Last updated July 19, 2026
This Privacy Policy describes how Arcacopia LLC (“Arcacopia,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with the Arcacopia capital-raise platform, the website at arcacopia.com, and related services (collectively, the “Service”). Please read it carefully. By accessing or using the Service, you acknowledge that you have read and understood this Policy.
This Policy applies to information we process about visitors to our website, individuals who create an account, personnel of companies that use the Service (“Customers”), investors and other participants a Customer engages through the Service, and others who interact with us.
Where Arcacopia LLC processes information on behalf of a Customer to provide the Service (for example, investor records a Customer stores on the platform), we act as a processor/service provider, and the Customer is the controller responsible for that information. In those cases, the Customer’s own privacy notice governs, and this Policy describes our practices as a service provider.
If you do not agree with this Policy, please do not use the Service.
Arcacopia LLC is the entity responsible for the information described in this Policy where we act as a controller. You can reach us regarding privacy at [email protected], or in writing at the address listed on our website.
Account and profile information: your name, email address, password, company or organization name, role, phone number, and similar registration details.
Raise, entity, and transaction information: information you submit to run a raise or an entity conversion, which may include company details, offering terms, cap-table data, investor names and contact details, accreditation representations, signatures, and uploaded documents.
Payment information: when you purchase tokens or a plan, our third-party payment processor collects your payment-card or bank details. We do not store full payment-card numbers; we receive limited transaction data such as the last four digits, card brand, and payment status.
Communications: information you provide when you contact us, request support, respond to surveys, or otherwise communicate with us.
Usage data: pages and features you view and use, actions taken, time and date of access, referring pages, and other interaction data.
Device and connection data: IP address, browser type and version, operating system, device identifiers, and general location inferred from IP address.
Cookies and similar technologies: we and our providers use cookies, local storage, and similar technologies to operate the Service, remember preferences, maintain sessions, and understand usage. See Section 9.
We may receive information from service providers (such as our payment processor, email and analytics vendors, and identity or accreditation verification providers), from Customers who invite you to the Service, and from publicly available sources used to help match investors and founders.
To provide, operate, maintain, and secure the Service; to create and manage accounts and authenticate users; to run raises, conversions, and matching; and to process transactions and administer token balances.
To communicate with you, including service-related notices, security alerts, support responses, and, where permitted, marketing communications you can opt out of.
To improve and develop the Service, including analyzing usage, debugging, and building new features. Where we use aggregated or de-identified data for analytics or product improvement, we maintain it in a form that does not reasonably identify you.
To detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms; and to comply with legal obligations and enforce our agreements.
The Service uses artificial intelligence and automated processing to source and score potential investor matches, draft and assemble documents, prepare filings, and generate suggested actions. These outputs are decision-support tools; a human user reviews and approves material actions. We do not use your data to make legally significant decisions about you without human involvement. We do not sell your personal information to train third-party models, and we apply access controls and tenant isolation to Customer data.
Service providers and subprocessors: we share information with vendors that perform services for us — hosting and infrastructure, payment processing, email delivery, analytics, and security — under contracts that limit their use of the information to providing services to us.
Attorney network: where you use conversion or legal-adjacent features, we may share relevant information with independent attorneys in our partner network so they can review or prepare documents. Those attorneys are independent third parties, not employees or agents of Arcacopia.
Other users you choose: when you run a raise or participate in the network, information you elect to share (such as an offering or an investor communication) is shared with the intended recipients.
Legal and safety: we may disclose information to comply with law, regulation, legal process, or governmental request, and to protect the rights, property, and safety of Arcacopia, our users, and others.
Business transfers: if we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
With your consent or at your direction. We do not sell your personal information for money.
We use strictly necessary cookies to operate the Service and maintain sessions, and functional and analytics technologies to remember preferences and understand usage. You can control cookies through your browser settings; blocking some cookies may impair functionality. Where required, we present a cookie banner and honor recognized opt-out preference signals.
We retain personal information for as long as needed to provide the Service, maintain your account, comply with our legal obligations (including tax, accounting, and securities-related recordkeeping applicable to a raise), resolve disputes, and enforce our agreements. Retention periods vary by the type of information and the purpose for which it was collected. When information is no longer needed, we delete or de-identify it.
We maintain administrative, technical, and organizational safeguards designed to protect information, including encryption in transit, access controls, and tenant isolation that restricts each Customer’s data to that Customer. No system is perfectly secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and for the security of the data you upload.
We are based in the United States and process information there. If you access the Service from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States and other countries whose data-protection laws may differ from those in your jurisdiction. Where required, we implement appropriate safeguards for cross-border transfers, such as standard contractual clauses.
Depending on where you live, you may have the right to access the personal information we hold about you; to correct inaccurate information; to delete information; to obtain a portable copy; to restrict or object to certain processing; and to withdraw consent where processing is based on consent.
To exercise these rights, contact us at [email protected]. We will verify your request and respond as required by applicable law. You may authorize an agent to act on your behalf. We will not discriminate against you for exercising your rights.
If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have specific rights, including the right to know the categories and specific pieces of personal information we collect, the sources, the purposes, and the categories of recipients; the right to delete and to correct; and the right to opt out of “sale” or “sharing” of personal information and of certain targeted advertising and profiling.
We do not sell personal information for money. To the extent any data practice qualifies as a “share” for cross-context behavioral advertising under applicable law, you may opt out. We do not use or disclose sensitive personal information beyond the purposes permitted by law. Where we act as a service provider or processor for a Customer, please direct rights requests to that Customer.
Where the EU or UK GDPR applies, our legal bases for processing are: performance of a contract with you; our legitimate interests in operating, securing, and improving the Service (balanced against your rights); your consent (which you may withdraw); and compliance with legal obligations.
You have the rights described above and the right to lodge a complaint with your local supervisory authority. Where processing is based on legitimate interests, you may object to that processing.
The Service is intended for businesses and adults. It is not directed to children under 18, and we do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it.
The Service may contain links to third-party websites and integrate third-party services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy notices.
We may update this Policy from time to time. When we do, we will revise the “Last updated” date and, if the changes are material, provide additional notice as required by law. Your continued use of the Service after an update takes effect constitutes acceptance of the revised Policy.
If you have questions, requests, or complaints regarding this Policy or our data practices, contact Arcacopia LLC at [email protected].