Privacy Policy

This policy explains how Market Qwik ("we") handles personal data. It covers three groups: people who hold an account, business contacts stored in an account by its holder, and visitors to this website. It describes the platform as currently implemented.

1. Who is responsible

For account holders and website visitors, Market Qwik is the controller. For business contacts that an account holder discovers, imports or enriches, the account holder is the controller and Market Qwik processes that data on their instructions under the Terms of Service.

2. Data we collect

Account holders

• Company name, first and last name, email address and a hashed password at registration.
• Login time and IP address, session tokens, two-factor settings and an audit log of significant actions.
• Settings you enter, including sender identities, a postal address for email footers, API keys for third-party providers you choose to connect (stored encrypted), and compliance preferences.
• Prepaid credit balances, spend caps and a ledger of credit use.
• Support tickets and messages you send us.

Business contacts and leads in your workspace

• Business records: name, website, address, phone, category and similar firmographic fields, gathered from public map data, public business websites and registries, open government datasets, your file imports and your connected CRM.
• Contact records: name, job title, business email and phone, social profile links, and the source each value came from.
• Engagement data from campaigns you send: opens, clicks, replies, bounces, complaints and unsubscribe status, keyed by a signed per-contact token.
• Email conversations, only if you connect a mailbox for read-only sync.

Website visitors

• Standard server logs (IP address, user agent, pages requested).
• Page-view analytics collected by a self-hosted Matomo instance operated by us. It runs without cookies unless you accept analytics cookies in the banner. No advertising networks or third-party trackers are loaded.
• A theme preference and, after login, an access token stored in your browser.

3. How we use data

• To provide the service: discover and enrich business records, verify email addresses, send campaigns you create, and report results back to you.
• To honour opt-outs: an unsubscribed contact is skipped on every later send in that workspace.
• To protect the platform: rate limiting, abuse scoring, bounce and complaint monitoring with automatic send restrictions.
• To bill and meter prepaid credits.
• To answer support requests and send operational notices about your account.

We do not sell personal data and we do not use account or contact data to train machine-learning models.

4. Third parties that process data

• Email delivery: campaign emails are relayed through our SMTP infrastructure, or through SendGrid, Resend or Apollo if you connect your own account with those providers.
• AI features: when you use the AI email generator or AI data-quality suggestions, the text you provide and the relevant record fields are sent to a large-language-model provider (OpenAI or Anthropic) to produce the output. These features are off unless you trigger them and consume prepaid credits.
• Optional enrichment providers: Hunter.io, Apollo.io, People Data Labs and Clearbit receive the business domain or contact name you ask them to enrich, only when you have connected your own key.
• Optional integrations: your CRM (Salesforce, HubSpot, Zoho, SugarCRM, Pipedrive), your mailbox provider, Twilio and Lob, each only if you connect them.
• Public data sources: public map data, business websites and open government datasets are read to build business records. We do not send your data to them.
• Hosting: the platform runs on servers we operate in the United States.

5. Cookies and local storage

Strictly necessary: a session cookie and local-storage entries for authentication after you log in, a local-storage entry for your light/dark theme, and a local-storage entry that records your cookie choice.

Analytics (optional): our self-hosted Matomo measures page visits. By default it runs without cookies and honours your browser's Do Not Track signal. If you accept analytics cookies in the banner, Matomo sets first-party cookies (_pk_id, _pk_ses, valid up to 13 months and 30 minutes respectively) so returning visits can be told from new ones, plus its own consent cookie. You can change your choice at any time with the "Cookie settings" link in the footer. We do not use third-party advertising cookies.

6. Retention

• Account data is kept while the account is open and deleted or anonymised within 90 days of closure, except records we must keep for accounting or legal reasons.
• Workspace data (businesses, contacts, campaigns) is kept until the account holder deletes it or closes the account.
• Unsubscribe records are kept indefinitely so opt-outs continue to be honoured.
• Analytics dashboards retain 90 days of detail; server and audit logs are rotated on a shorter schedule.

7. Security

Access is role-based and every query is scoped to the account's tenant. Passwords are hashed, provider API keys and two-factor secrets are encrypted at rest, traffic is served over TLS, and significant actions are audit-logged. We have not yet completed a third-party certification such as SOC 2.

8. Your rights

Account holders can view and edit their profile in Settings and can ask us to export or delete their data. If you are a business contact who received an email sent through Market Qwik, the unsubscribe link in that email opts you out of further messages from that sender; you may also contact us and we will pass the request to the account holder and suppress the address on their behalf. Residents of the EU, UK, Canada, California and other jurisdictions with privacy laws may exercise their access, correction, deletion, portability and objection rights by contacting us.

9. Children

The service is for businesses and is not directed at anyone under 18.

10. Contact

Privacy questions and requests: open a support ticket from inside the application or write to the address shown in the footer of any email we send you.