Privacy notice

This notice explains how FirstQuarter handles personal data across the public website, the client dashboard and the operational desk, and how clients, leads and applicants can exercise their privacy choices. It is written for a U.S.-first service model.

FirstQuarter handles a small number of clearly separated data sets:

• Website and demo request data submitted by prospective clients.
• Client account data used to sign in to the dashboard.
• Lead, contact and customer records that clients ask the desk to handle.
• Agent and applicant data from the work-with-us funnel.
• Operational records such as call logs, notes, timestamps and activity events.
• Limited technical data needed to keep the site and session secure.

When a demo is requested we collect name, work email, company, phone number, website, the package of interest, the described need and the page the request came from.

This is used to reply, prepare the conversation and keep a record of the enquiry. It is not sold, and it is not used for unrelated advertising.

Client users have an account with an email address, a hashed credential managed by our authentication provider, a role, and a link to their company account. The dashboard also stores the desk configuration a client approves, including contact channels, scripts and service selections, together with version history for review.

For lead handling we process the contact details and context a client sends us: name, email address, phone number, company, source, message and any qualification answers captured during a conversation.

For this data the client decides the purpose and FirstQuarter acts on the client's instructions. The client is responsible for having a lawful basis to contact those people.

Applicants to the distributed agent network submit contact details, location and time zone, language and experience information, the email used for their required Pipedrive Academy account, certification status and any evidence they attach. This is used to assess the application, record certification prerequisites and manage onboarding. Review notes are stored with the application.

• Call metadata such as time, duration, direction, outcome and attempt count.
• Agent notes describing what was discussed and what the next step is.
• Meeting and booking records created for the client.
• Event logs of desk actions, used for auditing, quality review and dashboard reporting.
• Call recordings only where the client's configuration and applicable law allow them, with required notices given.

• To respond to enquiries and prepare demos.
• To deliver the desk service: first response, calls, qualification, booking and follow-up.
• To produce the reporting copy shown in the client dashboard.
• To review quality, train agents and improve internal workflows.
• To keep accounts, sessions and records secure.
• To meet accounting, tax and legal obligations.

Data is shared only with people and systems that need it to deliver the service: the assigned desk agents and supervisors, the client's authorised users, and the processors listed below.

FirstQuarter does not sell personal data and does not share client lead data with other clients. Data may be disclosed where required by law or to protect legal rights.

FirstQuarter uses established business tools as processors, described in categories rather than a fixed list, so the stack can change without weakening these commitments:

• Cloud hosting, database, authentication and file storage for the website and dashboard.
• CRM and pipeline systems used internally by the desk.
• Telephony and call-handling systems.
• Email, calendar, meeting and document tools.
• Payment and invoicing providers for billing records.

Each processor is used under its own terms and only for the purposes described in this notice. Product names of these tools are trademarks of their owners.

• Demo requests: kept while the enquiry is active and for a reasonable follow-up period afterwards.
• Client account and configuration data: kept for the duration of the engagement.
• Lead records and operational logs: kept for the engagement and a limited period after it ends, so exports and disputes can be handled.
• Applicant data: kept while the application is assessed and for a limited period afterwards unless the applicant asks for deletion.
• Billing records: kept as long as accounting and tax rules require.

• Access is role-based: clients see only their own account data, and agents see only the desks they are assigned to.
• Database access is restricted with row-level security policies.
• Credentials and API keys are stored as secrets, never in client-side code.
• Desk actions are written to an event log for auditing.
• Data is encrypted in transit, and at rest by the underlying cloud provider.

FirstQuarter serves clients in the United States with a nearshore and distributed delivery team, so personal data may be accessed and processed outside the country where it was collected. Where transfers require a legal mechanism, the final version of this notice will name it. Processors are chosen on the basis that they support appropriate transfer safeguards.

Depending on where a person lives, they may have the right to ask for access, correction, deletion, a copy of their data, restriction of processing, or to object to certain processing.

Requests about a client's own leads or customers are forwarded to that client, because the client decides how that data is used. Requests about the website, a dashboard account or an agent application are handled by FirstQuarter directly.

Privacy request contact: [Insert privacy request email]. Legal entity: [FirstQuarter legal entity name]. Registered address: [Insert registered business address]. Until these details are published, privacy requests can be sent through the contact page and are handled the same way.