Privacy Policy
Last updated: September 25, 2026
This policy explains how BrianOnAI LLC, doing business as Onaro ("Onaro," "we"), collects, uses, and protects information through the Onaro website, the Meridian platform, and the Agent Spend Assessment (the "Services").
Information we collect
- Account and contact information: name, business email, company, and role when you create an account, request a demo, or contact us.
- Assessment and platform inputs: information you enter or upload, such as AI usage, spend, and cost-allocation data.
- Usage data: pages viewed, feature interactions, timestamps, and device/browser information.
- Connected system data: described in the next section.
Connected accounting systems (QuickBooks Online and Intuit Enterprise Suite)
If you connect QuickBooks, you choose the company file or entity and approve access on Intuit's consent screen. Meridian requests the QuickBooks Accounting scope only.
What Meridian reads: company name and company ID; your chart of accounts; your classes (and locations or departments, if you map them).
What Meridian writes: journal entries you initiate from an approved allocation. Meridian does not edit or delete existing QuickBooks transactions.
What Meridian stores:
- OAuth access and refresh tokens, encrypted at rest
- The company ID and company name
- Your mapping selections (account and class IDs and names)
- Posting records: journal entry ID, period, amounts, posting method, posting time, and the user who posted
What Meridian does not store: other QuickBooks data such as invoices, bills, customers, vendors, bank transactions, or payroll.
Disconnecting: you can disconnect from Meridian settings or from within QuickBooks. On disconnect we revoke and delete the stored tokens. Posting records are kept as an audit trail for 7 years unless you ask us to delete them sooner.
How we use information
To provide, secure, and support the Services; to calculate allocations and post entries you request; to respond to inquiries; to monitor reliability and performance; to improve the Services; and to comply with legal obligations. We do not sell personal information or Customer Data, do not share it with third parties for their marketing, and do not use Customer Data to train generally available AI models.
Analytics
We use analytics tools to understand how the website and platform are used, such as anonymous usage patterns, feature interactions, and conversion events. Analytics do not receive spend amounts, uploaded file contents, or data from connected accounting systems. You can limit analytics through your browser's Do Not Track setting and our cookie preferences.
Sharing
We share information only with service providers (subprocessors) that host and operate the Services under confidentiality and security obligations, as listed in our subprocessor register; with Connected Systems you authorize; or when required by law.
Security
We use industry-standard safeguards, including encryption in transit and encryption of stored connection credentials. No system is completely secure. Details of our controls program are on our Trust Center.
Retention and deletion
We keep account information while your account is active. Customer Data is deleted or de-identified within 30 days after account termination, except where retention is required by law. You can request deletion or a copy of your information at any time.
Your choices and rights
You can update account information, disconnect connected systems, opt out of non-essential cookies, and request access to, correction of, or deletion of your personal information by contacting us. We will not discriminate against you for exercising these rights.
Changes
We will post updates here and change the "Last updated" date. Material changes will be communicated by email or in the Services.
Contact
BrianOnAI LLC d/b/a Onaro · 20 Highgate Road, Trumbull CT 06611 · hello@onaro.io