Privacy policy.

Scope and roles

Monthpost provides a hosted document portal for accounting firms and their clients. For account administration, service security, product operations and support, Monthpost determines why and how personal data is processed.

When an accounting firm uses Monthpost to manage its own client records and documents, that firm normally decides what to upload, who receives access and how long the information is needed. In that context, the firm is responsible for its use of the data and Monthpost processes it to provide the service. The firm’s own privacy notice may also apply.

Information we process

• Account information: contact details and information needed to create and manage access.
• Firm and client information: business and contact information entered by authorized users.
• Documents and content: files and related information uploaded or created through the service.
• Service activity: information about how authorized users interact with Monthpost.
• Technical information: limited information needed to operate, support and protect the service.
• Support communications: information you provide when you contact us.

How we use information

We use personal data to:

• create and authenticate accounts;
• provide and manage the Monthpost service;
• deliver requested communications and support;
• maintain, troubleshoot and protect the service;
• understand and improve how Monthpost is used;
• comply with legal obligations and enforce our terms.

Depending on the context, this processing is necessary to provide the service you requested, supports our legitimate interests in operating and securing Monthpost, satisfies a legal obligation or is based on your consent where consent is required.

Cookies and tracking

Monthpost uses cookies and similar technologies where needed to operate the website and authenticated service.

We do not use personal data for third-party advertising.

Service providers and transfers

We use trusted service providers for functions such as hosting, storage, communications and customer support. They may process personal data only as needed to provide services to Monthpost and subject to appropriate obligations.

We may also disclose information when required by law or when needed to protect users, rights or the service.

When personal data is transferred across borders, we use appropriate safeguards where required by applicable law.

Monthpost does not sell personal data.

Retention and deletion

We keep personal data for as long as needed to provide Monthpost, meet legal obligations, resolve disputes and protect the service.

Authorized firm administrators may request deletion of their Monthpost workspace. Individual deletion requests can also be submitted to us or, where a firm controls the relevant client information, directed to that firm.

If you need a specific record corrected or deleted, contact us. We may retain limited information where the law requires it or where it is necessary to establish, exercise or defend legal claims.

Your rights

Depending on where you live and the context of the processing, you may have rights to access, correct, delete, restrict or object to processing of your personal data. You may also have a right to receive portable data, withdraw consent and complain to your local data protection authority.

If your data was added by an accounting firm, contacting that firm may be the fastest route because it controls the client record. You can always contact Monthpost and we will help route or handle the request as appropriate.

We may need to verify your identity before completing a request.

See Security & privacy for a high-level overview of our approach to access, documents and account safety.

Contact and changes

Monthpost may update this policy as the service, providers or legal requirements change. We will update the effective date and provide additional notice when a change materially affects how we handle personal data.