Privacy Policy

1. Who We Are (Data Controller)

Marque operates this Service. We are the data controller for personal data collected through this platform. For data protection enquiries, contact us at hello@marquecrm.com.

Marque is operated by TGF Digital Ltd, a company registered in England and Wales under number 17464775 whose registered office is at 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom.

2. What Data We Collect

We collect the following categories of personal data:

• Account data: name, email address, password (hashed), role within your agency
• Billing data: payment method details (processed by Stripe — we do not store card numbers), billing address, invoice history
• Usage data: pages visited, features used, timestamps, IP addresses, browser/device type
• Communications: emails processed through connected inboxes (with your explicit authorisation) or passed to us by a Google Workspace Studio flow you have built (see section 5), support tickets, messages
• Business data you upload: client records, project data, invoices, contracts, files, and any other data you input into the Service
• Activity capture (only if you install and switch it on): the browser extension records the website host names you spend time on and how long, and the Claude Code hook records the project folder and repository you worked in and for how long. See section 5a.

3. How We Use Your Data

We process your personal data for the following purposes:

• Contract performance: providing the Service you have subscribed to, processing payments, managing your account
• Legitimate interests: improving the Service, detecting and preventing fraud, maintaining security, sending product updates
• Legal obligation: complying with applicable laws, regulations, and court orders
• Consent: sending marketing communications (where you have opted in)

4. Data Sharing and Third Parties

We share data only where necessary:

• Stripe — payment processing (PCI DSS compliant)
• Hosting provider — the servers that run the Service and hold its database
• Amazon Web Services — file storage, where your installation uses it (encrypted at rest)
• Bunny — content delivery and video hosting
• Mailgun — transactional and inbound email
• Twilio — SMS notifications
• Gemini (Google), Claude (Anthropic) or GPT (OpenAI) — AI-powered features (email triage, task suggestions), on whichever engine your agency selects, using your agency’s own API key or, if it has not added one, ours; only the minimum necessary data is sent
• PostHog — product analytics and, where switched on, session recording; recordings are linked to your account

We do not sell your personal data to any third party. All sub-processors are contractually required to protect your data.

5a. Browser Extension and Claude Code Hook

Marque Time Tracker complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Browser data is used only for its disclosed time-tracking features, not sold or used for advertising or unrelated analytics.

The extension's manual timer sends the client/project/task selections, description and time entry you choose. On connected Marque pages it reads record IDs and headings locally to suggest a timer shortcut; it does not store full page addresses, query strings or fragments. Sign-in tokens, account/agency identity, settings and unsynced time stay in extension-local browser storage.

Automatic capture is optional and off until chosen. Its three choices are independent:

• Track my clients' sites: client-matched host names (for example example.com), start/end times, duration and matched client/project. No full addresses or page content.
• Also record other sites: host names and time for sites not matched to a client, for later attribution. Off unless separately chosen.
• Include Claude conversations: time on claude.ai plus conversation and Claude Project titles, used to identify the work. No messages, attachments or typed content are read.
• captured time is held for review and becomes a time entry when a person with the appropriate agency permission logs it. Agency users with the appropriate time permissions can see captured activity.
• the master switch pauses all automatic capture; disconnecting stops new capture and removes the sign-in token. Choices and unsynced time remain locally, bound to their original account and agency. Previously collected time may finish syncing after capture is paused.
• uploaded activity is retained until account deletion or a removal request to hello@marquecrm.com. Pausing capture or uninstalling does not delete previously uploaded activity.
• the separate optional Claude Code hook records session duration, working-folder name and a repository address with embedded credentials removed. It does not read prompts, file contents or command output.

These tools send activity only to your connected Marque instance for time tracking, not for advertising or sale. More detail: Marque privacy policy.

5. Google Workspace Studio Add-on

We publish an add-on for Google Workspace Studio. It adds three steps — “Create a Marque task”, “File an email in Marque” and “File a Studio-classified email” — that a flow you build can call.

• It cannot read your mailbox. The add-on requests a single permission: the ability to call an external web address (script.external_request). It holds no Gmail, Drive or Calendar permission, and can see only the values your own flow passes into the step.
• What is sent to us. The email steps send the message identifier, sender’s name and address, subject line and the body of the message your flow supplies. “File a Studio-classified email” also sends the classification, suggested actions and financial document details supplied by your flow. “Create a Marque task” sends the title, description, client details and priority your flow maps into the step.
• Where it is sent. To the Marque account you connect the step to, over an encrypted connection, authenticated with an endpoint token and shared secret you generate in Marque. Each person who installs the add-on connects it to their own account.
• What we keep. The sender, subject, message identifier, classification and supplied financial document details, together with any task or note created from them. The review inbox holds a shortened body preview (8,000 characters by default). When the message matches a client, its full supplied body is also stored in that client’s email history. These records are held in your own Marque account and are covered by the rest of this policy.
• AI triage. “File an email in Marque” requires you to switch email triage on and sends the message to the AI engine your agency has selected — Gemini (Google), Claude (Anthropic) or GPT (OpenAI) — using your agency’s own API key. “File a Studio-classified email” stores your flow’s verdict without sending it to another AI provider for classification. Any AI processing in your Studio flow is controlled by that flow.
• Financial documents. The Studio add-on does not read attachment contents. Invoices, receipts, payment confirmations and credit notes are held for review; filing them does not automatically record an expense or payment. Separately, when you choose to read an uploaded receipt with AI in Marque, the document is sent to your agency’s selected AI provider using its configured API key. You review the extracted fields before saving an expense.

Message content reaching us this way is used only to provide the feature you asked for. It is not used for advertising, it is not used to train any model, and it is not sold.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account termination, we retain data for up to 90 days to allow for data export requests, after which it is securely deleted. Billing records may be retained for up to 7 years to comply with legal obligations.

7. Data Transfers

Your data may be processed in countries outside the UK. Where we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions recognised under UK GDPR.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access: request a copy of your personal data
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of your data ("right to be forgotten")
• Restriction: request that we limit how we use your data
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at hello@marquecrm.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Cookies

We use session cookies (essential for the Service to function) and optional analytics cookies. Session cookies are deleted when you close your browser. You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent the Service from working correctly.

10. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, regular security reviews, and monitoring for unusual activity. Despite these measures, no internet transmission is completely secure.

11. Children's Privacy

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or within the Service at least 14 days in advance. The updated policy will be effective from the date shown at the top of this page.

13. Contact Us

For any privacy-related questions or to exercise your rights, contact us at:

hello@marquecrm.com