Privacy Policy

Last Updated: August 25, 2026

RLN US LLP ("RLN US," "we," "us," or "our") respects your privacy and is committed to protecting the information entrusted to us.

This Privacy Policy describes how we collect, use, disclose, store, and protect information when you visit our websites, use our services, use the Varenna platform ("Varenna"), or authorize Varenna to connect with third-party accounting, financial, point-of-sale, e-commerce, tax, property-management, or other business systems.

By accessing or using our websites, services, or Varenna, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

Depending upon the services you use, we may collect the following categories of information.

Account and Contact Information

This may include your name, business name, email address, telephone number, mailing address, job title, username, account information, and other information provided when establishing or administering an account.

Business and Entity Information

We may collect information concerning businesses and other entities that use our services, including entity names, addresses, tax jurisdictions, registration information, filing requirements, ownership or organizational information, and other information necessary to provide accounting, tax, compliance, advisory, and related services.

Accounting and Financial Information

When necessary to provide our services, we may process accounting and financial information, including:

Sales and revenue transactions;
Invoices and sales receipts;
Credit memos and refunds;
Payments;
Customers and vendors;
Products and services;
General-ledger accounts and balances;
Sales-tax liability accounts;
Journal entries;
Financial reports;
Tax calculations;
Filing information; and
Related accounting records.

Tax and Compliance Information

We may process information required to prepare, review, manage, monitor, or support tax and regulatory obligations, including sales-tax registrations, filing frequencies, taxable and exempt transactions, exemption information, nexus information, tax jurisdictions, returns, payments, notices, and filing confirmations.

Information From Connected Third-Party Services

Varenna may allow authorized users to connect third-party platforms such as accounting systems, point-of-sale systems, e-commerce platforms, financial systems, and other business applications.

Examples may include QuickBooks Online, Shopify, Toast, Clover, and similar services.

When you authorize a connection, Varenna may retrieve information permitted by the authorization you grant and the applicable third-party platform. The specific information accessed depends upon the provider, permissions granted, and services being performed.

2. QuickBooks Online and Other Connected Applications

When an authorized user connects a QuickBooks Online company or another third-party application to Varenna, the user authorizes Varenna to access information made available through that provider's application programming interface ("API") within the scope of the authorization granted.

For example, information obtained from an accounting system may include transactions, invoices, sales receipts, credit memos, refunds, customers, products or services, accounts, journal entries, and financial or tax-related information.

Varenna may use this information to provide functions such as:

Importing and organizing accounting information;
Preparing accounting and tax workpapers;
Identifying transactions relevant to tax compliance;
Calculating and preparing sales-tax returns;
Reconciling source-system information with accounting records;
Detecting duplicate, incomplete, inconsistent, or potentially erroneous information;
Monitoring filing and compliance obligations;
Supporting review and approval workflows; and
Maintaining appropriate records and audit trails.

Connecting a third-party service does not transfer ownership of your information to RLN US.

3. Authorization Credentials and OAuth Tokens

Some third-party integrations use secure authorization technologies such as OAuth.

Where applicable, RLN US and Varenna do not require users to provide their third-party account passwords directly to Varenna.

Instead, users authenticate with the third-party provider, and the provider supplies authorization credentials or tokens that permit Varenna to access approved information.

We may securely store authorization and refresh tokens as necessary to maintain an authorized connection.

We implement security measures designed to protect such credentials against unauthorized access, disclosure, alteration, or misuse.

4. How We Use Information

We may use information to:

Provide accounting, tax, compliance, advisory, and related professional services;
Operate and improve Varenna;
Synchronize information from authorized third-party systems;
Prepare and review tax returns and regulatory filings;
Perform reconciliations;
Monitor deadlines and compliance obligations;
Identify data-quality issues;
Identify duplicate or potentially inconsistent transactions;
Maintain records and audit trails;
Provide customer support;
Authenticate users and maintain account security;
Communicate with clients and authorized users;
Comply with legal and professional obligations;
Investigate security incidents or misuse;
Improve our services, systems, and workflows; and
Perform other activities disclosed to you or authorized by you.

5. Automated Processing and Artificial Intelligence

RLN US may use automation, machine learning, artificial intelligence, rules engines, and other technologies to assist in processing information and providing services.

