Privacy Policy

Information processed

The service processes approved users’ email addresses, account details, permissions, password-verification data and sign-in sessions. Security and activity records can include IP addresses, browser information, timestamps and actions performed within the portal.

Quotation tools process the member, company, date-of-birth, plan-selection and premium information users enter or upload. Saved calculations contain the inputs and results needed to reopen that work.

Google account access and Gmail data

The designated Gmail sender authorizes the application to send email on its behalf. The service uses OAuth credentials and tokens to maintain that authorized connection. It processes the sender address, recipient addresses, email subjects and message contents required to send account-access emails, including temporary-password messages.

The Gmail integration does not read inbox messages, retrieve contacts or list mailbox contents. Portal recipients do not grant access to their personal Google accounts merely by receiving an email.

Google user data is used only to provide and secure the described email service. It is not sold, used for advertising or used to train general-purpose artificial intelligence models.

Medmark Email Service’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Purpose and sharing

Information is used to authenticate approved users, deliver account-access messages, calculate and compare quotations, produce exports, restore saved work and investigate service or security issues.

Cloudflare provides application hosting and storage. Google processes email-delivery information through Gmail. Email contents are delivered to their intended recipients. Authorized administrators may access account records, activity information and saved calculations according to their assigned permissions. Information may also be disclosed when required by applicable law.

Users control any further sharing of downloaded proposals and should share them only with authorized recipients. Service providers may process data in locations outside the user’s country.

Storage, retention and security

Account and application records are stored in the service’s backend. OAuth credentials and refresh tokens are held in server-side configuration and must be protected as secrets. Access is controlled through approved accounts, sessions and role-based permissions; network connections use HTTPS.

Records are retained as needed to operate the service, maintain saved work and address security or applicable recordkeeping obligations. Removing saved work from the portal does not remove copies already downloaded, emailed or retained in backups. Google’s handling of sent messages is also subject to the sender’s Gmail settings and Google’s policies.

No system can guarantee absolute security. Report suspected unauthorized access promptly to medmark.leads@gmail.com.

Cookies

The portal uses session cookies to maintain sign-in. These public information pages do not set cookies or include advertising or analytics scripts.

Your choices and requests

Contact medmark.leads@gmail.com to request access to, correction of or deletion of information associated with your use of the service. Requests may require identity confirmation, and some records may need to be retained for security or applicable legal obligations.

The authorized Gmail sender can revoke the application’s connection through Google Account connections. Revoking access stops the service from obtaining new access tokens for that connection; it does not automatically delete existing portal records or messages already sent. Contact support to request removal of stored authorization credentials.

Updates and contact

Changes to this policy will be published on this page with an updated date. For privacy questions, contact medmark.leads@gmail.com.