Privacy Policy

1. Who we are

Harlo is a New Zealand money-management and accounting service operated by Deloraine Cattery Ltd. In this policy, “Harlo”, “we”, “our”, and “us” refer to Deloraine Cattery Ltd.

Questions or privacy requests can be sent to support@harlo.nz.

2. Information we collect

We collect only information needed to provide, secure, improve, and support Harlo. Depending on how you use the service, this may include:

• Account information: name, email address, authentication details, profile image, business name, and preferences.
• Financial records you provide: receipts, invoices, bills, transactions, bank-feed information, categories, GST information, budgets, reports, and notes.
• Connected-service information: data you authorise Harlo to receive from Google or a bank-feed provider.
• Payment information: subscription status, billing contact details, and payment references. Stripe handles card details; Harlo does not store them.
• Technical information: device, browser, IP address, security events, page activity, and error logs.
• Communications: support messages, consent records, email preferences, and unsubscribe requests.

3. How we use information

We use information to create and secure accounts; authenticate members; keep each member’s records separate; organise and display requested financial records; process subscriptions; send service emails; provide support; prevent misuse; maintain audit trails; and meet legal, tax, accounting, security, and regulatory obligations.

Google account information is used only to authenticate you, create or connect your Harlo account, and show profile information you choose to share. Harlo does not use Google user data for advertising.

4. Service providers and disclosure

We do not sell personal information. We share information only to operate Harlo, follow your instructions, protect the service, or comply with law.

Providers may include Supabase for authentication and database services, Replit for hosting, Stripe for payments, Resend for email, Google for sign-in, Akahu for authorised bank connections, and OpenAI for enabled receipt-processing features. Each receives only the information needed for its role.

5. Storage and security

Harlo uses access controls, encrypted connections, protected credentials, operational logging, and database row-level security designed to prevent one member from accessing another member’s records. No internet service can promise absolute security.

Providers may process information in New Zealand, Australia, the United States, or other countries where they operate, subject to appropriate contractual or technical protections.

6. Retention and deletion

We keep information while your account is active and as reasonably required to provide the service, resolve disputes, maintain security, or meet legal and financial record-keeping duties. When no longer required, information is deleted or de-identified, although backups and legally required records may remain for a limited period.

7. Your choices and rights

You may request access, correction, deletion where lawful, disconnection of a linked service, withdrawal of optional consent, or account closure. Marketing email includes an unsubscribe link; essential security, billing, and account notices may still be sent.

Email support@harlo.nz to make a request. We may confirm your identity first. New Zealand users may also contact the Office of the Privacy Commissioner.

8. Cookies and local storage

Harlo uses cookies or similar browser storage needed for sign-in, security, preferences, and reliable operation. We do not use this technology to sell personal information.

9. Children

Harlo is intended for adults and businesses and is not directed to children under 18.

10. Changes

We may update this policy as Harlo changes. The current version and date will remain available at this URL, with reasonable notice of material changes where required.