LegalPrivacy
Privacy Policy
Who we are
Symphony is an AI-assisted bookkeeping service for firms that keep books in QuickBooks Online, offered to businesses in the United States. It is operated by StableModels, LLC (“StableModels”, “we”, “us”). This policy explains what information we collect when you visit symphonyagents.ai, sign in to the application at app.symphonyagents.ai, use the Symphony command-line tool, or connect a QuickBooks company or another service to Symphony (together, the “Service”), and what we do with it.
Symphony is used by organizations, such as bookkeeping and accounting firms, and by the people they add as members. Much of the information we handle belongs to those organizations and to the businesses whose books they keep. We process that information to provide the Service to the organization and as it directs, on the terms of our Data Processing Addendum. If you are a client of a firm that uses Symphony, the firm decides which of your books it connects; you can also contact us directly (see Contact us).
Symphony connects to QuickBooks Online through Intuit’s authorization service. We are not Intuit, and we do not process QuickBooks data or personal information on Intuit’s behalf. Intuit’s own privacy statement governs what Intuit does with your information.
Information we collect
Sign-in information
You sign in to Symphony with a Google account. We ask Google only to confirm your identity and email address. To recognize you at your next sign-in, we keep a keyed hash of your Google account identifier. We do not receive your Google password, and we do not keep your name, photo or the other details Google returns. Each member record holds an internal member identifier, the member’s role in the organization, when it was created, and the member’s preferences.
Information you give us
We collect what you and your colleagues enter into Symphony: organization and project names, job instructions, messages to Symphony’s agents, questions you answer, and the changes you approve, apply or reject.
Data from the services you connect
When an organization connects QuickBooks Online, Symphony reads and, where permitted, changes accounting data in that company. This is described in detail under QuickBooks data. If an organization connects another service (for example an email or calendar account through our integrations provider) or configures an external tool server, Symphony receives the data those services return to the tools the organization has enabled.
Technical information
Our hosting provider processes technical data about each request to our website and application, such as IP address, browser type, the address requested and the time. Our service logs record request details, errors and the outcome of calls to connected services, so that we can operate, secure and troubleshoot the Service. We do not log QuickBooks sign-in credentials.
Cookies and browser storage
The website sets no cookies and loads no analytics, advertising or third-party scripts. The application sets no cookies either; it keeps your sign-in token and a few display preferences in your browser’s local storage, and removes the token when you sign out or it expires. We do not use tracking technologies to follow you across other websites.
QuickBooks data
How the connection works
An organization connects a QuickBooks Online company to one of its projects. You sign
in at Intuit and choose the company; Symphony never sees your Intuit password. Symphony
requests Intuit’s accounting scope (com.intuit.quickbooks.accounting) only.
Intuit issues access and refresh tokens, which we encrypt and store (see
Security) and renew so that the connection keeps working until
it is disconnected.
What Symphony can read
Within that scope Symphony can read the company’s accounting records, including its company information and preferences, chart of accounts, customers, vendors, employees, items, classes, departments, terms and tax settings, and transactions such as invoices, bills, payments, purchases, deposits, transfers, journal entries, estimates, sales receipts, credit memos, refund receipts, purchase orders, vendor credits, time activities and attachments, as well as financial reports such as profit and loss, balance sheet, cash flow, trial balance, general ledger and aging reports.
These records can include sensitive personal information, such as bank account details, the taxpayer identification numbers of vendors and contractors, and information about employees. We process it only to provide the Service and do not use it to infer characteristics about anyone.
What Symphony can change
When an organization allows it, Symphony can create and update records of those kinds and upload attachments; permanently delete certain transactions (such as invoices, bills, payments, purchases, journal entries, estimates and deposits); and deactivate customers, employees and items. Symphony makes only the changes that the job or agent doing the work has been granted, and only in the way its mode allows:
- Safe mode. Jobs start in safe mode. A safe-mode run changes nothing in QuickBooks: it records each change it would make, and a change is written only if a member applies it.
- Live mode. A member may switch a job to live mode. A live run writes each change as it goes, without asking for approval of each change. Only a signed-in person can start a job’s live run or switch a job to live mode. Agents other than jobs, including scheduled ones, make changes as their connection permissions allow.
- Connection permissions. An agent’s access to a connection is read-only, requires a member’s approval for every change, or lets the agent make changes itself while still holding actions marked destructive for approval.
Every change Symphony proposes or makes is recorded in the project’s change ledger, with the record’s values before and after the change. An applied change is not undone automatically; correcting it is a new change in QuickBooks.
What Symphony keeps
To do its work Symphony keeps: a copy of the company’s reference lists (accounts, classes, items, terms, tax codes, vendors and customers), refreshed periodically; notices of recent changes that Intuit sends us; the change ledger; and the transcripts of the sessions in which agents worked, which include the QuickBooks data they read.
How we limit its use
We use QuickBooks data only to provide the Symphony functions the organization uses. We do not sell it, do not use it for advertising, do not use one organization’s data to do work for another organization, and do not give third parties access to it except the service providers described below that help us run Symphony.
How we use information
We use the information described above to:
- sign you in, keep your organization’s projects separate, and enforce permissions;
- do the bookkeeping work your organization asks for, such as categorizing transactions, and record the changes proposed and made;
- answer your messages and questions through Symphony’s agents;
- operate, secure and troubleshoot the Service, including detecting abuse and investigating errors and failed calls to connected services;
- improve the Service using aggregated or de-identified information about how it is used and how it performs, which does not include the contents of QuickBooks data or of other information organizations put into Symphony;
- communicate with you about the Service and respond to your requests; and
- comply with law and enforce our Terms of Service.
