Last updated: September 24, 2026
Welcome to Arcade Software. Arcade Software (“us”, “we”, or “our”) operates https://arcade.software (hereinafter referred to as “Service”). Our Privacy Policy governs your use of https://arcade.software, our applications, browser extension, and plugins, and applies when you view an Arcade published using our Service, wherever it appears. It explains how we collect, safeguard and disclose information that results from your use of our Service. We use your data to provide and improve Service. By using Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy have the same meanings as in our Terms of Service. Our Terms of Service (“Terms”) govern all use of our Service and together with the Privacy Policy constitutes your agreement with us.
SERVICE means the https://arcade.software website operated by Arcade Software.
PERSONAL DATA means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).
USAGE DATA is data collected automatically either generated by the use of Service or from Service infrastructure itself (for example, the duration of a page visit).
COOKIES are small files stored on your device (computer or mobile device).
DATA CONTROLLER means a natural or legal person who (either alone or jointly or in common with other persons) determines For the purpose of this Privacy Policy, we are a Data Controller of your data, except where expressly stated otherwise.
DATA PROCESSORS (OR SERVICE PROVIDERS) means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.
DATA SUBJECT is any living individual who is the subject of Personal Data.
THE USER is the individual using our Service. The User corresponds to the Data Subject, who is the subject of Personal Data.
This Privacy Policy does not apply to the extent we process information in the role of a processor or service provider on behalf of our customers (for example, your company when you use our tools and Services). In that context, our processing of your Personal Data is subject to our agreements with our customers. Our customers are the Data Controllers and their privacy policies will apply to the processing of your Personal Data. We are not responsible for the privacy or data security practices of our customers, which may differ from those explained in this Privacy Policy.
We collect several different types of information for various purposes to provide and improve our Service to you.
Personal Data
While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personal Data may include, but is not limited to:
(a) Email address
(b) First name and last name
(c) Cookies and Usage Data
We may use your Personal Data to contact you with newsletters, marketing or promotional materials, and other information that may be of interest to you. You may opt-out of receiving any, or all, of these communications from us by following the unsubscribe link.
Screenshots, Screen Recordings, and Page Data (E.g. HTML)
Arcade captures the screen content you choose to record. What is captured depends on how you record:
You choose what to record and when recording begins and ends.
Content within your recordings. Recordings and screenshots may contain any information displayed on your screen, or audible, at the time of capture, including information relating to other people, for example names, email addresses, or customer records shown in the application you are demonstrating. You are responsible for the content you choose to capture. Arcade provides editing tools that allow you to blur or redact regions of a capture after recording. Arcade does not automatically detect, mask, or remove personal information from captures.
If you use AI features, captured content, including screenshots of your recorded screens, is transmitted to the third-party Service Providers, including those AI providers identified in the Service Providers Section, Subsection Artificial Intelligence below, which process it to generate outputs such as automatic step detection, hotspots, captions, and generated video. These providers process this content solely to generate outputs for your workspace and are subject to the commitments in the Arcade AI Addendum at https://www.arcade.software/ai-terms, including restrictions on the use of your content for model training.
AI Video and Wizard Content
When you use Arcade's AI features to generate a video or demo, we collect and process the content you submit, including:
This content is transmitted to the third-party AI providers identified in the Artificial Intelligence section below in order to generate the outputs you request. Those providers process it solely to generate outputs for your workspace and are subject to the commitments in the Arcade AI Addendum at https://www.arcade.software/ai-terms, including restrictions on the use of your content for model training.
Usage Data
We may also collect information that your browser sends whenever you visit our Service or when you access Service by or through a mobile device (“Usage Data”). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data. When you access Service with a mobile device, this Usage Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.
Tracking Cookies Data
We use cookies, pixels and similar tracking technologies to track the activity on our Service and we hold certain information. Cookies are files with a small amount of data which may include a unique identifier. Cookies are sent to your browser from a website and stored on your device. Other tracking technologies are also used such as beacons, tags and scripts to collect and track information and to improve and analyze our Service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
We use the following types of cookies and other tracking technologies:
(a) Session Cookies: We use Session Cookies to operate our Service.
(b) Preference Cookies: We use Preference Cookies to remember your preferences and various settings.