These technologies may be used to classify transactions, identify potential errors or inconsistencies, reconcile information, identify compliance obligations, suggest workflow actions, organize documents, and assist users in reviewing information.

Where appropriate, automated results may be subject to human review.

Automated processing does not eliminate the responsibility of authorized users to review information where professional judgment, approval, or verification is required.

6. How We Share Information

We may disclose information to service providers and technology vendors that assist us in operating our business and providing our services, including providers of hosting, cloud infrastructure, communications, cybersecurity, data storage, analytics, document management, and related services.

Such providers are permitted to process information only as appropriate to perform services on our behalf and subject to applicable contractual and legal requirements.

We may also disclose information:

With your authorization;
To professional advisers, auditors, insurers, or legal counsel;
When required by law, regulation, subpoena, court order, or governmental request;
When reasonably necessary to protect the rights, security, property, or safety of RLN US, our clients, users, or others; and
In connection with a merger, acquisition, financing, restructuring, sale of assets, or similar corporate transaction, subject to applicable law.

7. Sale of Personal Information

RLN US does not sell personal information or connected accounting data to third parties for monetary consideration.

We do not permit third-party accounting or business information accessed through Varenna integrations to be used for unrelated advertising purposes.

8. Data Security

We maintain administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, destruction, or misuse.

Depending upon the nature of the information and service, safeguards may include encryption, authentication, access controls, role-based permissions, logging, monitoring, network security, credential protection, backup procedures, and other security controls.

No information system can be guaranteed to be completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain information for as long as reasonably necessary to:

Provide requested services;
Maintain business and professional records;
Satisfy tax, accounting, regulatory, contractual, and legal obligations;
Resolve disputes;
Maintain security and audit records; and
Enforce applicable agreements.

Retention periods may vary depending upon the type of information and the services provided.

When information is no longer reasonably required, we may delete, anonymize, or otherwise dispose of it in accordance with applicable requirements and our retention procedures.

10. Disconnecting Third-Party Applications

Authorized users may request that a connected third-party application be disconnected from Varenna.

Disconnecting an integration prevents Varenna from obtaining new information through that authorization after the connection has been terminated, subject to the technical operation of the third-party provider.

Information previously obtained may be retained where reasonably necessary for accounting records, completed tax filings, professional-services records, audit trails, legal obligations, security, dispute resolution, or other legitimate purposes.

Users may also be able to revoke Varenna's authorization directly through the applicable third-party provider.

11. Data Accuracy

Varenna may obtain information from third-party systems selected or authorized by users.

RLN US cannot guarantee that information maintained by those third-party systems is complete or accurate.

Varenna may identify potential errors, inconsistencies, missing information, duplicate records, reconciliation differences, or other data-quality issues, but authorized users remain responsible for reviewing information where appropriate.

12. Cookies and Website Information

Our websites may collect technical information such as IP address, browser type, device information, pages visited, referring pages, and similar usage information.

We may use cookies and similar technologies to operate our websites, maintain sessions, understand usage, improve performance, and protect our services.

13. Your Choices and Rights

Depending upon your location and applicable law, you may have rights concerning personal information, including rights to request access, correction, deletion, restriction, or other information concerning our processing.

Certain information may need to be retained notwithstanding such a request where required for tax, accounting, professional, contractual, security, regulatory, or legal purposes.

Requests may be submitted using the contact information below.

14. Third-Party Services

Our services may integrate with or contain links to third-party websites, platforms, and applications.

Those services operate under their own terms, privacy policies, and security practices.

RLN US is not responsible for the independent privacy practices of third parties, and users should review the applicable provider's policies before authorizing an integration.

15. Children's Privacy

Our business and professional services are not directed to children under the age of 13, and we do not knowingly collect personal information directly from children under 13 through Varenna.

16. International Processing

RLN US and its service providers may process information in the United States and other countries in which we or our service providers operate.

Where required, we implement appropriate safeguards for international transfers of personal information.

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our services, technologies, integrations, legal requirements, or business practices.

When we make material changes, we will update the "Last Updated" date and may provide additional notice where appropriate.

Continued use of our services following an update is subject to the revised Privacy Policy.