Read-only by design
Reporting connectors read your data. They don’t change ad campaigns, publish social posts, send marketing emails or edit store orders. Some providers use broader permission names for reporting access.
Security at Monthwrap
Know what you’re
connecting.
Your agency works with other people’s data. You should understand how access works before bringing it into a report.
Here’s how Monthwrap handles connected credentials, team permissions, and client sharing—and the choices your agency makes along the way.
Three places. Different access.
Your connected accounts
The permissions you authorize at each source.
Selected sources and reporting data
Your agency workspace
Sign-in and agency membership required
OwnerAdminAccount managerMember
Roles govern changes.Agency members can read client information.
Review and send a report
The shared client report
Anyone with its link can open it once sent.
The foundations
Protection in
practical terms.
Different parts of the product need different safeguards. Here’s what these mean for your agency.
HTTPS for Monthwrap
The Monthwrap website, app, and API use HTTPS to protect data traveling between your browser and Monthwrap.
Passwords are hashed
Account passwords are stored as Argon2 hashes. Signing in checks the password against its hash; Monthwrap does not store a readable copy of your password.
Stored credentials are encrypted
Access tokens, refresh tokens, and API keys saved for connected accounts are encrypted in Monthwrap’s database. Saved credentials are not shown back in the connection list.
Where your data lives
Monthwrap’s servers and database are hosted by Hetzner in Falkenstein, Germany. Daily backups are kept separately, with encrypted offsite copies in the European Union. The Privacy Policy lists our service providers and explains retention.
Inside your workspace
Give each person
the right role.
Access to an agency’s workspace requires membership in that agency. Within the workspace, roles control who can make changes.
| Team role | Read client information | Edit client reports | Connect or disconnect accounts |
|---|---|---|---|
| Owner | All clients | ||
| Admin | All clients | ||
| Account manager | Assigned clients | No | |
| Member | No | No |
Client assignment controls editing, not visibility. Account managers and members can read client information across their agency. Assigning a client to an account manager limits which clients that person can edit; it does not create a private client-only workspace.
Outside your workspace
A report link
is access to the report.
Each report has a long, randomly generated link rather than a predictable client address. A draft stays private. Once sent, its link opens the client-facing report without a Monthwrap sign-in.
Anyone who receives or is forwarded that link can view the report and its comment thread, and add a comment. The link does not verify who the reader is.
Review before you shareAt the source
Start with the access
the report needs.
Your provider’s permissions still matter. Choose the right account, property, store, or database for the client before linking it to their reporting.
Connected platforms
Review the permissions shown during provider sign-in. API-key connections use credentials you supply. The setup route and available data vary by platform, account permissions, and plan.
Read the connection guidesDatabases and warehouses
Use a dedicated read-only account with access only to the tables or views needed for reporting. Monthwrap checks saved reporting queries for supported read-only statements; your database permissions provide an additional boundary.
TLS and certificate options depend on the connector. Follow its setup guide and your database’s security requirements.
See a database setup guideWhen access changes
Disconnecting and deleting
are different actions.
Stopping new data from arriving does not erase every record already included in your agency’s work.
Disconnect in Monthwrap
An owner or admin can remove the connection in Sources. This removes its stored credentials and client-source links and stops future syncs for that connection.
Revoke at the provider
Remove Monthwrap in the provider’s connected-app settings, or revoke the API key. Your provider manages its own permissions and retained records.
Address retained records
Imported leads, work entries, text copied into drafts, and sent report copies may remain. A deletion request should identify the records you want removed.
A few important details
Know what
leaves the workspace.
What happens when we use AI chat?
When you use AI report drafting, report facts, the current report, your instructions, and conversation history are sent to Anthropic to generate a response. These can include agency and client names, reporting totals, work titles, and report text. Individual lead contact records are not included in the report facts, but anything you type into a prompt or report may contain personal information.
Keep unnecessary personal details out of free text and review suggested content before using it. Read the AI section of our Privacy Policy for the details.
Who else processes information for Monthwrap?
The Privacy Policy lists our service providers and their purposes, including hosting, email, payments, and AI. A connected platform also handles information under its own terms and permissions.
Does disconnecting erase downloaded reports?
No. Copies someone has downloaded or received are outside Monthwrap’s control. Your agency should contact those recipients if the copies also need to be removed. The retention section explains retained records and backups.
How do we raise a security or privacy concern?
Email support@monthwrap.com with a description and the affected area of the product. Leave out passwords, API keys, access tokens, and private client records. We can discuss the information needed to investigate.
Have a question
before you connect?
Tell us what your agency needs to understand. We’ll help you work through the details.