Privacy Policy

What & Why

We collect and use the following information to provide, improve and protect our Services:

Account information. We collect, and associate with your account, the information you provide to us when you do things such as sign up for your account, subscribe to a paid plan and set up two-factor authentication (such as your name, email address, phone number, payment info and physical address). Some of our Services let you access your accounts and your information via other service providers.

Your Data. Our Services are designed to make it simple for you to store your files, documents, photos, comments, messages and so on (“Your Data”), collaborate with others and work across multiple devices. To make that possible, we store, process and transmit Your Data as well as information related to it. This related information includes your profile information, which makes it easier to collaborate and share Your Data with others, as well as things like the size of the file, the time it was uploaded, collaborators and usage activity. Our Services provide you with different options for sharing Your Data.

Contacts. You can choose to give us access to your contacts to make it easy for you to do things like share and collaborate on Your Data, send messages and invite others to use the Services. If you do, we’ll store those contacts on our servers for you to use.

Usage information. We may collect information relating to how you use the Services, including actions you take in your account (such as sharing, editing, viewing and moving files or folders). We use this information to improve our Services, develop new services and features, and protect Marshal users.

Device information. We may also collect information from and about the devices you use to access the Services. This includes things like IP addresses, the type of browser and device you use, the web page you visited before coming to our sites, and identifiers associated with your devices. Your devices (depending on their settings) may also transmit location information to the Services.

Cookies and other technologies. We use technologies such as cookies and pixel tags to provide, improve, protect and promote our Services. For example, cookies help us with things like remembering your username for your next visit, understanding how you are interacting with our Services, and improving them based on that information. You can set your browser to not accept cookies, but this may limit your ability to use the Services. If our systems receive a DNT:1 signal from your browser, we’ll respond to that signal as required.

Marketing. We give users the option to use some of our Services free of charge. These free Services are made possible by the fact that some users upgrade to one of our paid Services. If you register for our free Services, we will, from time to time, send you information about upgrades when permissible. Users who receive these marketing materials can opt out at any time. If you do not want to receive marketing materials from us, simply click the ‘Unsubscribe’ link in any email.

We sometimes contact people who do not have a Marshal account. For recipients in the EU, we or a third party will obtain consent before contacting you. If you receive an email and no longer wish to be contacted by Marshal, you can unsubscribe and remove yourself from our contact list via the message itself.

Bases for processing your data. We collect and use the personal data described above in order to provide you with the Services in a reliable and secure manner. We also collect and use personal data for our legitimate business needs. To the extent that we process your personal data for other purposes, we ask for your consent in advance or require our partners to obtain such consent.

With whom

We may share information as discussed below, but we won’t sell it to advertisers or other third parties.

Others working for and with Marshal. Marshal uses certain trusted third parties (such as providers of customer support and IT services) to help us provide, improve, protect and promote our Services. These third parties will only access your information to perform tasks on our behalf in compliance with this Privacy Policy, and we’ll remain responsible for their handling of your information per our instructions.

Other users. Our Services display information such as your name, profile picture, device and email address to other users in places like your user profile and sharing notifications. You can also share Your Data with other users if you choose. When you register your Marshal account with an email address on a domain owned by your employer or organisation, we may help collaborators and administrators find you and your team by making some of your basic information – such as your name, team name, profile picture and email address – visible to other users on the same domain. This helps you sync up with teams you can join and helps other users share files and folders with you.

Certain features let you make additional information available to others.

Other applications. You can also give third-party providers access to your information and account, for example via Marshal APIs. Just remember that their use of your information will be governed by their privacy policies and terms.

Marshal team admins. If you are a user of a Marshal team (e.g. an administrator for a company registered with a Marshal account), your Principal Account Holder (PAH) may have the ability to access and control your Marshal team account. Please refer to your organisation’s internal policies if you have questions about this..

Law & order and the public interest. We may disclose your information to third parties if we determine that such disclosure is reasonably necessary to: (a) comply with any applicable law, regulation, legal process or appropriate government request; (b) protect any person from death or serious bodily harm; (c) prevent fraud or abuse of Marshal or our users; (d) protect Marshal’s rights, property, safety or interest; or (e) perform a task carried out in the public interest.

Stewardship of your data is critical to us and a responsibility that we embrace. We believe that your data should receive the same legal protections regardless of whether it’s stored on our Services or on your home computer’s hard drive. We’ll abide by Government Request Principles when receiving, scrutinising and responding to government requests (including national security requests) for your data:

• Be transparent,
• Fight blanket requests,
• Protect all users and
• Provide trusted services.

Security

Security. We are dedicated to keeping your information secure and testing for vulnerabilities. We also continue to work on features to keep your information safe, such as two-factor authentication, encryption of files at rest, and alerts when new devices and apps are linked to your account. We deploy automated technologies to detect abusive behaviour and content that may harm our Services, you or other users.

User controls. You can access, amend, download and delete your personal information by logging in to your Marshal account.

Retention. When you sign up for an account with us, we’ll retain information you store on our Services for as long as your account is in existence or for as long as we need it to provide you with the Services. If you delete your account, we will initiate deletion of this information after 30 days. But please note: (1) there might be some latency in deleting this information from our servers and backup storage, and (2) we may retain this information if necessary to comply with our legal obligations, resolve disputes or enforce our agreements.

Where

Around the world. To provide you with the Services, we may store, process and transmit information in the United States and locations around the world, including outside your country. Information may also be stored locally on the devices you use to access the Services.

EU-US Privacy Shield and Swiss-US Privacy Shield. When transferring data from the European Union, the European Economic Area and Switzerland, Marshal relies on a variety of legal mechanisms, including contracts with our customers and affiliates. Marshal complies with the EU-US and Swiss-US Privacy Shield Frameworks as set forth by the US Department of Commerce regarding the collection, use and retention of personal information transferred from the European Union, the European Economic Area and Switzerland to the United States.

Changes

If we are involved in a reorganisation, merger, acquisition or sale of our assets, your information may be transferred as part of that deal. We will notify you (for example, via a message to the email address associated with your account) of any such deal, and outline your choices in that event.

We may revise this Privacy Policy from time to time, and will post the most current version on our website. If a revision meaningfully reduces your rights, we will notify you.

Your right to control and access your information

You have control over your personal information and how it is collected, used and shared. For example, you have a right to:

• Erase or delete all or some of Your Data in your Marshal account.
• Change or correct personal data. You can manage your account and the content contained in it, as well as edit some of your personal data, through your account settings page.
• Access and take your data. You can download a copy of Your Data in a machine-readable format. You can also ask us for a copy of personal data you provided to us.

Contact

If you reside in North America (the United States, Canada and Mexico), your personal information is controlled by Marshal, Inc. For all other users, your personal information is controlled by Marshal International Unlimited Company. Do you have questions or concerns about Marshal, our Services and privacy? Contact our Data Protection Officer at support@marshalhub.com. If they can’t answer your question, you have the right to contact your local data protection supervisory authority.