Client Portal

Centek Client Portal Privacy Policy

Effective October 25, 2026

1. Who we are and what this covers

This policy explains what information the Centek Client Portal collects, how we use it, and who we share it with. It is effective October 25, 2026.

Centek, Inc. (“Centek”, “we”, “us”) is a managed IT services provider. The Centek Client Portal (the “Portal”) is a secure website where our managed-services clients view their IT environment: devices, security alerts, backups, email security, support tickets, training results, reports and invoices.

The Portal is only for our clients and the people they authorize. This policy covers the Portal and its connections to the tools we use to deliver our services. It does not cover our public website, which has its own terms, or the separate services agreement between Centek and each client.

2. Information we collect

The Portal collects only what it needs to sign people in and show each client its own IT information.

• Sign-in details. When you sign in with Microsoft 365, Google Workspace or a one-time email code, we receive your name, email address, and your organization’s tenant or domain identifier. We do not receive or store your password.
• Your organization’s IT information. We display information from the tools we use to manage and protect your systems, such as device names and health, security alerts, vulnerability scans, backup status, email filtering statistics, security awareness training results, support tickets, and user account details (for example whether multi-factor authentication is enabled).
• Billing information. For people your organization allows to see billing, we display your organization’s invoices from our accounting system, QuickBooks Online: invoice numbers, dates, amounts and open balances.
• Usage and security logs. We record sign-ins and certain actions (such as changes to access settings) with the time, user and IP address, to keep the Portal secure and to investigate problems.
• Cookies. The Portal uses only essential cookies that keep you signed in and protect sign-in requests. We do not use advertising or tracking cookies.

3. How we use information

We use this information only to provide and support our IT services to your organization.

• Confirm who you are and that your organization has authorized you to use the Portal.
• Show your organization its own devices, security, backup, email, ticket, training, report and billing information.
• Send emails you or your organization asked for, such as sign-in codes and monthly reports.
• Keep the Portal secure, prevent misuse, and fix problems.
• Meet legal, accounting and contractual obligations.

We do not sell personal information, use it for advertising, or share it with data brokers. Each client sees only its own organization’s information.

4. QuickBooks Online data

The Portal connects to Centek’s own QuickBooks Online company with read-only access, solely to show each client its invoices.

• What we read: our customer list (to match each client to its customer record) and invoices (number, date, due date, amount, open balance and memo).
• What we don’t do: the Portal never creates, changes or deletes anything in QuickBooks, and does not access payment card or bank details.
• Who sees it: each client sees only its own invoices, and only people that client has authorized to see billing.
• How it’s protected: the QuickBooks connection credentials are encrypted before they are stored. Invoice data is held only briefly in server memory to display pages, not copied into a separate database.
• Disconnecting: Centek can disconnect the Portal from QuickBooks at any time, which stops all access and revokes the connection.

Payments and invoice downloads are handled by our payment provider, FlexPoint, under its own privacy policy.

5. Sharing and service providers

We share information only with service providers that help us run the Portal and deliver our services, and only as needed for that purpose.

These providers process information under their own security and privacy commitments. We may also disclose information when the law requires it, to protect the rights or safety of our clients or others, or as part of a merger or sale of our business, in which case this policy continues to apply.

6. Security, retention and your choices

Security. The Portal is served only over encrypted connections (HTTPS), signs people in through Microsoft, Google or single-use email codes, and restricts each person to their own organization’s information. Secrets are kept in a secure key vault or encrypted at rest. No system is perfectly secure, but we work to protect information with reasonable administrative, technical and physical safeguards.

Retention. We keep account and sign-in records while your organization is our client, and security logs and report history for as long as needed for security, support and legal purposes. Information displayed from our tools stays in those tools under our agreement with your organization.

Your choices. Your organization decides who may use the Portal and can remove access at any time. You may ask us to access, correct or delete your personal information, or to stop sending report emails, by contacting us below. Some information must be kept to meet legal or contractual obligations.

Children. The Portal is for business use and is not directed to children under 16.

Changes. We may update this policy. We will post the new version with its effective date, and tell clients about significant changes.

7. Contact us

Questions or requests about this policy or your information: Centek, Inc.