Data Processing Disclosure

This page explains, in plain language, what data Haruno processes, where it travels, how long it is retained, and the controls you have. Haruno is a desktop assistant with managed model access: your files and workspaces stay on your machine, and only content the assistant actively works with is sent through Inferara's hosted API to third-party AI model providers, solely to carry out the features you request. This page supplements our Privacy Policy.

Only content that enters the assistant's working context is transmitted: your prompts and conversation, excerpts of files you open or attach, content from accounts you connect when a requested feature needs it, and the results of tools and commands the assistant runs for you. Haruno does not bulk-upload your disk, your workspaces, or your connected accounts in the background.

Content the assistant works with travels over encrypted connections from the desktop app to Inferara's hosted API — a managed gateway that brokers model access — and from there to third-party AI model providers, solely to carry out the request. Haruno does not use user data to train, fine-tune, develop, or improve generalized AI or machine-learning models, and does not transfer user data for those purposes.

To operate, secure, troubleshoot, prevent abuse of, and account for usage of the service, request and response content handled by Inferara's hosted API is retained for up to 90 days and then removed. Minimal billing and usage records — such as timestamps and usage volumes — may be retained for longer.

Requests are fulfilled by third-party AI model providers through managed model access. Content transmitted to a provider is handled subject to that provider's own terms. Inferara transmits only the content needed to carry out your request.

Your workspaces, files, and the assistant's derived working data remain on your machine, isolated per workspace. Connector credentials, including OAuth tokens, are stored in your device's secure credential storage. You choose which folders and files the assistant can see.

Haruno offers sandboxed execution, which runs the assistant's tools in an isolated environment. In sandboxed sessions, all network access from that environment is mediated by the app against an explicit allowlist of hosts: anything else requires your per-host approval, and unattended runs deny access outside the allowlist outright. You manage the allowed host list in the app's security settings.

Connectors are opt-in: Haruno accesses a connected account only after you authorize it, and only to provide features you request. You can disconnect a connector or revoke its authorization at any time, after which Haruno stops accessing and processing that account's data. Where a connector is designated read-only, the assistant never writes back to the connected system — it prepares drafts for you to review. Haruno processes connected-account data as an independent controller to provide the features you request; it does not process that data on behalf of the platform that hosts your account.

You decide what Haruno can reach: enable, disable, or disconnect each connector; revoke authorizations; choose the workspaces and files the assistant works with; manage the allowed network host list; and enable sandboxed execution. You can stop using the service and uninstall the app at any time, and you may request disclosure, correction, or deletion of your personal information.

We will update this page when our data-handling practices change. Contact for data processing inquiries: info@inferara.com