Last updated: 1 June 2025
Privacy Policy
MarCloud Integration Audit — audit.marcloudconsulting.com
Background
MarCloud Limited ("We", "Us", "Our") understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of everyone who uses Our web application at audit.marcloudconsulting.com ("Our Web App") and will only collect and use personal data in ways that are described here, and in a way that is consistent with Our obligations and your rights under the law.
1. Information About Us
Our Web App is owned and operated by MarCloud Limited, a limited company registered in England under company number 11505110.
Registered address: Barnston House Beacon Lane, Heswall, Wirral, United Kingdom, CH60 0EE.
Email: support@marcloudconsulting.com
2. What Does This Policy Cover?
This Privacy Policy applies to your use of Our Web App. It covers the personal data We collect when you create an Account, the HubSpot portal data We access when you run an Audit, and how We process and store that data.
3. Your Rights
Under data protection legislation (the UK GDPR and Data Protection Act 2018), you have the following rights:
- The right to be informed about Our collection and use of your personal data.
- The right to access the personal data We hold about you.
- The right to have your personal data rectified if it is inaccurate or incomplete.
- The right to be forgotten — you may ask Us to delete your personal data.
- The right to restrict the processing of your personal data.
- The right to object to Our use of your personal data.
- The right to withdraw consent at any time.
- The right to data portability.
To exercise any of these rights, please contact Us at support@marcloudconsulting.com.
If you have any cause for complaint about Our use of your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). We would welcome the opportunity to resolve your concerns ourselves first.
4. What Personal Data We Collect
Account Data (provided by you)
| Data | How We Collect It | Purpose |
|---|---|---|
| Full name | Signup form | Account identification |
| Email address | Signup form | Account login, communications |
| Company name | Signup form | Account context, report personalisation |
| Password | Signup form | Authentication (stored as a cryptographic hash — We cannot read your password) |
HubSpot Portal Data (accessed via OAuth)
When you connect a HubSpot portal and run an Audit, We access the following data via the HubSpot API using read-only OAuth permissions:
| Data Category | What We Access | What We Do NOT Access |
|---|---|---|
| Contacts | Aggregate counts, property completeness rates, lifecycle stage distribution | Individual contact names, email addresses, phone numbers, or personal details |
| Companies | Aggregate counts, property completeness, owner assignment rates | Individual company financial data or confidential business information |
| Deals | Aggregate counts, pipeline distribution, stage counts, win rates, amounts | Individual deal details, negotiation notes, or contract terms |
| Properties | Property definitions, custom property counts, population rates | Individual property values on specific records |
| Workflows | Workflow counts, types, active status | Workflow logic, internal business process details |
| Email Performance | Aggregate open rates, click rates, delivery rates, bounce rates | Individual email content, recipient lists, or message bodies |
| Forms | Form counts, submission counts | Individual form submission data or respondent details |
| Users | User counts, role assignments, team memberships | User passwords, personal contact details, or activity logs |
| Pipelines | Pipeline names, stage definitions, deal counts per stage | Individual deal details within stages |
| Integrations | Connected app names, Salesforce sync status | Integration credentials, API keys, or authentication tokens |
| Account Info | Account type, portal ID, data hosting location | Billing information, subscription details, or payment data |
Important: We access aggregate and metadata-level information for the purpose of scoring your portal's health. We do not access, store, or process individual contact records, email content, deal negotiation details, or any data that would identify specific individuals in your HubSpot database.
Payment Data
Payment processing is handled entirely by Stripe. We do not collect, store, or have access to your payment card details. Stripe's privacy policy applies to payment transactions: https://stripe.com/privacy.
We store a reference to your Stripe customer ID and payment history (date, amount, credits purchased) for Our records and your Account billing history.
5. How We Use Your Data
| What We Do | Data Used | Lawful Basis |
|---|---|---|
| Provide and manage your Account | Name, email, company, password hash | Performance of a contract |
| Run Audits on your connected portals | HubSpot portal data (as described above) | Performance of a contract |
| Generate Audit Reports | HubSpot portal data, aggregated and scored | Performance of a contract |
| Process payments | Stripe customer reference | Performance of a contract |
| Send service communications (account updates, audit completion notices) | Email address | Legitimate interest |
| Improve Our Web App | Aggregated, anonymised usage patterns | Legitimate interest |
We will not send you marketing emails without your express consent.
6. How Long We Keep Your Data
| Data Type | Retention Period |
|---|---|
| Account data (name, email, company) | For the duration of your Account, plus 12 months after closure |
| Audit results and reports | For the duration of your Account (to enable audit-over-audit comparison). Deleted upon Account closure request |
| Payment records | 7 years (required for tax and accounting purposes) |
| HubSpot OAuth tokens | Until the portal is disconnected or Account is closed |
7. Where We Store Your Data
Your data is stored on servers operated by:
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Web application hosting and database (Vercel Postgres) | EU region where available; US with EU data transfer safeguards otherwise |
| Stripe | Payment processing | EU and US (governed by Stripe's data processing agreement) |
| HubSpot | OAuth authentication provider (We do not store data on HubSpot's servers — data flows from HubSpot to Our servers) | EU or US depending on your HubSpot portal's data hosting location |
Where data is transferred outside of the UK or EEA, We ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms.
8. Data Sharing
We do not sell, rent, or share your personal data with third parties for marketing purposes.
We may share data with the following categories of third party, strictly for the purposes described:
| Recipient | Purpose |
|---|---|
| Stripe | Payment processing |
| Vercel | Hosting and database services |
| HubSpot | OAuth authentication |
| Law enforcement or regulatory authorities | Where required by law |
If We sell or merge Our business, your data may be transferred to the new owner, who will be bound by the same obligations as set out in this Policy.
9. Cookies
Our Web App uses only essential cookies required for authentication and session management. We do not use marketing cookies, tracking cookies, or third-party analytics on the audit application.
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookie | Maintains your logged-in state | Expires on logout or after 30 days of inactivity |
10. How to Contact Us
For any questions about this Privacy Policy, to exercise your data protection rights, or to make a complaint, please contact Us:
Email: support@marcloudconsulting.com
Postal address: MarCloud Limited, Barnston House Beacon Lane, Heswall, Wirral, United Kingdom, CH60 0EE.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We recommend checking this page periodically.
MarCloud Limited
Company Number: 11505110