(c) Security Cookies: We use Security Cookies for security purposes.
(d) Advertising Cookies: Advertising Cookies are used to serve you with advertisements that may be relevant to you and your interests.
Cookies set when you view a published Arcade. When you view an Arcade published by one of our customers, Arcade may set the following cookies:
(a) custom-link-auth: set only on password-protected Arcades, so that you do not need to re-enter the password. It is scoped to that Arcade, expires after one hour, and cannot be read by JavaScript.
(b) arcade_rate_limit: a short-lived cookie, expiring after 60 seconds, used to limit the rate of requests to our systems. It does not identify you.
Additional cookies may be set by analytics and marketing tools that the publishing organisation has connected, which may include Google Analytics, HubSpot, Amplitude, Segment, Intercom, and PostHog. Which of these are set depends on the integrations that organisation has enabled, and those cookies are governed by that organisation's privacy notice and the relevant provider's policies. Where a HubSpot cookie is already present in your browser, Arcade may read it and pass it to the publishing organisation for attribution purposes.
Arcade does provide a separate consent mechanism for published Arcades. Where the organisation publishing an Arcade enables cookie consent, Arcade blocks all cookie and local-storage writes until the viewer has given consent. Whether this is enabled is controlled by the organisation publishing the Arcade.
AI / MCP Integration Data
When you use Arcade through AI integrations, including model context protocol (“MCP”) tools, we process limited data necessary to fulfill user-initiated actions. This section describes data processed when you use Arcade through an external AI assistant.
Data Accessed: Arcade only accesses data required to perform actions explicitly requested by the user through tool calls. This may include workspace name, brand kit data, media library metadata, and demo metadata.
Data Transmitted: When a tool call is triggered, prompts and tool parameters are transmitted securely to Arcade’s API over HTTPS. If you provide website URLs as part of a brand kit, Arcade may fetch and process those pages server-side to extract branding information.
Data Stored: Brand kits, generated videos, and uploaded media are stored within your Arcade workspace. MCP session tokens are temporary and are not retained beyond the active session.
Data Not Stored: Arcade does not receive or store full conversation content between users and third-party AI assistants. Only the specific inputs included in user-initiated tool calls (such as prompts, URLs, or asset identifiers) are transmitted to Arcade.
Third-Party Services: Generated videos may include stock footage or assets from licensed third-party providers. Website content processing for branding extraction is performed server-side by Arcade.
For content you submit directly to Arcade's own AI features, see AI Video and Wizard Content above.
Viewer Data
When a demo, video, or Arcade you have created is viewed, we collect information about that viewing session, including the viewer's IP address, approximate location derived from it, browser and device type, the steps or pages viewed, time spent, and interactions such as clicks on hotspots or calls to action. Where enabled, we also collect information a viewer submits through a form within an Arcade.
We may use a third-party enrichment provider to associate a viewer's IP address with organisation-level information, such as company name and industry, in order to provide audience insights to the Arcade's creator.
Viewer information is made available to the workspace that published the Arcade and, where that workspace has connected an integration, transmitted to the analytics or CRM services it has enabled.
Other than in relation to third-party enrichment data, Arcade processes viewer information on behalf of the workspace that published the Arcade, and that workspace determines the purposes for which the information is used. If you are a viewer and wish to exercise your data protection rights, please contact the organisation whose Arcade you viewed, or contact us at [email protected] and we will direct your request to them.
Arcade acts as a controller in respect of the enrichment described above, and processes that information on the basis of its legitimate interest in providing audience analytics to Arcade creators. You may object to this processing at any time by contacting [email protected].
Arcade Software uses your Personal Data for various purposes: (a) to provide and maintain our Service; (b) to notify you about changes to our Service; (c) to allow you to participate in interactive features of our Service when you choose to do so; (d) to provide customer support; (e) to gather analysis or valuable information so that we can improve our Service; (f) to monitor the usage of our Service; (g) to detect, prevent and address technical issues; (h) to fulfill any other purpose for which you provide it; (i) to carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection; (j) to provide you with notices about your account and/or subscription, including expiration and renewal notices, email-instructions, etc.; (k) to provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information; (l) in any other way we may describe when you provide the information; (m) for any other purpose with your consent; and (n) to improve performance and provide you with a better user experience.
