Privacy Policy
This Privacy Policy describes how Cot/Lift Medik (“we,” “us”) handles information when you use our internal Medik Records portal (the “Portal”). The Portal is a private business tool for authorized employees, technicians, and customer locations—not a public consumer service.
Who this applies to
The Portal is provided only to users invited or provisioned by Cot/Lift Medik (owners, technicians, and approved location accounts). If you do not have an authorized account, do not use the Portal.
Information we collect
- Account data: name, user ID, email (where provided), role, and authentication records (sessions, password hashes).
- Operational data: work orders, repair form details (e.g. unit IDs, serial numbers, notes), uploaded files, and related metadata.
- Client database data: customer and contact information you enter or sync from QuickBooks, including billing details, balances, and notes.
- Technical data: IP address, browser type, and similar logs collected by our hosting provider for security and reliability.
How we use information
We use information solely to operate the Portal, including to:
- Authenticate users and enforce access by role;
- Store and display work orders, client records, and files;
- Sync with QuickBooks Online when an owner connects a company;
- Send transactional email (e.g. password reset or magic-link invites);
- Maintain security, troubleshoot errors, and improve reliability.
We do not sell personal information.
Third-party services
We use trusted providers to run the Portal, including:
- Intuit QuickBooks Online — when connected by an owner, to read and update customer data per your QuickBooks permissions;
- Hosting and database providers (e.g. Vercel, Turso);
- File storage (UploadThing);
- Email delivery (Resend).
Those providers process data under their own terms and privacy policies. QuickBooks data is accessed only after an authorized owner completes Intuit's OAuth connection.
Retention and security
We retain data while accounts and business records are needed for operations. We use industry-standard measures (HTTPS, access controls, private file storage where configured) but no system is completely secure.
Your choices
Authorized users may update certain profile or operational data within the Portal. Account removal or data requests should be directed to us at the contact below. Location users should contact Cot/Lift Medik administrators for access changes.
Children
The Portal is not directed to children under 13 and is not intended for their use.
Changes
We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Portal after changes constitutes acceptance of the updated policy.
Contact
Questions about this policy: marcelo@cotmedik.com.