Privacy Policy

Last updated: June 12, 2026

1. Introduction

GROWQUIKR ONLINE SERVICES LLP ("FirstMark Data," "we," "us," or "our"), a limited liability partnership registered in Assam, India, is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your personal information when you visit our website at https://firstmarkdata.com, use our new business intelligence platform at https://app.firstmarkdata.com, or interact with any of our services (collectively, the "Service").

FirstMark Data is a new business intelligence platform that processes publicly available public domain registration records to surface newly registered business contacts. This Privacy Policy governs how we handle your personal information as a user of our platform - it does not apply to the publicly available registration data that our Service retrieves and processes from public domain registration sources.

By accessing or using the Service, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy. If you do not agree, you must discontinue your use of the Service.

All business contact data surfaced by FirstMark Data originates from public public domain registration records. Domain registrants are explicitly presented with the choice to make their contact information public or private at the time of registration through their domain registrar. FirstMark Data only processes contact information from registrants who chose public disclosure. Privacy-protected registrations - where registrants opted for domain registration privacy protection services - are filtered at the data ingestion stage and never surface on the platform. By choosing public domain registration, registrants made an informed, active decision to publish their contact information on a globally accessible public database administered by ICANN.

2. Information We Collect

2.1 Information You Provide Directly

When you create an account, purchase a plan, or contact us, we may collect:

• Account Information: Full name, email address, password (stored in hashed form), and company name
• Payment Information: Billing details processed securely by our third-party payment processors (Razorpay and Stripe). We do not store full card numbers on our servers.
• Communications: Any information you provide when contacting our support team or submitting feedback
• Preferences: Your filter settings, notification preferences, and other configuration choices within the Service

2.2 Information Collected Automatically

• Device Information: Device type, operating system, browser type and version
• Log Data: IP address, access timestamps, pages viewed, and duration of visits
• Usage Data: Feature usage, credit consumption records, reveal history, and interaction patterns used solely to improve platform performance
• UTM Parameters: Marketing attribution data (utm_source, utm_medium, utm_campaign) captured at signup to help us understand which channels bring users to FirstMark Data

2.3 Cookies and Tracking Technologies

We use essential cookies for session management and authentication. We may use analytics cookies to understand how users interact with the Service. You can manage cookie preferences through your browser settings, though disabling essential cookies may limit Service functionality.

3. How We Use Your Information

• Service Delivery: To create and manage your account, process credit purchases, deliver business contact data, and provide customer support
• Service Improvement: To analyze usage patterns, diagnose technical issues, and develop new features
• Communication: To send transactional emails (account confirmations, purchase receipts, password resets, daily alert digests) and, with your consent, product updates
• Security and Fraud Prevention: To detect and prevent fraudulent transactions, unauthorized access, and abuse of the credit system
• Legal Compliance: To comply with applicable laws, regulations, and governmental requests
• Marketing Attribution: To understand which marketing channels are effective, using anonymized and aggregated UTM data

4. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following limited circumstances:

• Service Providers: With trusted third-party companies that help us operate our business, including Supabase (database and authentication), Vercel (hosting), Resend (email delivery), Razorpay and Stripe (payment processing), and MillionVerifier (email verification). These providers are contractually obligated to protect your information.
• Legal Requirements: When required by law, court order, or to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, subject to the same privacy protections.
• With Your Consent: In any other circumstances where you have provided explicit consent.

5. Data Retention

• Account Information: Retained for the duration of your active account and for thirty (30) days following deletion, after which it is permanently deleted or anonymized.
• Payment Information: Retained as required for tax, accounting, and legal compliance, typically seven (7) years.
• Credit and Purchase History: Retained for the duration of your account for billing and dispute resolution purposes.
• Business Contact Data: Newly registered business data is automatically purged from our platform after thirty (30) days from the date of registration. This is a core feature of the Service - we do not maintain long-term databases of this data.
• Usage and Analytics Data: Retained for twenty-four (24) months, after which it is aggregated and anonymized.
• Email Verification Cache: Verified email status is cached indefinitely in hashed form to avoid redundant verification API calls. No personally identifiable email addresses are stored in plaintext in the verification cache.

6. Data Security

We implement industry-standard technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL protocols
• Row-level security (RLS) policies in our database ensuring users can only access their own data
• Hashed password storage using industry-standard algorithms
• Separation of personally identifiable information from publicly displayed data (email and phone are never exposed without a credit-based reveal action)
• Rate limiting and velocity monitoring to detect and prevent abuse

No method of transmission over the Internet is completely secure. We encourage you to use strong, unique passwords for your account.

7. International Data Transfers

Your information may be transferred to and processed in countries other than India, including the United States and Singapore, where our infrastructure providers operate. When we transfer your data internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

8. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights:

• Right of Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure: Request deletion of your personal information, subject to legal exceptions.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to processing of your personal information for direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at privacy@firstmarkdata.com. We will respond within thirty (30) days.

9. India Data Protection (DPDP Act 2023)

If you are located in India, your personal data is processed in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act). You have the right to access, correct, and erase your personal data, the right to grievance redressal, and the right to nominate another individual to exercise your rights. FirstMark Data processes your data based on your consent or for legitimate uses as defined under the DPDP Act. For grievances, contact our grievance officer at privacy@firstmarkdata.com.

10. GDPR (European Economic Area)

If you are located in the EEA, United Kingdom, or Switzerland, your personal data is processed in accordance with the General Data Protection Regulation (GDPR). Our legal bases for processing include contract performance, legitimate interests, consent, and legal obligations. You have the right to lodge a complaint with your local data protection supervisory authority.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the CCPA and CPRA, including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information. We do not sell personal information.

12. Children's Privacy

The Service is not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from minors. If you believe we have collected information from a minor, please contact us immediately at privacy@firstmarkdata.com.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions or concerns regarding this Privacy Policy, please contact us at:

GROWQUIKR ONLINE SERVICES LLP
North Bagetar, Haflong, Assam 788819, India
Email: privacy@firstmarkdata.com
Website: https://firstmarkdata.com