Data Processing Disclosure

This page explains, in plain language, what data Haruno processes, where it travels, how long it is retained, and the controls you have. Haruno is a desktop app with managed model access. The financial close — reading workbooks, running checks, building the ledger and rendering reports — runs on your machine and transmits no client data. Only content that enters a conversation with the assistant is sent through Inferara's hosted API to third-party AI model providers, solely to carry out the features you request. This page supplements our Privacy Policy.

Only content that enters the assistant's working context is transmitted: your prompts and conversation, excerpts of files you open or attach, content from accounts you connect when a requested feature needs it, and the results of tools and commands the assistant runs for you. In a financial review that can include account names, captions, figures and findings. Running the close itself transmits nothing. Haruno does not bulk-upload your disk, your workspaces, or your connected accounts in the background.

Content the assistant works with travels over encrypted connections from the desktop app to Inferara's hosted API — a managed gateway that brokers model access — and from there to third-party AI model providers, solely to carry out the request. Haruno does not use user data to train, fine-tune, develop, or improve generalized AI or machine-learning models, and does not transfer user data for those purposes.

Inferara's hosted API does not store the content of requests or responses. What it keeps is operational: the address a request came from, for up to 30 days; the text of an upstream error, for up to 30 days; aggregate usage metrics labelled by the account's access key, for up to 30 days; routing and usage records — timestamps, model, duration, and usage volumes — for up to 365 days; and billing records for longer, as accounting requires. For each connected QuickBooks company it also keeps the company's name, legal name, address, country, home currency, fiscal-year start and QuickBooks company ID, and when it was last synced, until the company is removed from the portfolio (which disconnecting it in QuickBooks Online also does) or deleted with its owner's account; and the company's encrypted authorization until the company is disconnected. If you turn on email summaries for scheduled syncs in Haruno for Mac or Haruno for Windows, it also keeps a record of each scheduled sync: which company, when it ran, whether it worked, and which months it brought in or updated. It keeps each record until 7 days after the summary email is sent, and never more than 30 days. Turning the summaries off deletes the records not yet sent. It keeps none of the company's financial data.

Requests are fulfilled by third-party AI model providers through managed model access. Content transmitted to a provider is handled subject to that provider's own terms. Inferara transmits only the content needed to carry out your request.

Your workspaces, files, and the assistant's derived working data remain on your machine, isolated per workspace. In a financial review that includes the source workbooks, the QuickBooks records a sync brings in, and each company's ledger, findings, statement package, reconciliation binder, investor report and mapping spec. Connector credentials, including OAuth tokens, are stored in your device's secure credential storage, except for QuickBooks: a connected company's authorization is stored encrypted on Haruno's servers and never on your device. When you update Haruno for Windows, it removes the QuickBooks connections earlier versions kept on that computer. Any access such a connection still holds at Intuit ends when it expires, or sooner if you disconnect Haruno in QuickBooks Online. You choose which folders and files the assistant can see.

Haruno offers sandboxed execution, which runs the assistant's tools in an isolated environment. In sandboxed sessions, all network access from that environment is mediated by the app against an explicit allowlist of hosts: anything else requires your per-host approval, and unattended runs deny access outside the allowlist outright. You manage the allowed host list in the app's security settings.

Connectors are opt-in: Haruno accesses a connected account only after you authorize it, and only to provide features you request. You can disconnect a connector or revoke its authorization at any time, after which Haruno stops accessing and processing that account's data. Where a connector is designated read-only, the assistant never writes back to the connected system — it prepares drafts for you to review. Haruno processes connected-account data as an independent controller to provide the features you request; it does not process that data on behalf of the platform that hosts your account. QuickBooks Online: Haruno only reads. Haruno reads a company when you connect or add it and when you click Sync, and also at a scheduled sync time if you turn one on: Haruno for Mac at its scheduled sync time, and Haruno for Windows at the company's scheduled sync time; it keeps what a sync reads in the company's books on your device, as described in section 6, and answers questions about the company from those books. In earlier versions of Haruno for Windows and Haruno for Mac, when you ask about a connected company, Haruno also reads from QuickBooks the records and reports needed for your request — such as account names, customers, invoices and financial figures. The content relevant to a request is sent to third-party AI model providers to carry out the request, and is handled and retained as described in sections 2 to 5.

You decide what Haruno can reach: enable, disable, or disconnect each connector; revoke authorizations; choose the workspaces and files the assistant works with; manage the allowed network host list; and enable sandboxed execution. You can stop using the service and uninstall the app at any time, delete your account and personal data yourself from the dashboard or ask us to, and request disclosure or correction of your personal information. The privacy policy describes the deletion process.

We will update this page when our data-handling practices change. Contact for data processing inquiries: info@inferara.com