Privacy Policy

Privacy Policy | Effective Date: August 6, 2026

This Privacy Policy explains how Corrective Enterprises, Inc. ("Corrective Enterprises," "we," "us," or "our") accesses, uses, stores, shares, retains, and deletes information through the CSC Financial Data Import Tool (the "Tool"). The Tool is an internal reporting utility used by Corrective Enterprises and approved affiliated CSC entities. It is not a patient-facing or public consumer application.

1. Scope

This Policy applies to information processed through the Tool. It does not replace the privacy policies of Intuit, QuickBooks Online, CSC clinical operations, or other services and systems. Authorized users should review the privacy terms that apply to those services separately.

2. Information We Access or Collect

The Tool is designed to access and collect only the minimum information needed for its approved reporting function:

• QuickBooks Online company-identification information needed to verify the correct company connection;
• Aggregate Profit and Loss and Balance Sheet report values and approved aggregate financial categories;
• Reporting periods, source timestamps, import status, report fingerprints or hashes, validation results, and error logs;
• OAuth access and refresh tokens needed to maintain an authorized QuickBooks Online connection; and
• Limited technical information required to operate, secure, troubleshoot, and audit the Tool.

3. Information the Tool Is Not Designed to Collect

The Tool is not designed or approved to collect:

• Patient-identifiable information or protected health information;
• Individual customer, patient, vendor, or employee names;
• Individual transaction detail;
• Bank-account or routing numbers;
• Payment-card information;
• Employee payroll details;
• Intuit usernames or passwords; or
• Information unrelated to the approved aggregate financial-reporting purpose.

If unexpected record-level or sensitive information appears, processing should stop and the incident should be reported for review.

4. Sources of Information

We obtain information from QuickBooks Online after an authorized administrator approves the Tool's connection to a specific company. We may also generate technical logs, validation metadata, and report fingerprints during normal operation.

5. How We Use Information

We use information processed through the Tool to:

• Retrieve approved aggregate financial reports;
• Confirm that the correct QuickBooks Online company and reporting period were selected;
• Reconcile and validate closed-month financial reporting;
• Prepare internal management dashboards and leadership reports;
• Detect duplicate, missing, inconsistent, or unexpected imports;
• Maintain security, troubleshoot errors, and document system activity; and
• Comply with applicable legal, financial-record, security, and Intuit requirements.

We do not use QuickBooks Online information for advertising, behavioral profiling, patient care, or purposes unrelated to the Tool's approved financial-reporting function.

6. How We Share Information

We do not sell or rent information processed through the Tool. We do not share it for cross-context behavioral advertising or unrelated marketing.

Information may be shared only as reasonably necessary with:

• Authorized CSC leadership and personnel with a business need to know;
• Approved accountants, bookkeepers, financial advisors, auditors, legal counsel, information-security providers, and technical service providers acting for CSC;
• Intuit as necessary to authenticate, connect, and operate the QuickBooks Online integration;
• Government authorities or other parties when required by law, legal process, or a valid regulatory request; or
• Successors or counterparties in a merger, reorganization, financing, sale, or transfer, subject to appropriate confidentiality and legal safeguards.

Service providers and advisors should receive only the information needed for their authorized function and are expected to protect it appropriately.

7. Storage and Security

OAuth tokens and secrets are stored only in approved encrypted credential storage or an approved production secret manager. The Tool is designed to restrict accounting-data access to approved GET-only report retrieval, apply company-verification checks, limit access to authorized users, and avoid placing secrets or tokens in source code, email, chat, spreadsheets, cloud documents, screenshots, logs, or plaintext files.

We use administrative, technical, and organizational safeguards intended to protect information. No system or transmission method is completely secure, and we cannot guarantee absolute security.

8. Retention and Deletion

We retain information only for as long as reasonably necessary for the purposes described in this Policy and to satisfy legal, accounting, audit, security, troubleshooting, and record-retention obligations.

Active OAuth tokens are retained in encrypted storage only while an authorized QuickBooks Online connection is needed. When access is revoked or permanently discontinued, local tokens and secrets associated with that connection will be disabled or deleted promptly, subject to secure backup rotation and incident-preservation requirements.

Aggregate financial outputs and validation records are retained according to Corrective Enterprises' applicable financial-record retention practices. Diagnostic logs are minimized and deleted or de-identified when no longer needed for security, troubleshooting, duplicate-import protection, or auditability.

9. Access, Correction, and Deletion Requests

Because the Tool processes company financial information rather than consumer-profile information, access and correction requests are generally handled through authorized CSC leadership and the applicable QuickBooks Online company administrator.

Questions or requests concerning information processed through the Tool may be sent to Dr.Rick@FLSpinalCare.com. We will evaluate requests in light of authorization, security, financial-record obligations, and applicable law.

10. Revoking QuickBooks Online Access

An authorized QuickBooks Online administrator may revoke the Tool's connection through the affected company's QuickBooks Online app connection settings. Revoking the connection prevents future API access but does not automatically delete aggregate financial records that Corrective Enterprises must retain for legitimate business, accounting, audit, or legal purposes.

11. Children's Privacy

The Tool is an internal business reporting utility and is not directed to children. We do not knowingly collect personal information from children through the Tool.

12. Changes to This Policy

We may update this Policy to reflect changes in the Tool, our practices, applicable law, security requirements, or Intuit requirements. We will post the revised Policy with an updated effective date. Material changes may also be communicated to authorized users through appropriate internal channels.

13. Contact

Questions, security concerns, or privacy requests related to the Tool may be directed to:

Corrective Enterprises, Inc.
Email: Dr.Rick@FLSpinalCare.com