We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.
Content you create. Recordings, screenshots, uploaded media, and content generated by AI features are retained in your workspace until you or your workspace administrator deletes them, or until your account is closed.
Following account closure, we delete Personal Data as described under Your Data Protection Rights below.
Your information, including Personal Data, may be transferred to – and maintained on – computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United States and process it there. For transfers of personal data from the European Economic Area, Switzerland, or the United Kingdom to the United States or other countries not deemed to provide an adequate level of data protection, we rely on your consent or Standard Contractual Clauses approved by the European Commission or the UK Information Commissioner, as applicable. A copy of the relevant Standard Contractual Clauses is available upon request by contacting [email protected]. Arcade Software will take all the steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.
We may disclose Personal Data that we collect, or you provide:
(a) Disclosure for Law Enforcement. Under certain circumstances, we may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities.
(b) Business Transaction. We may transfer your information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets. The use of your information following any of these events will be governed by the provisions of this Privacy Policy in effect at the time the applicable information was collected.
(c) Other cases. We may disclose your information also: (i) to our subsidiaries and affiliates; (ii) to contractors and service providers we use to support our business; See the Service Providers section below for more information when we engage contractors and service providers; (iii) and other third parties to support our business and to fulfill the purpose for which you provide it. You have the right to request once per calendar year a list of the categories of Personal Data we share with third parties for their direct marketing purposes, and the names and addresses of those third parties. Please contact us at [email protected] to make a request.
We may engage with third-party companies and individuals to facilitate our Service (“Service Providers”), provide Service on our behalf, perform Service-related services or assist us in analyzing how our Service is used. For example, we use certain hosting providers, AI providers and analytics providers. For a list of our subprocessor Service Providers, please see arcade.software/subprocessors.
Payment Provider(s)
We use Stripe, Inc. ("Stripe") to process payments on our website and through our services. When you make a purchase or submit payment information, we share the personal data necessary to complete your transaction with Stripe, including your name, billing address, email address, payment card details, and IP address.
For the purpose of processing your payment, Stripe acts as our service provider (as noted in our Service Provider section below). However, Stripe also acts as an independent data controller with respect to certain personal data it collects and processes in connection with its payment services, including for fraud prevention, risk management, compliance with its legal and regulatory obligations, and the improvement of Stripe's own services. As an independent controller, Stripe determines the purposes and means of that processing on its own behalf and is independently responsible for meeting its obligations under applicable data protection laws.
Stripe's collection, use, and sharing of your personal data in its capacity as an independent controller is governed by Stripe's own Privacy Policy, available at https://stripe.com/privacy. We encourage you to review Stripe's Privacy Policy to understand how Stripe handles your information.
Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC (“Google”), to help us understand how visitors use our Service. When you visit our Service, Google Analytics collects information such as your IP address, browser type, pages visited, time spent on pages, and referring URLs.
For the purpose of providing web analytics, Google acts as our service provider (as noted in our Service Provider section below). However, under Google’s Ads Data Processing Terms, Google also acts as an independent data controller with respect to certain data it collects and processes in connection with Google Analytics, including for maintaining and protecting the security and integrity of its services, complying with applicable laws, and billing. As an independent controller for these limited purposes, Google determines the purposes and means of that processing on its own behalf and is independently responsible for meeting its obligations under applicable data protection laws.
Google’s collection, use, and sharing of your information in its capacity as an independent controller is governed by Google’s Privacy Policy, available at https://policies.google.com/privacy. For more information on how Google Analytics collects and processes data, please visit https://support.google.com/analytics/answer/6004245.
The security of your data is important to us but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
If you are a resident of the European Union (EU) and European Economic Area (EEA), you have certain data protection rights, covered by GDPR.
See more at https://eur-lex.europa.eu/eli/reg/2016/679/oj
We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data. If you wish to be informed what Personal Data we hold about you, or want it removed from our systems, please email us at [email protected]. When we delete Personal Data, we remove it from our production systems and from our primary third-party storage and media-processing providers. Copies held in automated backup, archival, or disaster-recovery systems, and usage, telemetry, and analytics records, cannot be deleted without unreasonable effort; these are deleted in the ordinary course of our data-retention cycle and remain protected for as long as they are retained.