AI processing
Symphony’s agents use large language models. To do a piece of work, Symphony sends a model the agent’s instructions, the conversation, and the results of the tools the agent used, which can include QuickBooks data and the results of web research. A separate model call may assess a proposed action, receiving the action, its input and its rationale. Every model request passes through our AI gateway, which is hosted by Cloudflare and keeps a log of each request and response for a limited period, normally no longer than 30 days.
An organization’s administrators choose which models may do its work. Today the models available come from Anthropic and OpenAI; Symphony’s own assistant and its assessment of proposed actions use models we select, from these providers and from TypeSafe.
We do not use your data, including QuickBooks data, to train or fine-tune AI models. Under the terms on which we use Anthropic’s and OpenAI’s services, they do not use the data we send them to train their models. A model provider may keep the requests and responses it handles for a limited period under its own terms, for example to detect abuse, and then deletes them.
AI output can be wrong. Symphony records what its agents did and why so that people can review it; see our Terms of Service for your responsibilities when relying on it.
Retention
- Organization data — projects, jobs, session transcripts, change ledgers, files and agent memory — is kept while the organization uses Symphony, until it is deleted as described below.
- QuickBooks credentials, reference-list copies and change notices are kept while the connection exists. Disconnecting deletes all three at once.
- Activity logs, including service logs and the AI gateway’s logs of model requests and responses, are kept for a limited period, normally no longer than 30 days. Model providers keep what they receive as described under AI processing.
- When an organization closes its account, we delete its data within 30 days, unless we must keep some of it to comply with law.
Disconnecting QuickBooks and deleting data
Revoking Symphony’s access to QuickBooks and deleting the data Symphony already holds are different steps.
Disconnecting in Symphony
A member can disconnect a QuickBooks company from its project’s Connections page. Symphony then revokes its tokens with Intuit and deletes the stored credential, the copy of the company’s reference lists and the change notices for that company. Symphony can no longer read or change the company. Disconnecting does not delete the session transcripts and ledger entries already recorded; they stay with the project until it is deleted. Signing out of Symphony does not disconnect QuickBooks.
Disconnecting in QuickBooks
You can also remove Symphony from your company’s connected apps in QuickBooks. Intuit then stops Symphony’s access. Symphony may not learn of this until its next request is refused, and the data it already holds stays until it is deleted.
Deleting data
To delete a project or your organization and the data Symphony holds for it, contact us (see Contact us). Deleting a project removes its connections and revokes their access, and deletes its ledgers, files, agent memory and schedules; its session transcripts are deleted when the organization’s data is deleted. Deleting an organization deletes all of its projects, their session transcripts, and its own records, and revokes the accounts it connected. We complete deletion within 30 days of the request and confirm when it is done. An organization’s administrators can remove a member, which deletes that member’s record and preferences.
Deleting data from Symphony does not change the records in your QuickBooks company, including changes Symphony made there.
Security
Symphony is served only over HTTPS. QuickBooks tokens are encrypted with AES-256-GCM under a separate key for each connection, and those keys are themselves encrypted with a key held in Cloudflare’s secrets store; tokens are never returned to the application or shown to people. Each organization’s and project’s data is kept in its own storage, and access is checked on every request. No system is perfectly secure, so we cannot guarantee the security of information, but we work to protect it and to respond promptly if something goes wrong.
If we become aware of a security incident that compromises an organization’s data, we will notify that organization’s administrators without undue delay, and notify others as the law requires.
Your rights and choices
Depending on the state where you live, you may have the right to ask whether we process personal information about you, and to access, correct, delete or receive a copy of it, to opt out of certain processing, and to withdraw consent you have given. We honor these requests from people in every US state. We do not sell or share personal information as state privacy laws define it, do not use it for targeted advertising, and do not use it for decisions that have legal or similarly significant effects on you.
To exercise a right, contact us (see Contact us). We will verify your request and answer it within the time the law requires, and we will not discriminate against you for making it. If your information came to us through an organization that uses Symphony, we may refer your request to that organization or act on it with them. If we decline your request, you may appeal by replying to our decision, and you may also contact your state attorney general.
To verify a request, we confirm that it comes from the email address or Symphony account associated with the information, and we may ask for more information where we need it to confirm your identity. You may make a request through an authorized agent; we may ask for your signed permission for the agent to act for you and ask you to confirm your identity with us directly.
Because we do not sell or share personal information, a Global Privacy Control signal has nothing to opt you out of, and we do not respond to Do Not Track signals.
Where information is processed
Symphony serves customers in the United States. We use providers with global infrastructure, and requests are handled as close to the person using Symphony as those providers allow.
Children
Symphony is a business service and is not directed to children. We do not knowingly collect personal information from anyone under 18.
Changes to this policy
We will post any change to this policy on this page and update its effective date. If a change materially affects how we handle information we already hold, we will tell organizations’ administrators through Symphony before it takes effect. We keep each earlier version and will send it to you on request.
Contact us
Questions, requests and complaints about privacy go to legal@stablemodels.ai, or by mail to:
StableModels, LLC205 South Academy Street, Unit 4268
Cary, North Carolina 27519