Privacy policy

Marque is operated by TGF DIGITAL LTD, company number 17464775, registered at 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom ("we", "us"). We are the data controller for the personal data described below.

This website (marquecrm.com)

This marketing site sets no analytics or advertising cookies and runs no third-party tracking scripts. The only thing it stores in your browser is a single value in localStorage recording whether you chose light or dark mode — it never leaves your device and we never see it. If you submit the contact form or start a trial, the information you enter (name, email, and anything else you type) is sent to us or to the application to act on your request.

The application (app.marquecrm.com)

When you sign up for or use Marque, we process the account and usage data needed to run the service you asked for: your name and email, the client, project, financial and support records your agency creates in the product, and standard technical logs (IP address, timestamps, error reports) used to operate and secure the application. If you connect a third-party service — Stripe, Xero, QuickBooks, Google, or a mailbox — we process what that integration requires to work, and only while it is switched on.

We do not sell personal data, and we do not use your clients' data for anything other than providing the service to you.

The browser extension (Marque Time Tracker)

Marque Time Tracker complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Browser data is used only for the time-tracking features described here, never sold, used for advertising or used for unrelated analytics.

The extension's timer — starting, stopping and describing a time entry — sends only what you type into that form, the same as using Marque in a browser tab. Automatic tracking is a separate, optional feature: it is off for everyone until you tick it on, and each of the three things it can do is its own tick, off by default, changeable at any time from the extension's Settings.

On your connected Marque pages, the extension also reads the current client, project or task ID and its heading to offer a timer shortcut. That context stays in this browser until you choose it for a timer; full page addresses, query strings and fragments are not stored. The browser keeps your sign-in token, account/agency identity, settings and unsynced time in extension-local storage. Pending time is kept with its original account and agency; switching to a different connection requires finishing that sync first.

• Track my clients' sites — for a website whose address matches one of your agency's clients, we record the hostname (e.g. acmecorp.com, never the full address, its query string or anything on the page), the start time, the end time, the duration, and which client it matched.
• Also record other sites — the same, for hostnames that don't match a client, so you can assign them to one afterwards. Off unless you tick it separately.
• Include Claude conversations — time spent on claude.ai, together with the conversation's title and the name of the Claude Project it sits in (used the same way a hostname is, to work out which client the time belongs to). Nothing inside the conversation — no message, no attachment — is ever read.

Sign-in pages (Google, Microsoft, Apple account pages) are never recorded, whatever you've ticked. Captured time is machine-generated and unreviewed: it is kept apart from your billable time entries until a person in your agency reviews it and promotes it into one. Turning a box off in Settings stops new recording immediately. The automatic-tracking master switch pauses all three kinds; disconnecting also stops new capture and removes the sign-in token. Your capture choices, blocklist, original connection identity and anything not yet uploaded stay on that computer until you reconnect. Previously collected time may finish syncing after capture is paused.

Claude Code time capture

tools/claude-code-hook/ is an optional hook each person installs themselves for their own terminal use of Claude Code, so that work is not invisible to time tracking just because it didn't happen in a browser. Per session it sends: how long the session ran, the repository's git remote address with any embedded username or token removed first, and the name of the working folder on its own (never the full file path, and never anything inside it). No prompts, no file contents and no command output are ever read or sent. It attributes that time to whichever client has the repository's address set against one of their sites in Marque; until that is set, the time waits in review like any other unmatched host.

Where this is stored, and for how long

Both of the above are stored on the same servers as the rest of the application (see "Where data is processed" below), visible only to you and your agency's managers inside Marque — never sold, never used for advertising, and never shared with anyone outside your agency. We don't currently delete it on a fixed schedule; it is kept until you ask us to remove it (email hello@marquecrm.com) or until the account it belongs to is deleted. Turning off a tracking choice, or uninstalling the extension or the hook, stops anything new being collected straight away; it does not by itself delete what was already uploaded — ask us, and we will.

Where data is processed

Application data is hosted on servers we operate in the European Union (Vienna, Austria, with netcup GmbH as the hosting provider). The UK recognises the EU as providing adequate protection for personal data, so no additional transfer safeguards are needed. Sub-processors we use to run the service — for payments, transactional email and content delivery — are listed on our security page.

Your rights

Under UK GDPR you can ask us what personal data we hold about you, ask us to correct or delete it, or ask for a copy of it. For your own client and business data inside Marque, you can already export or delete most of it yourself from within the app; for anything else, email hello@marquecrm.com and we will respond within 30 days.

Changes

If we materially change this policy we will update the date at the top of this page. For anything not covered here, or to request a Data Processing Agreement, contact us.