In certain circumstances, you have the following data protection rights:
(a) the right to access, update or to delete the information we have on you;
(b) the right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete;
(c) the right to object. You have the right to object to our processing of your Personal Data;
(d) the right of restriction. You have the right to request that we restrict the processing of your personal information;
(e) the right to data portability. You have the right to be provided with a copy of your Personal Data in a structured, machine-readable and commonly used format;
(f) the right to withdraw consent. You also have the right to withdraw your consent at any time where we rely on your consent to process your personal information.
Please note that we may ask you to verify your identity before responding to such requests. Please note, we may not able to provide Service without some necessary data. You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).
Automated Decision-Making. We do not use your personal data for automated decision-making, including profiling, that produces legal or similarly significant effects concerning you.
Legal Basis for Processing (EEA/UK Users). If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: (a) Performance of a contract: where processing is necessary to provide you with the Service you have requested; (b) Legitimate interests: where processing is necessary for our legitimate business interests (such as improving the Service, fraud prevention, and security), provided those interests are not overridden by your rights; (c) Consent: where you have given your consent to processing for a specific purpose (such as marketing communications); and (d) Legal obligation: where processing is necessary to comply with a legal obligation to which we are subject.
Data Protection Representative. If you have any questions about our data protection practices or wish to exercise your rights under the GDPR, you may contact us at [email protected]. We value your privacy and your rights as a data subject and have therefore appointed Prighter Group, with its local partners, as our privacy representative and your point of contact for the following :
(a) European Union
(b) United Kingdom
Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/16309175083
Global Privacy Control: Global Privacy Control (“GPC”) is a browser-based signal that communicates your opt-out preference for the sale or sharing of personal information. When we detect a GPC signal from your browser, we treat it as a valid request to opt out of any sale or sharing of personal information associated with that browser, to the extent required by applicable law. You do not need to take any additional action to exercise this right when using a browser that supports GPC. For more information about GPC, visit https://globalprivacycontrol.org.
If applicable, residents of certain states with comprehensive privacy laws may have additional rights under those laws. To the extent these laws apply to our processing of your Personal Data, based on your state of residency, you may have the following rights:
(a) Right to Know/Access: the right to confirm whether we are processing your personal data and to access such data;
(b) Right to Correct: the right to correct inaccuracies in your personal data;
(c) Right to Delete: the right to delete personal data you have provided to us or that we have collected about you;
(d) Right to Data Portability: the right to obtain a copy of your personal data in a portable and, to the extent technically feasible, readily usable format;
(e) Right to Opt Out: the right to opt out of (i) targeted advertising, (ii) the sale of personal data, and (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
Arcade does not sell your personal data, engage in targeted advertising, or profile consumers in furtherance of decisions that produce legal or similarly significant effects.
How to Exercise Your Rights. To exercise any of these rights, please email [email protected]. We will respond within the timeframes required by applicable law.
Right to Appeal. If applicable under your state’s law, if we decline to take action on your request, you may appeal that decision by emailing [email protected] with the subject line “Appeal.” We will inform you in writing of any action taken or not taken in response to the appeal and provide a written explanation of the reasons for the decision. If your appeal is denied, you may have the right to contact your state’s Attorney General to submit a complaint.
Sensitive Personal Data. To the extent required by applicable state law, we will obtain your consent before processing sensitive personal data. Sensitive personal data may include, depending on the applicable law, data revealing racial or ethnic origin, religious beliefs, health information, sexual orientation, citizenship or immigration status, genetic or biometric data processed for identification purposes, personal data of known children, and precise geolocation data. As described in this Privacy Policy, Arcade does not collect most categories of sensitive personal data. Where we process audio recordings that may contain your voice, we do so only at your direction and do not use such recordings to create voice models, voiceprints, or other biometric identifiers.
De-identified Data. We may process de-identified data that cannot reasonably be linked to you. We commit to maintaining and using such data in de-identified form and will not attempt to re-identify the data, except as permitted by applicable law to determine whether our de-identification processes are effective.
Links to Other Sites. Our Service may contain links to other sites that are not operated by us. If you click a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Our Service does not target anyone under the age of 18 (“Children”). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update “effective date” at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
If you have any questions about this Privacy Policy, please contact us: [email protected].
