requests and stores data as described in their privacy policy at cloudflare.com.
• Legal requirements — we may disclose information if required by law, regulation, or valid legal process.

6. Data Security

We implement reasonable technical and organizational measures to protect your data, including encrypted data transmission (TLS), secure storage of OAuth tokens, and access controls limiting who can view your account data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

You have the right to:

• Request a copy of the data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Revoke QuickBooks access at any time through your QuickBooks settings

To exercise any of these rights, contact us at the address below.

8. Children's Privacy

Month's End is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact